Block files based on hash with SandBast Agent

[MikeB]

Is there a way to block files in SBA based on hash or some IoC? 

[PhoneBoy]

At the moment, there doesn't seem to be a way to block files in SBA based on some sort of file hash/ip/URL.
You may want to engage with your local office around this requirement.

[Kannan_R]

Hello @PhoneBoy and experts, I would like to know if this feature is still not available? If not, is it in the pipeline / can we expect it anytime sooner?

Thanks,

Kannan

[PhoneBoy]

@Kobie_Bendalak can you comment on this?

[Kannan_R]

Hello Experts,

          Would it be possible to get an update on this?

BR

[MikeB]

Currently, you can do a "File Remediation" Push Operation to  move files to quarantine based on MD5/File Path/ Incident ID. this is totally reactive than preventive but works in most escenarios.

[Gabriellourenco]

existe o Gerenciar IOCs: 

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...