topic Re: checkpoint full disk encryption in Endpoint

checkpoint full disk encryption

leangm — Sun, 07 Jul 2024 04:35:59 GMT

Does Checkpoint full disk encryption pre-boot authentication work with macOS computers?

Re: checkpoint full disk encryption

Chris_Atkinson — Sun, 07 Jul 2024 09:56:23 GMT

Apple limit all 3rd party vendors to FileVault management as I understand.

Re: checkpoint full disk encryption

leangm — Mon, 08 Jul 2024 01:35:30 GMT

Thanks, other question

does preboot authentication work with active directory credential?

Re: checkpoint full disk encryption

Doron_Zuckerman — Mon, 08 Jul 2024 05:51:50 GMT

Yes.

AD scanner can sync. the AD password to Check Point management server.

Re: checkpoint full disk encryption

leangm — Mon, 08 Jul 2024 06:37:02 GMT

I tested it doesn't work, any link can share how to do it?

Re: checkpoint full disk encryption

yuris — Mon, 08 Jul 2024 13:44:10 GMT

Hi,
Please read this article for configuring AD scanner:

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_HarmonyEndpointWebManagement_AdminGuide/Content/Topics-HEPWM-R81.10/Managing-Active-Directory-Scanners.htm?Highlight=active%20directory

Re: checkpoint full disk encryption

tuadvi — Mon, 08 Jul 2024 16:45:51 GMT

Are you using Check Point FDE or just relying on FileVault?

https://sc1.checkpoint.com/documents/R80.40/SmartEndpoint_OLH/EN/Topics-EPSG/Preboot.html

Re: checkpoint full disk encryption

PhoneBoy — Mon, 08 Jul 2024 20:13:05 GMT

Apple restricted third party FDE implementations a while back.
We integrate with Filevault.
Pre-boot authentication is a function of locally configured accounts, I believe.
Those accounts can rely on AD (with cached credentials offline).