topic Re: AD Group Policy for browsers and Harmony Endpoint in Endpoint

AD Group Policy for browsers and Harmony Endpoint

John_Richards — Mon, 28 Feb 2022 23:03:33 GMT

We have been working with a client to deploy Harmony Endpoint. In addition they want to deploy AD Group Polices that control browser behavior. These group polices are applied and work when Harmony Endpoint is not installed on the client. With Harmony Endpoint installed the AD Group Polices do not take effect on the client browser. I know there is interaction between the browser and Harmony Endpoint however not been able to track down why the AD GP would not apply. Any help appreciated.

Re: AD Group Policy for browsers and Harmony Endpoint

J_B — Wed, 02 Mar 2022 09:30:59 GMT

What version of endpoint are you running and what policies don't apply?

Go you see any GP errors within the windows event log saying that they could not be applied when endpoint is installed?

We've got a lot of AD GP applied to our devices and not seen any issues where the GP doesn't apply to a device because of endpoint.

Re: AD Group Policy for browsers and Harmony Endpoint

jcortez — Mon, 07 Mar 2022 14:49:05 GMT

@John_Richards

Are you saying that you are installing our Harmony Endpoint Client and they also trying to install Harmony Web Protection Browser Extension as well?

If so, the Harmony Web Protection Browser Extension is now part of and has been part the Harmony Endpoint client for some time now via the SBA/Threat Prevention Blades. AFAIK you cannot install them both separately side-by-side. If you already have the Harmony Endpoint client installed you should just be installing it as part of the SBA/Threat Prevention Blades.

If you are not talking about our Harmony Web Protection Browser Extension, are you just saying that GPO Policy settings for Internet Browser themselves are not applying with our Harmony Endpoint client installed?

Re: AD Group Policy for browsers and Harmony Endpoint

John_Richards — Mon, 07 Mar 2022 15:34:54 GMT

I'm talking only about GPO settings not being applied to the browser when Harmony Endpoint is installed. I'm meeting with the customer today to gather more information.

Re: AD Group Policy for browsers and Harmony Endpoint

John_Richards — Mon, 14 Mar 2022 21:47:24 GMT

The client was able to use computer policies rather than user polices and seems to be working. Thanks

Re: AD Group Policy for browsers and Harmony Endpoint

J_B — Mon, 14 Mar 2022 22:29:13 GMT

There is a good table to reference in the Admin Guide that tells you if the policy for each Endpoint Security component is a user or computer rule.

Endpoint Security R80.30 Administration Guide (checkpoint.com)