topic Harmony Endpoint Generating Multiple archives in windows folders (ProgramData) in Endpoint

Harmony Endpoint Generating Multiple archives in windows folders (ProgramData)

Amanda_90 — Wed, 19 Apr 2023 18:05:06 GMT

Hey guys,

I need help with the Harmony Endpoint solution.

I'm on a client where he has a Client Endpoint installed in version (E86.26) on one of his servers. And it is happening that the folders generated by Harmony are occupying a lot of disk space, 40gb or more this occupation.

This is one of the directories:
C:\ProgramData\CheckPoint\DBStore

I would like to know how to correct or limit this occupation on the disk and how to delete the files, please.

Re: Harmony Endpoint Generating Multiple archives in windows folders (ProgramData)

G_W_Albrecht — Thu, 20 Apr 2023 08:25:25 GMT

sk179791: Folder "C:\ProgramData\Checkpoint\DBStore\AmsiScripts\" fills up on a computer with Endpoint Security Client installed

Re: Harmony Endpoint Generating Multiple archives in windows folders (ProgramData)

Amanda_90 — Thu, 20 Apr 2023 13:04:41 GMT

Thanks for the feedback!

But how can I delete the files that are taking up space, I tried to delete and I couldn't.

Re: Harmony Endpoint Generating Multiple archives in windows folders (ProgramData)

Chris_Atkinson — Fri, 21 Apr 2023 01:08:39 GMT

Probably you need to disable the self-protection.
Consult with TAC for the process and to verify that the archives are indeed safe to remove.

In terms of ongoing mitigation I would suggest updating to the latest recommended client release and observing if the issue persists.

Re: Harmony Endpoint Generating Multiple archives in windows folders (ProgramData)

G_W_Albrecht — Fri, 21 Apr 2023 08:38:09 GMT

No, you can not do that without e.g. Reboot into the "Safe Mode without Networking" - so either follow sk179791 with the workaround provided or install a fixed client. The fix is included starting from:

Enterprise Endpoint Security E86.60 Windows Clients