<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Doubt about Endpoint Security Behaviour in Endpoint</title>
    <link>https://community.checkpoint.com/t5/Endpoint/Doubt-about-Endpoint-Security-Behaviour/m-p/87881#M2379</link>
    <description>&lt;P&gt;Hello community,&lt;/P&gt;&lt;P&gt;we have a behaviour on our Endpoint Security platform thatI'm not sure if it's normal or not.&lt;/P&gt;&lt;P&gt;We have the example of our server " &lt;SPAN class="fontstyle0"&gt;AMPLUSPRO"&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="fontstyle0"&gt;1. On the following image. We find in Overview that "AMPLUSPRO" communicated with the manager at 11:08:&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="fontstyle0"&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.png" style="width: 687px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6428i40B7F6FD5BF74207/image-size/large?v=v2&amp;amp;px=999" role="button" title="1.png" alt="1.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="fontstyle0"&gt;2. We go to the details of the server and see that it comunicates but also that the last update of the databse was Friday at 01:36&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.png" style="width: 684px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6441i131A1B0600F384BE/image-size/large?v=v2&amp;amp;px=999" role="button" title="2.png" alt="2.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;3. We forced the malware DB from the manager&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="3.png" style="width: 681px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6442i6912980985218955/image-size/large?v=v2&amp;amp;px=999" role="button" title="3.png" alt="3.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;4. We go to "push operations" and see that the order appears:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="4.png" style="width: 678px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6444i558205021A0177B8/image-size/large?v=v2&amp;amp;px=999" role="button" title="4.png" alt="4.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;5. A few moment later we see that " &lt;SPAN class="fontstyle0"&gt;AMPLUSPR&lt;/SPAN&gt;" updated correctly&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="5.png" style="width: 679px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6447i56A7B03EFC23A4B0/image-size/large?v=v2&amp;amp;px=999" role="button" title="5.png" alt="5.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;6. But, comming back to Overview we see that even after that the malware database wasn't been updated.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="6.png" style="width: 682px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6448iADCD0F700D641BB7/image-size/large?v=v2&amp;amp;px=999" role="button" title="6.png" alt="6.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;7. If we log in to the server, we se that the database it also upgrades.&amp;nbsp;&lt;SPAN&gt;It seems that until you log in to the server, the database is not updated.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="7.png" style="width: 686px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6449i653DEA60BC7934B0/image-size/large?v=v2&amp;amp;px=999" role="button" title="7.png" alt="7.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;This is a normal behaviour?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Aitor&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 10 Jun 2020 08:20:39 GMT</pubDate>
    <dc:creator>Jesus_Cano</dc:creator>
    <dc:date>2020-06-10T08:20:39Z</dc:date>
    <item>
      <title>Doubt about Endpoint Security Behaviour</title>
      <link>https://community.checkpoint.com/t5/Endpoint/Doubt-about-Endpoint-Security-Behaviour/m-p/87881#M2379</link>
      <description>&lt;P&gt;Hello community,&lt;/P&gt;&lt;P&gt;we have a behaviour on our Endpoint Security platform thatI'm not sure if it's normal or not.&lt;/P&gt;&lt;P&gt;We have the example of our server " &lt;SPAN class="fontstyle0"&gt;AMPLUSPRO"&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="fontstyle0"&gt;1. On the following image. We find in Overview that "AMPLUSPRO" communicated with the manager at 11:08:&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="fontstyle0"&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="1.png" style="width: 687px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6428i40B7F6FD5BF74207/image-size/large?v=v2&amp;amp;px=999" role="button" title="1.png" alt="1.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="fontstyle0"&gt;2. We go to the details of the server and see that it comunicates but also that the last update of the databse was Friday at 01:36&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.png" style="width: 684px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6441i131A1B0600F384BE/image-size/large?v=v2&amp;amp;px=999" role="button" title="2.png" alt="2.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;3. We forced the malware DB from the manager&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="3.png" style="width: 681px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6442i6912980985218955/image-size/large?v=v2&amp;amp;px=999" role="button" title="3.png" alt="3.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;4. We go to "push operations" and see that the order appears:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="4.png" style="width: 678px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6444i558205021A0177B8/image-size/large?v=v2&amp;amp;px=999" role="button" title="4.png" alt="4.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;5. A few moment later we see that " &lt;SPAN class="fontstyle0"&gt;AMPLUSPR&lt;/SPAN&gt;" updated correctly&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="5.png" style="width: 679px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6447i56A7B03EFC23A4B0/image-size/large?v=v2&amp;amp;px=999" role="button" title="5.png" alt="5.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;6. But, comming back to Overview we see that even after that the malware database wasn't been updated.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="6.png" style="width: 682px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6448iADCD0F700D641BB7/image-size/large?v=v2&amp;amp;px=999" role="button" title="6.png" alt="6.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;7. If we log in to the server, we se that the database it also upgrades.&amp;nbsp;&lt;SPAN&gt;It seems that until you log in to the server, the database is not updated.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="7.png" style="width: 686px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6449i653DEA60BC7934B0/image-size/large?v=v2&amp;amp;px=999" role="button" title="7.png" alt="7.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;This is a normal behaviour?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Regards,&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Aitor&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 10 Jun 2020 08:20:39 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Endpoint/Doubt-about-Endpoint-Security-Behaviour/m-p/87881#M2379</guid>
      <dc:creator>Jesus_Cano</dc:creator>
      <dc:date>2020-06-10T08:20:39Z</dc:date>
    </item>
  </channel>
</rss>

