Slides are below the Q&A, which is below the video of the session.
What is a Supernode?
Super node enable you to deploy and update Endpoint clients more easily, where others client are getting updated from other "super node client", rather than the management portal. This saves bandwidth as clients can update from a local supernode instead of the management portal.
How much disk space does the New Super Node require?
We are still collecting data as the feature is in EA phase. However, we are seeing it is similar to a regular (non supernode) client with a small increase (maybe 5%) additional usage of RAM.
Is there planned support for a Linux based super node?
Later this year.
Are supernodes licensed separately or are free of charge?
Free of charge of course.
When do you hope to release the pooled license feature for MSSPs?
By the end of Q2 🙂 Very soon
This new licensing mixed has been released now? Do we need a special release?
No need for special release, the new mixed licenses mode is available for all.
What if the file that I am downloading is a macro and that needs a strong emulation, how is it done?
This is the combination between our Threat Emulation & Extraction.
I some cases we can verify if the file is malicious or not by using Threat Cloud Hashes.
In other cases we will have to run a few more checks and to verify it is ok
Will the Linux EPS client gain the VPN blade (vs. SNX)?
It's on the roadmap.
For the Harmony Endpoint Remote Access VPN, is there any detailed documentation available? The admin guide is skinny on details.
The Remote Access included with Harmony Endpoint terminates on Quantum Security Gateways, which is where the documentation to configure this lives. https://support.checkpoint.com/results/sk/sk67820
Any plans for Linux eBPF support as a potential workaround for kernel version issues?
It is under discussion.
The features described here will also be similarly available for on-premise Harmony as well? For example the notifications & alerts (among others)
Client capabilities are available for cloud & on-prem.
Management features are first available for Cloud, while we are doing our best to add them to on-prem within 3 month, as we are working hard on keeping feature parity between cloud & on-prem.
Semi-insulated means the device is without a network connection? isolated without connectivity to other devices? What is the scope of this functionality?
Does Application whitelisting prevent the application from executing or from accessing network resources (which is how understand it works today)?
Both.
With the deprecation of Capsule Workspace, are these features going to be integrated to Endpoint. We require a solution which can safely grant users access to documents from their mobile/tablet devices
We are considering a few options here as part of our new DLP capabilities, no ETA at the moment.
Native Windows ARM Support?
FDE + MEPP components are expected to be ARM-native later this year. For other Endpoint components, RFEs with your local Check Point office will help prioritize our efforts.
