topic Re: Disable checkpoint endpoint antivirus for one PC in Endpoint

Disable checkpoint endpoint antivirus for one PC

king_slavcho — Wed, 06 Jul 2022 09:10:30 GMT

Hello friends,

I wanted to ask you how can i disable checkpoint endpoint antivirus on one particular PC. I can not see an option to do that.. I can just create a group and disable all the policies there. I that the only option to disable antivirus on a PC or there is an another option.. Thank you.

Re: Disable checkpoint endpoint antivirus for one PC

PhoneBoy — Thu, 07 Jul 2022 02:59:17 GMT

Yes, you create a group with the relevant blade settings and assign the PC to that group.
That would be how you disable a blade on a specific PC.

Re: Disable checkpoint endpoint antivirus for one PC

king_slavcho — Thu, 07 Jul 2022 10:07:12 GMT

Thank you for your reply. Let me give you an example of what i want to do exactly. If you have an ordinary antivirus (exp Avast) you can go and disable shields for a certain time (10 minutes or permanently).. I am searching for a similar option here.. Is there an option like that to turn it off on a particular PC or i have to disable all the policies in a group and than move the PC to the group there?

Re: Disable checkpoint endpoint antivirus for one PC

MikeB — Thu, 07 Jul 2022 13:15:00 GMT

you can create a special group (for example NOTSECURE) and in the deployment rules disable all security blades for this group. You can move the client to this group.

The other option would be to use E86.50 and you can find "Edit Capabilities" button in the new UI and disable the security modules you want for this PC.

Re: Disable checkpoint endpoint antivirus for one PC

JulianAF — Fri, 25 Aug 2023 10:04:56 GMT

Hello,

i have the E87.31.1016 and the "Edit capabilities" isn't present. Any idea to solve this ?

Thank you

Re: Disable checkpoint endpoint antivirus for one PC

Mitja-S3NEXT — Fri, 25 Aug 2023 12:03:05 GMT

There is no way to just temporarly disable the antivirus like in Avast, you have to use the solution described by @PhoneBoy

Re: Disable checkpoint endpoint antivirus for one PC

MikeB — Fri, 25 Aug 2023 15:16:59 GMT

If you are the admin, you can access management portal and check policy tab ->"client Settings" -> General -> Allow users to disable capabilities is ON for your machine policy.

Re: Disable checkpoint endpoint antivirus for one PC

scenarist — Wed, 27 Sep 2023 12:16:46 GMT

Yes. I use @PhoneBoy solution and create special virtual group with name "NOT SECURE" and turn off all capabilites but after that harmony endpoint still have TURN ON all capabilities excpet AntiMalware and still running all services in task manager. I am using E86.60 endpoint client. I would like to know how to turn off all capabilities ?

Re: Disable checkpoint endpoint antivirus for one PC

MikeB — Thu, 28 Sep 2023 18:36:01 GMT

Hi @scenarist , you need to create the rule in "Software Deployment" policy. (not in threat prevention policy).

I would recommend that you use the option to disable features from the endpoint itself (which I discussed previously in this post).

If you decide to use this method, take into account the version of the endpoint when configuring the rule (it should be the same version of the devices you want to disable their protections).

Re: Disable checkpoint endpoint antivirus for one PC

PhoneBoy — Thu, 28 Sep 2023 18:59:21 GMT

Possible this is a (display) bug.
I recommend engaging with the TAC here: https://help.checkpoint.com

Re: Disable checkpoint endpoint antivirus for one PC

scenarist — Fri, 29 Sep 2023 07:33:32 GMT

@MikeB Great. Thank you very much Mike.