topic Re: I FAILED IN MY THREAT HUNTING. in Endpoint

I FAILED IN MY THREAT HUNTING.

veliz — Mon, 12 May 2025 19:10:33 GMT

"In the threat hunting section, it only reports 35 devices in total, when in reality we have 800. The version our devices contain is 88.62.2010. Has anyone had a similar problem?

Re: I FAILED IN MY THREAT HUNTING.

PhoneBoy — Mon, 12 May 2025 22:18:50 GMT

While I'm not familiar with the screen, perhaps it is showing only the number of devices with reports.
Is your management on-prem or Infinity Portal?

Re: I FAILED IN MY THREAT HUNTING.

the_rock — Mon, 12 May 2025 22:21:47 GMT

Can you attach a screenshot? Please blur out any sensitive data.

Andy

Re: I FAILED IN MY THREAT HUNTING.

Don_Paterson — Tue, 13 May 2025 06:00:27 GMT

Did you refer to the admin guide to confirm procedures and supported features?

Has it changed in behavior from previous times you've used it?

Is your license valid?

TH is only supported in the cloud MaaS / Infinity Portal.

https://sc1.checkpoint.com/documents/r82/webadminguides/en/cp_r82_harmonyendpointwebmanagement_adminguide/content/common-topics/threat-hunting.htm

Re: I FAILED IN MY THREAT HUNTING.

kevinRodriguez1 — Mon, 14 Jul 2025 22:33:57 GMT

Check if you have any DNS issues with NSLOOKUP with 'dteastus2prod3.blob.core.windows.net'.

In my case, they had dropped this route, so we allowed it, and it worked.