Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
K-R_-Trust-Net
Contributor

How to check if FDE now works on Test PC?

Hi Everyone.

This link was solved by disabling the pre-boot option of the FDE blade.
https://community.checkpoint.com/t5/Endpoint/Cannot-access-the-remote-PC-after-i-tried-to-deploy-FDE...

i was successfully can log to Dan-PC yet the problem is that i cant check if the FDE is pushing to the PC.
i cant see the padlock icon on the system tray (taskbar)
https://sc1.checkpoint.com/documents/R80.40/SmartEndpoint_OLH/EN/Topics-EPSG/FDE-CPEncryptionPolicy-...

i tried to check and update the magnifying glass icon in system tray but it seems that the blades that i disable in the deployment tab of Dan-PC in the smartEndpoint still looks updated and working.. is this a system limitation of the checkpoint demo environment?? if not, how could i make fde works in Dan-PC??

0 Kudos
10 Replies
PhoneBoy
Admin
Admin

I believe FDE isn't supported in virtual environments.

0 Kudos
K-R_-Trust-Net
Contributor

How can i test it out if that would be the case?? 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Provision a eval instance of Harmony Endpoint @ portal.checkpoont.com and enroll a non-production test PC that you don't mind reimaging etc

CCSM R77/R80/ELITE
K-R_-Trust-Net
Contributor

may i know how i can do this suggestion?? do you mean to test it in infinity portal?? 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Correct register for the Infinity Portal and commence a trial of Harmony Endpoint.

Alternately if you have the means you could install a cloud or on-prem hosted management if you have a lab?

CCSM R77/R80/ELITE
0 Kudos
K-R_-Trust-Net
Contributor

seems like i will need to install a vmware worstation environment that i will use to connect to infinity portal to play with FDE. (i hope this one would work or else the option below would be the most viable one.)

yet, i think its a hard pass, though if i would really want to implement it into the smartEndpoint, it would be painful since i will need to install GAIA on a vmware environment, set it up and download the smartEndpoint and deploy it to another vmware environment.. am i right??

0 Kudos
Chris_Atkinson
Employee Employee
Employee

No all you need is the Infinity portal - harmony endpoint and test PC.

VMware workstation isn't required here unless you choose not to use the Infinity portal hosted Harmony Endpoint.

CCSM R77/R80/ELITE
0 Kudos
K-R_-Trust-Net
Contributor

Hi Chris, Maybe i try to do this suggestion then ill get back to you what results would i get.

0 Kudos
jcortez
Employee
Employee

@K-R_-Trust-Net 

What @PhoneBoy mentioned, FDE not being supported on VM, is very accurate. It is only meant for testing and does not always work. As others have suggested you should always be testing FDE on physical machines to get a true testing scenario.


Justin Cortez
Technology Leader | Endpoint Cyber Security Products | Americas Endpoint Team
0 Kudos
jcortez
Employee
Employee

@K-R_-Trust-Net 

Also when using/enabling FDE the is a FDE Preboot that is enabled for logging into the machine securely. There is no network connectivity when at preboot. The FDE Preboot login is meant for a user to be directly at the machine and not accessing the machine remotely.

If you are trying to access machine remotely that have our FDE solution on them and Preboot is enabled, the user(s) would first need to login through preboot in order for you to remote into the machine/Windows. This is expected behavior and how the product is designed.

If you do not want to use preboot it can be disabled. However, this is not recommended as this would decrease the level of security being offered by FDE.


Justin Cortez
Technology Leader | Endpoint Cyber Security Products | Americas Endpoint Team
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events