topic Re: Statement on Kaspersky in General Topics

Statement on Kaspersky

ccsjnw — Thu, 27 Jun 2024 08:49:19 GMT

Please can Checkpoint issue a revised statement regarding Kaspersky in view of the latest US ban?
I'm not in the US, but the UK and other NATO aligned nations are sure to follow.

I've searched the site, and in the past there were statements about the availability of EndPoint Protection without Kaspersky, but it's not clear to me that the all Kaspersky code has been removed from all current Checkpoint products - specifically with regard to the Anti-virus blade in R81.xx.

If there is already a statement and clarity on this matter, please provide the link to the appropriate Checkpoint document as I'm sure others would find this useful.

Thanks.

Re: Statement on Kaspersky

Chris_Atkinson — Thu, 27 Jun 2024 12:07:00 GMT

Yes there is a DHS friendly Endpoint variant (E2) - see: sk178307

Regarding Gateways, quoting sk118539: Kaspersky Lab components were removed from all versions delivered since 2018.

If you need a formal statement beyond this please reach out to your local office / account team.

Re: Statement on Kaspersky

Lesley — Thu, 27 Jun 2024 11:17:41 GMT

This is the SK for the E2 version: https://support.checkpoint.com/results/sk/sk178307

Re: Statement on Kaspersky

ccsjnw — Thu, 27 Jun 2024 11:35:43 GMT

Chris,

I'm assuming DHS in this context is "Department of Homeland Security" (US).

OK - So Checkpoint's statement is that all Kaspersky code has been unequivocally removed from R81.xx Gateway products and Blades, but there is still Kaspersky Code in some current E1 versions of your EndPoint Protection products - is that correct?

Going forward will you completely retire the E1 version and only offer the E2 version?
If a customer doesn't use the E1 version, are they missing out on some functionality or is the same / equivalent functionality also present in the E2 product which doesn't have the Kaspersky code?

Sorry to split hairs, but Checkpoint's reply is rather ambiguous and open to some misinterpretation, which is why there is a need for clarification.

Thanks.

Re: Statement on Kaspersky

the_rock — Thu, 27 Jun 2024 12:01:29 GMT

You are right, thats what DHS is.

By the way, here is my honest suggestion...If I were you, I would reach out to your local SE for an official statement, Thats what we did when one of our customers asked about it.

Best,

Andy

Re: Statement on Kaspersky

Alex- — Thu, 27 Jun 2024 12:07:17 GMT

If you're referring to Endpoint, you can check sk178307 for DHS and EU item 108 compliance.

Re: Statement on Kaspersky

PhoneBoy — Wed, 10 Jul 2024 14:02:49 GMT

As stated in sk178307, E1 releases of Endpoint contain the Kaspersky Anti-Malware component which is used for static file analysis.
When the E2 version was first launched, there were some minor gaps compared to the E1 version.
These have been resolved in current releases, though review sk178307 for Known Limitations.
E2 is now the default version deployed for Endpoint Management as a Service customers.

We have now formally announced End of Support for E1 versions of Harmony Endpoint per:
https://community.checkpoint.com/t5/Endpoint/End-of-Support-for-Non-US-DoC-Compliant-Versions-of-Harmony/m-p/220181#M8930

Re: Statement on Kaspersky

the_rock — Thu, 27 Jun 2024 16:16:26 GMT

well said 🙂

Re: Statement on Kaspersky

PhoneBoy — Wed, 10 Jul 2024 14:03:36 GMT

Updated the above post to reflect public announcement about End of Support/End of Life for E1 versions of Harmony Endpoint.