There is a known limitation in the Sandblast client heading that DOES NOT HAVE A LIMITATION ID TO SEARCH ON
|02524725||Zero-Phishing logs have the action Detect instead of Prevent.|
|02522863||There is a long delay in emulation for files downloaded with Mozilla Firefox.|
|02526247||When a file is extracted on a Threat Emulation appliance that uses the Internet Explorer SandBlast Browser Extension, the file does not download to the user's computer.|
|02522887||There is no Emulation Report for files downloaded with Internet Explorer or Mozilla Firefox.|
|02515394||When using a Threat Emulation appliance, there are no screenshots in Emulation Reports.|
|02529246||.EXE Files with certificate excluded from remediation are still quarantined.|
SNX is not compatible for SandBlast Agent Anti Bot or Forensics blades
What does this mean? We use SNX with the Mobile Access SSL client, authenticated with SecurID and RSA.
It works fine now, but I am about to deploy CP Endpoint Security full with Sandblast, replacing our Symantec Endpoint Protection suite.
Where is the incompatibility? On the machine running SNX?
The computers on which SNX will be running are employee's personal home computers and they are running their own Antivirus packages, not CheckPoint.
However we do test authentication and connection here for users we add or recreate in Mobile Access and RSA using the sole company laptop, which WILL be running CheckPoint Endpoint Security including Anti Bot and Forensics.