topic Upgrade E86.50 Block Bitlocker Encryption Question in Endpoint

Upgrade E86.50 Block Bitlocker Encryption Question

m25487 — Mon, 11 Jul 2022 12:40:05 GMT

Hello,

we are planning our upgrade to version E86.50.
According to the new features, the "Block Bitlocker Encryption" setting is now on by default.
However, since we use Bitlocker in the company and also encrypt hard disks during operation, does this feature have to be deactivated according to my understanding?

Unfortunately I can't find any setting called "Block Bitlocker Enryption" in the Anti-Ransomware policy.
Am I missing something?
Smart Endpoint R81.10.9600.407

Re: Upgrade E86.50 Block Bitlocker Encryption Question

PhoneBoy — Mon, 11 Jul 2022 20:19:20 GMT

This feature appears to only be relevant if you enable Bitlocker encryption AFTER installing E86.50.
At least, that's how I read this: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179594
In any case, the SK explains how to turn this feature off.

Re: Upgrade E86.50 Block Bitlocker Encryption Question

m25487 — Tue, 12 Jul 2022 08:20:58 GMT

That is very strange. This setting is not visible to me. Is this visible to you?

Re: Upgrade E86.50 Block Bitlocker Encryption Question

Itamar_Tubul — Tue, 12 Jul 2022 11:14:40 GMT

Hi,

What is your server version?

On premise \ cloud?

Thanks!

Re: Upgrade E86.50 Block Bitlocker Encryption Question

m25487 — Tue, 12 Jul 2022 11:35:45 GMT

on premise R81.10 Take 55

Re: Upgrade E86.50 Block Bitlocker Encryption Question

m25487 — Thu, 14 Jul 2022 09:06:16 GMT

Problem was solved via TAC.

Return Message:
Thank you for contacting Check Point support.
My name is Amir and this service request was assigned to my care.
This sk179594, is referring to Cloud management servers, and machines with EPS client E86.50 already installed.
This checkbox was not yet developed for the On-Premise servers.
As a workaround, exclude by protection "ransomware.win.bitlockerransom.b" in the Anti-Ransomware policy - see attached screenshot.
*Remove the exclusion after BitLocker will finish encryption.