End of Support for Non US-DoC Compliant Versions of Harmony Endpoint

[BarYassure]

Dear Harmony Endpoint Security Partners and Customers,

New U.S. Department of Commerce Regulations

As of June 14th 2024 and no later than by September 29th, 2024, US vendors are required to adhere to the US Department of Commerce regulations described in document 2024-13532 issued on June 14th, 2024. 
You can find more details about this decision here: https://www.federalregister.gov/d/2024-13532/

Impact on Harmony Endpoint Customers

While recent Harmony Endpoint versions already comply with the US DoC regulations, some customers are still using versions which will be non-compliant as of September 29th 2024.

To ensure continued security and compliance, these customers must upgrade their products before the specified deadline.

Additional details can be found here:https://support.checkpoint.com/results/sk/sk182464

Both the compliant and non-compliant versions of Harmony Endpoint offer the same features and security level.
Transitioning to a compliant version is seamless and will not impact your operations.

Deadline for Upgrade: September 29th 2024

Check Point will end support for non-compliant Harmony Endpoint versions on September 29th, 2024, affecting both US and non-US customers.

Check Point Support

We understand that this change may pose challenges, and as a valued customer, we are committed to supporting you during this transition. For any further questions, please contact our Technical Support or email us at contact_support@checkpoint.com.

Thank you for your understanding and cooperation as we implement this important update. Together, we will continue to provide exceptional solutions and service to our customers.

© 2024 Check Point Software Technologies Ltd. (Nasdaq: CHKP) All rights reserved. 

[gg_fga]

Hello,

Since we started using Harmony Endpoint, updates have never required a reboot.

We have a little over 400 servers with endpoint and we do the updates with the policy below:

We have many critical servers that cannot be restarted at the same time. More generally, we would like to do the reboot manually and not agent-driven. Is this possible?

Kind regards,

[MikeB]

Is there any way to apply this change without automatic restart of the client??  The impact of this uncontrolled automatic restart would be very large for our customers. 

[BarYassure]

Hi Mike

Unfortunately, this is the only way to ensure the upgrade works smoothly without failures and missing data.
We understand this might be challenging, but we are working on all the relevant updates and increasing our support focus to make sure we are supporting customers with their challenges.

This US DoC complaint change was new to us as well, but we still have enough time until September 29th to plan the relevant upgrades.

Please feel free to let me know when our help is needed.

[lluner]

Hi @BarYassure 

I ran the upgrade to the endopint ( DHS Compliant )  and the machine rebooted twice according to the windows logs

[the_rock]

Excellent news @BarYassure 

[gg_fga]

I've started deploying it on the Pilot Workstations, the changeover is simpler, some users who are used to installing the client quickly have been fooled by the unusual reboot.

It's worth noting that a full scan of the computer is launched as soon as it's rebooted, and that the local history of previous scans is somehow lost (at least in the interface).

Some users have had warnings that the computer had never been scanned, in short a lot of warnings that have gone up in post-installation.

Don't forget to update the new URLs pointing to sophos from now on.

[BarYassure · Accepted solution]

Hi
Just want to share 3 relevant SKs that could help you with the transition. 

1. How to replace E1 with E2 - https://support.checkpoint.com/results/sk/sk178307

2. End of Support of Non-Complaint Versions - https://support.checkpoint.com/results/sk/sk182464

3. How to verify whether I'm running E1 or E2 client - https://support.checkpoint.com/results/sk/sk182513

[BarYassure]

Hi Again

I would like to bring to your attention a package we have worked out with the global services team, which would bring value to customers required to upgrade to the E2 version as an outcome of new US regulations.

The upgrade package is based on IGS Flex credits that can be used for the entire IGS suite of services and can be extended per need:

Customers with <5000 seats

• 100 IGS credits.
• 40% discount
• CPTS-IGS-RET-100-1Y

Customers with >5000 seats

• 500 IGS credits.
• 40% discount.
• CPTS-IGS-RET-500-1Y

Packages will be available until the end of September.

[skandshus]

How would you remotely deploy if it you dont have 3rd party tools or an Active directory to push from? 
i got a tenant that's running standalone pc's.. Does the "repair client" work from the harmony portal?
and what about users who is running FDE?