Who rated this post

We would like to provide a practical example of an implementation of the Check Point Endpoint Security/SandBlast/Harmony Endpoint for Microsoft Servers.

The environment shown was installed with Check Point Endpoint Security which evolved to SandBlast Agent, and currently is called Harmony Agent, with this implementation being an on-prem solution, version R81 OpenServer installation, exclusively running Endpoint.

Client version shown is based on E85.00 GA

Running Harmony Agent in Infinity Portal should be able to utilize the same approach.

Some useful additional resources:

• Microsoft
  • Virus Scanning Recommendations for Enterprise Computers running supported versions 
  • Antispam and Antimalware - Exchange Server 2019 
  • TechNet : Microsoft Anti-Virus Exclusion List 
• Check Point documents
  • Attached "SBA Server Policy Best Practice v3" PDF sourced by @Richard_Comber 
• Check Point SKs
  • sk154052 - SandBlast Agent Best Practice Configuration
  • sk152772 - Learning Mode to Best Practice Methodology
  • sk153713 - SandBlast Agent - Learning Mode To Best Practice

We may find more information and details for this subject, but this is a start.

Brought to you by:

@Aleksandr_Nosit and @Eric_Beasley