topic Harmony endpoint deployment by network scan in Endpoint

Harmony endpoint deployment by network scan

AdaCoul — Mon, 07 Mar 2022 15:10:00 GMT

Hi all,

We have to perform deployment of a huge quantity of harmony Endpoint (qty=1000) for one of our client. This customer don't have any domain (AD domain) in his environment. So we cannot do the deployment by pushing intial client on machines.

So I want to know if, deployment can be done by scanning network.

Thanks in advanced.

Re: Harmony endpoint deployment by network scan

G_W_Albrecht — Mon, 07 Mar 2022 15:33:27 GMT

No - You can use third-party deployment software to deploy the Initial Client to endpoint computers. The MSI package can be run manually by users or silently by a third party deployment tool. (https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Topics-EPSG/Automatic-Deployment-Overview.htm?tocpath=Deploying%20Endpoint%20Security%20Clients%7C_____2)

Re: Harmony endpoint deployment by network scan

AdaCoul — Tue, 08 Mar 2022 09:40:42 GMT

Hi @G_W_Albrecht

Thanks for your response.

Can I know why Harmony Endpoint does not support deployment by network scan while other solutions do?
Is it planned by Check Point in the next versions?

Regards,

Re: Harmony endpoint deployment by network scan

G_W_Albrecht — Tue, 08 Mar 2022 10:06:04 GMT

Because most large customers already have AD and/or SW Orchestration solution, and small companies have AD or deploy EP SW manually. Which other solution Endpoint Server is able to deploy by network scan ? I only know solutions including Orchestrator capabilities.

Re: Harmony endpoint deployment by network scan

AdaCoul — Tue, 08 Mar 2022 10:25:14 GMT

In this situation, we are looking for a solution to make this deployment successful beacause the client is rebuilding his AD and wil not be ready before 2 weeks.
Which solution can you recommend to deploy Harmony Endpoint on 1000 machines ?

Re: Harmony endpoint deployment by network scan

G_W_Albrecht — Tue, 08 Mar 2022 10:42:43 GMT

Suggested deployment for 1000 users is AD as this enables granular rules for groups, machines and users, Using network scan to build a database, you would have to group the found entities manually, and i do not know how to change later to using AD instead (and if that is possible).

Open a task with TAC and get help from your local CP SE looks like the best way to proceed.