topic Re: Harmony endpoint - download files > 15MB in Endpoint

Harmony endpoint - download files > 15MB

MarcVB — Fri, 27 Aug 2021 08:14:14 GMT

Hi,

I started using "Harmony endpoint" to protect the endpoints of my customers.

In the policy I'm using the recommended options by Check Point.

Now, yesterday a customer tried to download a file (.exe) of 59 MB and it didn't work. The scanning was starting but it stops at 10%. Error message "scanning stopped because file exceeds max inspection size.

Is there an option to modify the maximum (download) filesize ?

Settings:

regards,

marc

Re: Harmony endpoint - download files > 15MB

PhoneBoy — Mon, 30 Aug 2021 05:07:47 GMT

When emulation is done on Security Gateways, you can increase the limit to 100mb.
On Endpoint, it appears to be capped at 15mb per: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161613

Re: Harmony endpoint - download files > 15MB

MarcVB — Mon, 30 Aug 2021 06:15:28 GMT

Thanks, for the feedback.

In this case (= max. file size=15MB) is there a option to bypass that restriction on certain endpoints?

Re: Harmony endpoint - download files > 15MB

PhoneBoy — Mon, 30 Aug 2021 07:06:48 GMT

As the SK states, the limit on Endpoint is capped at 15mb.
I don't believe you can increase the limit for any Endpoint, much less specific ones.
Even for Security Gateways, it's a global setting.

Re: Harmony endpoint - download files > 15MB

MarcVB — Mon, 30 Aug 2021 09:21:58 GMT

OK, thanks.

In this case, I will have a serious issue with multiple users of my customers.

Re: Harmony endpoint - download files > 15MB

MikeB — Mon, 30 Aug 2021 13:34:59 GMT

Hello @MarcVB , you can create a new rule in Threat Emulation Policy with the machines you want to bypass and change the policy to "Detect" so you can Emulate de original files without suspending access.