Harmony endpoint deployment by network scan

[AdaCoul]

Hi all,

We have to perform deployment of a huge quantity of harmony Endpoint (qty=1000) for one of our client. This customer don't have any domain (AD domain) in his environment. So we cannot do the deployment by pushing intial client on machines.

So I want to know if, deployment can be done by scanning network.

Thanks in advanced.

[G_W_Albrecht]

No - You can use third-party deployment software to deploy the Initial Client to endpoint computers. The MSI package can be run manually by users or silently by a third party deployment tool. (https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Topics-EPSG/Automatic-Deployment-Ov...)

[AdaCoul]

Hi @G_W_Albrecht 

Thanks for your response.

Can I know why Harmony Endpoint does not support deployment by network scan while other solutions do?
Is it planned by Check Point in the next versions?

Regards,

[G_W_Albrecht]

Because most large customers already have AD and/or SW Orchestration solution, and small companies have AD or deploy EP SW manually. Which other solution Endpoint Server is able to deploy by network scan ? I only know solutions including Orchestrator capabilities.

[AdaCoul]

In this situation, we are looking for a solution to make this deployment successful beacause the client is rebuilding his AD and wil not be  ready before 2 weeks.
Which solution can you recommend to deploy Harmony Endpoint on 1000 machines ?

[G_W_Albrecht · Accepted solution]

Suggested deployment for 1000 users is AD as this enables granular rules for groups, machines and users, Using network scan to build a database, you would have to group the found entities manually, and i do not know how to change later to using AD instead (and if that is possible).

Open a task with TAC and get help from your local CP SE looks like the best way to proceed.