topic Re: Endpoint Security Install on Servers in Endpoint

Endpoint Security Install on Servers

David_Levine — Mon, 03 Jun 2019 15:38:06 GMT

Hi All,

I am starting to deploy the endpoint client to servers. We are licensed for endpoint complete, but I am wondering what blades others have installed in this scenario. I am thinking to stick with installing AntiMalware only on the servers, leaving SBA, AB, TE, MEPP, etc. for just the client workstations.

What are you all doing for this? Especially curious as it related to servers running services like AD Domain Controllers, SQL Servers, Sharepoint servers, etc.

Thanks in advance;

Re: Endpoint Security Install on Servers

PhoneBoy — Wed, 05 Jun 2019 20:18:22 GMT

It depends on how the server is administered, I think.
The more "end user" like things you do on the server (i.e. use a web browser, have physical access to it), the more of the blades you should run.
A decent minimum set for a proper server seems to be Anti-Bot and Anti-Malware.

Re: Endpoint Security Install on Servers

Boaz_Barzel — Wed, 05 Jun 2019 20:26:03 GMT

For Servers deployment I would run Anti-Malware and Forensics with Learning mode configuration at first

Then I would add additional components, such as Anti-Ransomware and Behavioral Guard, Anti-Bot and Threat Emulation for the file system. I would start with learning mode configuration and create the relevant exclusions based on the server type and the component deployed

It is recommended that for servers deployment and policy configuration you will separate the policy rules that will provide you with more complete control over the servers deployment and policy

please read the following SK to learn more about learning mode to best practice and the configuration

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153713

Re: Endpoint Security Install on Servers

David_Levine — Thu, 06 Jun 2019 15:49:51 GMT

Thanks for the reply;

I am reading through the sk's you referenced regarding Learning Mode. This is very helpful... Is this something that is incorporated in official training / documentation?

Cheers!

Re: Endpoint Security Install on Servers

PhoneBoy — Thu, 06 Jun 2019 17:28:49 GMT

SecureKnowledge is a form of official documentation.
I imagine we'll add it to the product documentation in upcoming releases.

Re: Endpoint Security Install on Servers

David_Levine — Thu, 06 Jun 2019 19:03:34 GMT

Totally agree... just hadn't seen it before, and am finding it helpful!