topic Re: DLP in Harmony Connect in SASE and Remote Access

DLP in Harmony Connect

espeh — Sat, 11 Mar 2023 00:25:24 GMT

Hello,

I just launched a trial version for Harmony Connect. The product page as well as the documentation mention that there is a DLP feature. The documentation specifically mentions, as a best practice, that in the policy editor, we should enabled the DLP column.

Only problem is, there is no such column available

Documentation:

Actual user interface:

Is this feature just not available in trial mode? Or what am I missing?

Thanks for helping!

Re: DLP in Harmony Connect

_Val_ — Sun, 12 Mar 2023 16:31:44 GMT

It may depend on what kind of access you are setting up. Please provide more details concerning your configuration.

Re: DLP in Harmony Connect

espeh — Sun, 12 Mar 2023 16:35:21 GMT

I am not setting up any access yet, I am exploring the product in the context of a trial version. And I noticed that the DLP feature is nowhere to be found. The access policy has no option for it. So I was wondering if that was just a limitation of the free trial.

Re: DLP in Harmony Connect

anstelios — Sun, 12 Mar 2023 17:10:27 GMT

You should be able to scroll down in this pop up menu and select "Content"

Re: DLP in Harmony Connect

espeh — Sun, 12 Mar 2023 17:23:07 GMT

No, that's not there. See my screenshot above. Can't scroll inside that popup either.

Re: DLP in Harmony Connect

CE_SE — Sun, 12 Mar 2023 22:00:54 GMT

@anstelios is correct that you would need to right click on the layer icon in the right hand corner to see the drop down list and select "Content" However, I can confirm that between my employee account and my personal trial account the it does lack the drop down list as in your screenshot. My recommendation would if you really want to see this feature engage your SE/AM so they can engage the powers that be to get your tenant setup to test this feature.

For those interested in admin guide and what was discussed.

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Connect-Admin-Guide/Topics-Harmony-Connect-AG/Policy/Internet-Access.htm?Highlight=data%20loss

Re: DLP in Harmony Connect

espeh — Sun, 12 Mar 2023 22:10:59 GMT

I found it now. Thank you and @anstelios.

One other question: Is there any way to build your own DLP profiles? If not, is Check Point planning to release some GDPR-related identifiers? Or more identifiers in general? The list is pretty small.

Thanks

Re: DLP in Harmony Connect

Chris_Atkinson — Sun, 12 Mar 2023 22:16:36 GMT

A general expansion of DLP capability was discussed recently at CPX as part of our road-map if you have specific requirements please discuss those with your local CP SE so relevant RFEs can be raised as needed.

Re: DLP in Harmony Connect

tomerbehor — Mon, 13 Mar 2023 22:51:15 GMT

Hi @espeh, glad you found it!

Regarding your other questions - yes, we are working on implementing enhanced DLP capabilities in Harmony Connect.

The initial phase of this feature will include 700+ data types (similar to what we currently have in the DLP blade), and the ability to create custom data types and reusable groups. Many of the pre-defined data types are relevant to GDPR.

This feature is planned to be in limited EA within the next month. If you're interested, please feel free to contact me at tomerbeh@checkpoint.com, and I can provide you with more information and allow you to experiment with the feature.

Later this year, the infinity portal will offer a unified data type manager, so data types (also custom) will be shared across products (e.g. can be used both in Harmony Connect and Harmony Email & Collab)

Furthermore, we are also planning to add new capabilities such as OCR later this year. So, stay tuned for more updates!

Thanks

Tomer Behor

Product management | Harmony Connect