Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
m25487
Contributor
Jump to solution

Upgrade E86.50 Block Bitlocker Encryption Question

Hello,

we are planning our upgrade to version E86.50.
According to the new features, the "Block Bitlocker Encryption" setting is now on by default.
However, since we use Bitlocker in the company and also encrypt hard disks during operation, does this feature have to be deactivated according to my understanding?

Unfortunately I can't find any setting called "Block Bitlocker Enryption" in the Anti-Ransomware policy.
Am I missing something?
Smart Endpoint R81.10.9600.407

anti_ransomware.PNG

0 Kudos
1 Solution

Accepted Solutions
m25487
Contributor

Problem was solved via TAC.

Return Message: 
Thank you for contacting Check Point support.
My name is Amir and this service request was assigned to my care.
This sk179594, is referring to Cloud management servers, and machines with EPS client E86.50 already installed.
This checkbox was not yet developed for the On-Premise servers.
As a workaround, exclude by protection "ransomware.win.bitlockerransom.b" in the Anti-Ransomware policy - see attached screenshot.
*Remove the exclusion after BitLocker will finish encryption.
AR_Ex.png

View solution in original post

0 Kudos
5 Replies
PhoneBoy
Admin
Admin

This feature appears to only be relevant if you enable Bitlocker encryption AFTER installing E86.50.
At least, that's how I read this: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 
In any case, the SK explains how to turn this feature off. 

0 Kudos
m25487
Contributor

That is very strange. This setting is not visible to me. Is this visible to you?
scrren3.PNG

0 Kudos
Itamar_Tubul
Employee
Employee

Hi,

What is your server version? 

On premise \ cloud?

Thanks!

0 Kudos
m25487
Contributor

on premise R81.10 Take 55

0 Kudos
m25487
Contributor

Problem was solved via TAC.

Return Message: 
Thank you for contacting Check Point support.
My name is Amir and this service request was assigned to my care.
This sk179594, is referring to Cloud management servers, and machines with EPS client E86.50 already installed.
This checkbox was not yet developed for the On-Premise servers.
As a workaround, exclude by protection "ransomware.win.bitlockerransom.b" in the Anti-Ransomware policy - see attached screenshot.
*Remove the exclusion after BitLocker will finish encryption.
AR_Ex.png

0 Kudos