topic Re: Threat Hunting on-premises in Endpoint

Threat Hunting on-premises

Luiz_ — Wed, 19 May 2021 13:58:49 GMT

Hello all,

According to the Endpoint Admin Guide, Threat Hunting is only supported on Cloud management.

Supported Versions

Agent version:
- Recommended version - E84.10 and above.
Management version
- Cloud only, web management.
- Management version - R80.40 and above

Are there plans to have this feature on on-premises environments?

Re: Threat Hunting on-premises

PhoneBoy — Thu, 20 May 2021 03:42:21 GMT

I know we are planning some sort of connector between Infinity Portal and on-premise management.
Whether that will enable threat hunting on premise is a separate question.

Re: Threat Hunting on-premises

LadaNemecek — Tue, 31 Jan 2023 09:21:34 GMT

Hello,

was there any progress in case of topics "some connector between cloud and on-premise mgmt"?

Is there generally any solution to unify todays cloudbased Harmony endpoint and fw management (to have unified Smartevent logs for example)?

Thanks

Re: Threat Hunting on-premises

PhoneBoy — Tue, 31 Jan 2023 19:35:19 GMT

There is a connector for your on-prem management to Infinity Portal present in R81.10 and above.
This is necessary for Quantum SD-WAN and will enable further integrations in the future, such as Horizon Events (unified events with on-prem and cloud-managed resources).
I suspect we'll have more to say on this at the upcoming CPX events.