topic Re: Harmony Endpoint Client Installs Outlook Add-in in Endpoint

Harmony Endpoint Client Installs Outlook Add-in

dw_Cold — Thu, 09 Feb 2023 11:48:12 GMT

Hello,

We are using Harmony Endpoint web portal to build and deploy Endpoint Security clients to our enterprise.

During testing we've noticed that users who have the client installed on their Windows machines have the 'Check Point Harmony Addin' added to their list of Add-ins within thier Microsoft Outlook clients.

We're deploying 86.51 and 86.60. How do we prevent the add-in from being installed during the EPS install?

Would someone be in a postion to expalin where specifically this setting is configured please? We want to avoid having to remove the Add-in via GPO after the fact.

Thank you in advance.

Re: Harmony Endpoint Client Installs Outlook Add-in

Chris_Atkinson — Thu, 09 Feb 2023 13:33:42 GMT

Did you already review: sk175845 - How to disable the Outlook add-in

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175845

Note: Some things still require configuration via SmartEndpoint.

Re: Harmony Endpoint Client Installs Outlook Add-in

dw_Cold — Thu, 09 Feb 2023 15:35:14 GMT

Hello Chris, thanks for your reply.

I did read the article but wasn't sure it applied to our situation. The document mentions connecting to the SMS server via SmartEndPoint.

Forgive my lack of understanding but does the article mean the SMS server that we use to configure our firewalls? The reason I ask is we moved from an on-prem endpoint manager and gateway scenario when we migrated to Harmony Endpoint in the cloud.

Our EPS client connect only to the Harmony Endpoint cloud solution and of course the firewalls.

Re: Harmony Endpoint Client Installs Outlook Add-in

PhoneBoy — Thu, 09 Feb 2023 17:22:33 GMT

You can use SmartEndpoint for your cloud-managed Harmony Endpoint.
This is currently necessary to configure specific features.

In Infinity Portal, go to Harmony Endpoint > Service Management.
You will find a download link to SmartConsole and the necessary information to connect to your cloud instance.

Re: Harmony Endpoint Client Installs Outlook Add-in

dw_Cold — Fri, 10 Feb 2023 10:31:30 GMT

Thank you very much for the above. I understand now, and have been able to access the SMS server in this way using SmartEndpoint.

However my next issue is that the step in sk175845 (see below) mentions a Forensics Policy. I don't see Forensics Policy within Policy.

To disable the utility from SmartEndpoint with the Security Management Server:

Connect to the Security Management Server > Policy > Forensics policy > Monitoring and Exclusions.

Re: Harmony Endpoint Client Installs Outlook Add-in

dw_Cold — Fri, 10 Feb 2023 10:53:04 GMT

... I have just found a similar setting within the Harmony Endpoint Cloud Portal (please see attachment monitoring_exclusions.png).

It was found in Policy > Threat Prevention > Global Exclusions > 'Start by adding a new Exclusion'

Would this be where I add the information from sk175845 in lieu of Forensics being available in SmartEndpoint?

Thanks again.

Re: Harmony Endpoint Client Installs Outlook Add-in

PhoneBoy — Fri, 10 Feb 2023 18:03:23 GMT

I would try that, yes.
If this doesn't work, I recommend engaging with the TAC so we can get the correct procedure included in the SK for cloud-managed Harmony Endpoint.

Re: Harmony Endpoint Client Installs Outlook Add-in

dw_Cold — Tue, 14 Feb 2023 10:06:31 GMT

Hello,

Adding a new exclusion within Harmony Endpoint Cloud Portal appears to have worked. The add-in is listed as 'inactive' within Outlook which suggests the action was performed by the EPS as expected. I will test what happens during a clean install of EPS.

In the meantime I've found that the configuration from sk175845 https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175845 can be performed in Harmony Endpoint Cloud Portal in two places:

1) Threat Prevention > Policy Capabilities > Capabilities and Exclusions > Exclusions Center > Forensics Monitoring Exclusions

2) Threat Prevention > Global Exclusions

In both cases you just add a new exclusion of type process. See attached image.