Clear information on what features are available on Harmony Endpoint on-premises vs Infinity/Cloud

[dt7]

Hello everyone,

I'm just trying to get a clear answer on what features are available for Harmony Endpoint on-premises VS cloud-only via Infinity (EPMaas). I find it very confusing and not explained clearly in the admin guides neither. Is there a good summary post or table on this topic that I am missing eventually?

As an example, if I take a recent Harmony Elite package license description is shows: 

Check Point Harmony Endpoint Elite - Including Posture Management, DLP, GenAI Security (Preview), Infinity XPR for Endpoint, Infinity PlayBlocks, Data Protection, Sandboxing, Browse

A few questions on that:

1) Is Posture Management & DLP (basically the Elite features in black in the attached imaged) available on-premises if you have the Elite license? I can see the menus on-prem, but it is just a static page with a "Contact us" button to schedule a demo with Checkpoint, same for Posture Management. Are you able to enable it and use it on-prem if you have the right license and leverage Threat Cloud for that, or is it available only via Infinity tenant (EPMaaS cloud management) only?

2) Infinity XDR, Infinity Playblocks & Threat Hunting are only available via Infinity tenant if I am not wrong, so cloud-only I guess?

3) What about GenAi Security (preview) for DLP, is it only for cloud tenants or if DLP can be used on-prem it can also be available? (cf. question 1)

4) Lastly, is there any option to have some kind of "hybrid" setup. Meaning, if a customer is already using Harmony Endpoint on-premises and wants to enable some features that are available in Infinity Portal only (Infinity XDR, Threat Hunting, maybe more based on the questions above?), can he do so by linking up an Infinity tenant cloud instance with the on-premises setup? Or it is clear cut, and you can either be on-premises or cloud, and you have to migrate to EPMaaS if you want the features that are not available on-premises? I can't see anything on that topic in the admin guide, so I guess it means moving to the cloud but let me know if there are other options.

Appreciate any inputs to clarify this, thank you in advance!

Regards.

[PhoneBoy]

@BarYassure 

[dt7]

@BarYassure if I can get some insights that would be great, thank you!