Harmony Endpoint - Posture Management (Vulnerability & Patch Management)

[BarYassure]

Hi Everyone

As you know, we recently introduced our new Posture Management capabilities as part of Harmony Endpoint.
Just want to keep you up to date with all the relevant information.

Windows Clients:

Vulnerability Management - is available as EA from version 87.10, and as GA from version 87.30.

Patch Management - is available as EA from version 87.30, and will be as GA from version 87.40.

Mac Clients:

Vulnerability Management - Will be available as EA from version 87.40, and as GA from version 87.50.

Patch Management - Will be available as EA from version 87.50, and will be as GA from version 87.60.

Different Assets you can use to learn more about the new solution:

Updated website for Harmony Endpoint (link)

One-Pager for Posture Management (link)

LinkedIn post (link)

Joint Press Release with Ivanti (link)

Customer Deck (Attached)

Blog (link)

Article (link)

External Webinars (link)

White Paper (link)

Feel free to reach out for additional information 🙂

[gabrieled]

do you know if the "patch management" feature is already supported on premises too?

[tropicanaslim]

second this!

[BarYassure]

Hi

It will be available for on-rem with the next on-prem release, ETA is next week 🙂

[JonnyRabinowitz]

On premise support show now be available with R81.20 Jumbo Hotfix Accumulator take #43 that has been released today

[gabrieled]

thank you...

[BarYassure]

Sure.

BTW - It is now available (please see the new post about it).

[adamec]

Hi, I have a question about currently supported apps. For example we have found that Firefox is not available for pathcing in our environment. Is there some list of supported apps?

thanks in advance

[Luiz_]

There you go: https://support.checkpoint.com/results/sk/sk181034

[mmanzotti]

I'm trying to determine if it's possible to upgrade an operating system, such as Windows 10 to Windows 11, using Patch Management. I've reviewed the SK 181034, which states that Harmony Endpoint can only apply patches to applications in C:\Program Files and that patch size is limited to 2 GB. This has created some confusion, as I'm unsure if the tool is designed to handle a full OS upgrade, which would likely exceed these limitations. Could you clarify if this feature is supported?

[lluner]

Yes, there is this possibility, we download the executable from the Microsoft website and run a powershell to run in the background, there are some limitations, the system does not warn the user that it is going to reboot the machine.

[mmanzotti]

Thank you!