topic Re: Use the Harmony firewall to block all access to internet but with exception in Endpoint

Use the Harmony firewall to block all access to internet but with exception

JulianAF — Thu, 02 Nov 2023 15:43:51 GMT

Hello,

i'm trying to found my way. We actually configure laptops with only access to Citrix. The laptop are hybrid azure AAD. We need to keep the access to Azure (Entra), Teams and Citrix.

The problem is if i block access to internet,the Checkpoint will be blocked too and can't be updated and the only solution is to uninstall it. I put the execption xxx.epmgmt.checkpoint.com in the rule with allow but the traffic not passing by this rule.

Others problem is to allow teams or Azure, actually we can't add address fqdn like *.microsoft.com , it seems mandatory to add each subdomain xxx.address.com (!!!).

Any idea to found a easy solution?

Thank you

Re: Use the Harmony firewall to block all access to internet but with exception

G_W_Albrecht — Thu, 02 Nov 2023 16:01:58 GMT

I would ask CP TAC for the most easy and efficient way of achieving your goal.

Re: Use the Harmony firewall to block all access to internet but with exception

JulianAF — Fri, 03 Nov 2023 09:01:53 GMT

Thank you !

Re: Use the Harmony firewall to block all access to internet but with exception

JulianAF — Fri, 17 Nov 2023 08:57:15 GMT

Hello any news?

Re: Use the Harmony firewall to block all access to internet but with exception

scenarist — Wed, 07 Feb 2024 13:18:10 GMT

I would also appreciate if there is any news on this matter ?

Re: Use the Harmony firewall to block all access to internet but with exception

JulianAF — Wed, 07 Feb 2024 14:07:39 GMT

Haha forgot this my friend.

Re: Use the Harmony firewall to block all access to internet but with exception

scenarist — Thu, 15 Feb 2024 14:20:59 GMT

Hello,

I'm seeking advice on the most effective method to block all outgoing internet traffic except for a select few websites. Currently, I've configured outbound firewall rules to permit access to the Harmony server, domain controllers (DNS and DHCP), internal networks, and the domain www.edition.cnn.com. All other connections are blocked.

However, I've encountered two issues:

My anti-malware capabilities is unable to update, as it can't establish a connection to the server. I suspect that I need to add a rule for the Check Point Anti-Malware online database server?

2.The second problem pertains to the slow loading of the www.edition.cnn.com webpage or any URLs I've allowed. However, when I removed the "clean up out" rule, I experienced significantly faster loading times for web addresses.

I would greatly appreciate any suggestions or insights you could provide on these matters.

Thank you very much in advance.

Re: Use the Harmony firewall to block all access to internet but with exception

Sigbjorn — Fri, 16 Feb 2024 06:32:04 GMT

The problem with slow loading is most likely because todays websites will load resources from a whole lot of different domains that you did not allow.

If you open web developer tools (F12) when loading edition.cnn.com you'll see that its fetching resources from all over the place.

Re: Use the Harmony firewall to block all access to internet but with exception

scenarist — Fri, 16 Feb 2024 14:01:56 GMT

I assumed that, and there is no way to solve that matter because every website have a lot of external resources.

Re: Use the Harmony firewall to block all access to internet but with exception

JulianAF — Fri, 16 Feb 2024 14:07:38 GMT

Hello to achieve this we use Cisco Umbrella and we can only permitt what we want. It's working very well.

Re: Use the Harmony firewall to block all access to internet but with exception

scenarist — Tue, 27 Feb 2024 08:22:47 GMT

I can't believe that there is no way to solve this issue, and I will have to change the Harmony endpoint because of it.

Re: Use the Harmony firewall to block all access to internet but with exception

G_W_Albrecht — Tue, 27 Feb 2024 09:00:40 GMT

What is the response from CP TAC ?

Re: Use the Harmony firewall to block all access to internet but with exception

scenarist — Tue, 27 Feb 2024 09:15:16 GMT

Still nothing. I am still waiting...