Harmony Endpoint Super node proxy limitations question

[dt7]

Hello,

I have a question related to the use of Super Nodes with Harmony Endpoint. When reading the admin guide on the subject using EPMaaS (Cloud management), there is a limitations section that indicate that "Harmony Browse Extension" is not supported when using Super node proxy (cf. screenshot attached and link to admin guide).

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...

Does it mean that the browser extension agent deployed with Harmony Endpoint will not work for semi-isolated devices that are using super nodes (devices without internet access but that will use the super node as relay for Harmony updates, policies, etc.)? I.e. It means no web protection, URL filtering, etc. available?? 

It's not very clear to me what this restriction means, if somebody has the info and can help me clarify that would be much appreciated.

Thank you!

[PhoneBoy · Accepted solution]

Harmony Browse's primary use case is allowing safe access to the Internet through a web browser.
That likely explains why direct access to ThreatCloud is needed by Harmony Browse (though I'm sure @AdiGH can confirm).

In any case, not sure how relevant Harmony Browse is on machines that either don't access or have extremely limited access to the Internet.

[dt7]

Hi @PhoneBoy,

I managed to get a confirmation on this from Checkpoint support. So indeed, the whole web protection part of Harmony Endpoint (basically Harmony Browse - the extension in browser) is not supported when using Super Nodes.
Anyway, you are right as well, for semi-isolated clients in that case it does not really matter since they have limited access to the internet.

Thanks for your inputs.