Protecting your mobile fleet against the latest cyber attacks! June 2023 Video, Slides, and Q&A

[PhoneBoy]

Slides are attached
Q&A is below the video.

With application compliance, can Harmony verify that obsolete web browsers (maybe with vulnerabilities) should be blocked "automagically" without constant user intervention or administration on browser versions?

If users have a browser that is vulnerable or malicious, you will have such visibility as an administrator. You can also black list in the policy the package name of the unwanted browser app. You can also block specific versions of specific applications. You cannot currently enforce a minimum version on a specific application.

We rolled out corporate phones. We now want to add Harmony Mobile. How do we do that so it shows up on our dashboard? We tried to preload the app, but we couldn't see it when we logged into the admin portal.

After preload the application, you need to make sure the device will register to our dashboard. You can do it 2 ways:

1. You can use Zero-Touch with an MDM, which will conduct the registration automatically without the user clicking anything.
2. The user need to register to the dashboard by short steps that Harmony mobile provide instructions on inside of the application.

Once registered you will see the device as "Active" in the dashboard."

Do you have an integration guide for harmony connect & harmony mobile? How does it work actually? How can HM can prevent remote access?

Yes we do - you have to have both solutions on the same Infinity Portal tenant and you have to have connect configured for Mobile Posture check.

Is it a must to have a MDM/UEM integration for Harmony mobile?

If you wish to restrict the uninstallation of the Harmony Mobile app, you will need an MDM/UEM. Otherwise, it is optional.

With Samsung Knox will we have the possibility of not "delegating" the action of uninstalling a malicious application to the user? Will it be done automatically?

Yes it is in the policy settings

How would connect help for harmony mobile/ will we have full visiblity in connect portal.

The integration between the 2 products will allow you to make sure only clean mobile devices can VPN back home to the corporate network - you will be able to see the security state of the device in details in Harmony Mobile.

Does Check Point have a MDM/UEM solution?

Our focus is on security and Harmony Mobile is designed to compliment MDM/UEM solutions on the market.

Our supplier uses Hexnode as the MDM. Will it work with that or do we need to do individual links to each user to download now? Phones are equipped with KNOX.

Support for Hexnode is expected to be added soon.

What is the scope of Harmony App Protect?

This is our SDK solution - the dev teams of your own app needs to embed the smarts of Harmony Mobile into their own application to protect some transactions for example (like banking app or alike).

Does the user get an explanation why he's connection has been blocked if I set up a policy that only a mobile with latest updates can connect?

Yes, users are given instructions to remediate the issue.

Are we currently at full feature parity between Harmony Mobile and ZoneAlarm?

ZoneAlarm clients are not centrally managed like Harmony Mobile clients are. As such, there will always be some differences in functionality and UI. However, the main security functions of Harmony Mobile and ZoneAlarm mobile are the same.

When is Harmony Connect integration expected in Harmony Mobile? What licenses will be required?

It is expected to be released during Q3 2023. You will need both a Harmony Mobile license and a Harmony Connect Remote Access license. 

Will the Harmony Mobile and Harmony Connect integration also support Harmony Connect Internet Access?

Harmony Mobile ONP largely provides the same security function as Harmony Connect Internet Access today. 

[the_rock]

Awesome presentation, very informative! One feedback I have about harmony mobile is that I wish there was an easy way to add application you wish to block or allow, as currently, you cannot simply search for it via portal and add it that way. I know you gave me way to do it via another post (different methods for android and apple), but just a suggestion for the future, thats all.

Cheers,

Andy