topic Endpoint Agent for Microsoft Servers, a practical example and some references in Endpoint

Endpoint Agent for Microsoft Servers, a practical example and some references

Eric_Beasley — Thu, 27 May 2021 19:53:14 GMT

We would like to provide a practical example of an implementation of the Check Point Endpoint Security/SandBlast/Harmony Endpoint for Microsoft Servers.

The environment shown was installed with Check Point Endpoint Security which evolved to SandBlast Agent, and currently is called Harmony Agent, with this implementation being an on-prem solution, version R81 OpenServer installation, exclusively running Endpoint.

Client version shown is based on E85.00 GA

Running Harmony Agent in Infinity Portal should be able to utilize the same approach.

(view in My Videos)

Some useful additional resources:

Microsoft
Check Point documents
- Attached "SBA Server Policy Best Practice v3" PDF sourced by @Richard_Comber
Check Point SKs

We may find more information and details for this subject, but this is a start.

Brought to you by:

@Aleksandr_Nosit and @Eric_Beasley

Re: Endpoint Agent for Microsoft Servers, a practical example and some references

Luiz_ — Fri, 28 May 2021 02:58:12 GMT

This is great content, thank you very much!

Re: Endpoint Agent for Microsoft Servers, a practical example and some references

Aleksandr_Nosit — Fri, 28 May 2021 05:52:00 GMT

We hope that community members can further contribute to the topic adding their practical tips and gotchas.

Alec & Eric

Re: Endpoint Agent for Microsoft Servers, a practical example and some references

Cybersugi — Thu, 08 Sep 2022 01:05:58 GMT

Good content, I'm looking for similar content using the fancier Harmony Endpoint using Infinity Portal.

Re: Endpoint Agent for Microsoft Servers, a practical example and some references

anstelios — Wed, 26 Apr 2023 13:48:27 GMT

Hello,

Is there an updated version of this document for Harmony Endpoint (EPMaaS) ?

In general, even after the new server optimization profiles, we often face a similar question:

Which modules should we enable on Servers?

What about Anti-ransomware, Forensics, Behavioral Guard?? All these very often cause issues on Servers (File servers etc.) and also produce a lot of false positives..

So what are the latest recommendations/best practices about Harmony Endpoint modules on servers??

Other vendors have completely different clients to install on servers making things straight forward, but for Harmony Endpoint this has always been an issue..