AD Group Policy for browsers and Harmony Endpoint

[John_Richards]

We have been working with a client to deploy Harmony Endpoint. In addition they want to deploy AD Group Polices that control browser behavior. These group polices are applied and work when Harmony Endpoint is not installed on the client. With Harmony Endpoint installed the AD Group Polices do not take effect on the client browser. I know there is interaction between the browser and Harmony Endpoint however not been able to track down why the AD GP would not apply. Any help appreciated.

[J_B]

What version of endpoint are you running and what policies don't apply?

Go you see any GP errors within the windows event log saying that they could not be applied when endpoint is installed?

We've got a lot of AD GP applied to our devices and not seen any issues where the GP doesn't apply to a device because of endpoint.

[jcortez]

@John_Richards 

Are you saying that you are installing our Harmony Endpoint Client and they also trying to install Harmony Web Protection Browser Extension as well?

If so, the Harmony Web Protection Browser Extension is now part of and has been part the Harmony Endpoint client for some time now via the SBA/Threat Prevention Blades. AFAIK you cannot install them both separately side-by-side. If you already have the Harmony Endpoint client installed you should just be installing it as part of the SBA/Threat Prevention Blades.

If you are not talking about our Harmony Web Protection Browser Extension, are you just saying that GPO Policy settings for Internet Browser themselves are not applying with our Harmony Endpoint client installed?

[John_Richards]

I'm talking only about GPO settings not being applied to the browser when Harmony Endpoint is installed. I'm meeting with the customer today to gather more information.

[John_Richards]

The client was able to use computer policies rather than user polices and seems to be working. Thanks

[J_B]

There is a good table to reference in the Admin Guide that tells you if the policy for each Endpoint Security component is a user or computer rule.

Endpoint Security R80.30 Administration Guide (checkpoint.com)