topic Re: How to block files type(.chm) from Check Point SmartEndPoint in Endpoint

How to block files type(.chm) from Check Point SmartEndPoint

gmesaris — Tue, 15 Apr 2025 11:28:16 GMT

Hi everyone,

I would like to block the execution of .CHM (Compiled HTML Help) files on endpoints using Check Point SmartEndpoint / Harmony Endpoint.

Re: How to block files type(.chm) from Check Point SmartEndPoint

Tal_Paz-Fridman — Tue, 15 Apr 2025 11:43:49 GMT

Have you looked at Web & Files Protection:

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Web-and-Files-Protection.htm?TocPath=Configuring%20Endpoint%20Policy%7CConfiguring%20the%20Threat%20Prevention%20Policy%7CWeb%20%26%20Files%20Protection%7C_____0#Web_&_Files_Protection

Re: How to block files type(.chm) from Check Point SmartEndPoint

gmesaris — Tue, 15 Apr 2025 12:00:34 GMT

Hi,

Yes, I have checked it but it does not mention anything regarding block file types.

Re: How to block files type(.chm) from Check Point SmartEndPoint

PhoneBoy — Tue, 15 Apr 2025 16:43:58 GMT

Did you look at Override Default Files Actions in the doc @Tal_Paz-Fridman linked?
You should be able to add a specific "Drop" rule for CHM files as described there.

Re: How to block files type(.chm) from Check Point SmartEndPoint

the_rock — Tue, 15 Apr 2025 17:27:25 GMT

I cant seem to find it either under threat emulation policy and then advanced settings.

Andy