Offline DLP

[Agent_Smith]

We would like to know if there is a way to use Endpoint to enforce DLP when a user is not VPN to the main firewall. If not can we force a laptop to VPN and have no off network internet access? How would we do this from the Checkpoint side?

[Chris_Atkinson]

Depending on the specific scenarios that you are trying to cater to the following may have a role to play:

• Media Encryption and Port Protection
• Harmony Connect - Internet Access
• Harmony Email & Colab
• Capsule Workspace / Capsule Docs.

[Agent_Smith]

Specifically we are trying to stop exfiltration of lets say, social security numbers on form posting on https and email.

[PhoneBoy]

In terms of current product functionality, that would have to be done by Harmony Connect with HTTPS Inspection enabled.

[Agent_Smith]

Later when the DLP for Endpoint comes out it won't do this type of DLP and it has to be offloaded to Harmony Connect?

[PhoneBoy]

Presumably, yes.

[PhoneBoy]

This ultimately requires Harmony Endpoint features such as:

• Endpoint Firewall and Compliance
• Media Encryption/Port Protection

Additional features will be coming in the next few months that may be relevant DLP-wise.