Recently Check Point Harmony Endpoint for Linux Version 1.10.4 was released. I would like to share an overview of the release content in the following categories
- New Supported Distributions
- Early Availability (EA) Features. Features that are included in the release but are off by default
- Other Fixes / Enhancements
From the next release of Harmony Endpoint for Linux, we will be making available early versions of the release for early access, initial lab testing and feedback. If anyone is interested in being part of this early release cycle, please reach out me for more details and your early inputs on the release will be much valued. In addition, contact me if you wish to enable any of the EA capabilities and for any other Linux related feedback
Thanks
Jonny Rabinowitz
Product Manager – Harmony Endpoint
New Supported Distributions
The following distributions are now supported
- RHEL 9.0 - 9.2
- Ubuntu 22.04
Early Availability (EA) Features
- Reputation Service. In addition to the existing Anti-Malware checks, upon file access a hash for the file is calculated and verified against Check Point’s reputation capabilities. Access to malicious files are blocked. Note, this functionality will also detect any malicious Windows/MAC files stored on the Linux endpoint
- Smart Exclusions. There is an existing EA program for Smart Exclusions that will be aligned with release of Windows version 87.40. Smart exclusions allows a single exclusion to be defined across multiple blades and/or client operating systems. If you are participating in the Smart Exclusion EA then this Linux version is required to verify the Linux related functionality
Other Fixes / Enhancements
- Improved Behavioral Guard engine capabilities. Additional behavioral detections related to system calls and login sensor. Additional information available for search in Threat Hunting
- Resolved Auditd related limitations. Auditd is a component of the Linux Auditing System, responsible for collecting and writing audit log file records to the disk. On-Access scan can now work side-by-side with Auditd using Multicast capability. This functionality is off by default in this Linux version and instructions are available as to how this can be enabled
- Stability fixes particularly in area of memory management
See sk170198 for the complete details on Harmony Endpoint for Linux release
