Check Point Harmony Endpoint Reviews

The main use of this product is endpoint security, it is very useful when you are trying to centralize endpoint security management and you want an easy and fast setup, I have used this product in POCs and different size deployments with different kinds of clients. Harmony offers several layers of protection and it fits well with all the Check Point "ecosystem", (It is especially useful when you are correlating security data because it can "talk" with Check Point's XDR Solution in order to get more insights).

There are several benefits that you can get with this solution:

1) You get centralized management of endpoints in your organization and you can be very granular in order to create endpoint security policies for different user groups. This improves overall security and visibility for IT departments.

2) Visibility also offers improvement with purchases and making decisions.

3) Information is easily managed and protected (which is particularly useful in lost or stolen endpoints).

4) It can be used with an XDR system (which is very useful with SOCs).

The main use case for Check Point Harmony Endpoint in our organization is to use it with the Check Point NGX Firewall for a unified threat prevention strategy, with approximately around 2000 users and multiple endpoints across multiple branches, ensuring safety from advanced protection against malware, phishing, ransomware, and zero-day attacks. Our environment includes both Windows and macOS, with central management done via cloud hosted Infinity Portal to protect our endpoints.

Since implementing Check Point Harmony Endpoint, I have noticed a positive impact on our organization as we receive multiple detections of attack activities in the log section, showing how the solution protects our network. This allows users to stay focused on their work without disruption from attacks, ultimately saving time and enhancing productivity.

Our use case for SandBlast Agent is that our team is set up in multiple geographies, such as, India, Sri Lanka, UK, North America, and Australia (where we have a bit of business). We have courses for an educational client which need go to market, schools, instructors for hire, and students. Given that there was COVID-19 and a lockdown, there was an increase in the digital demand for learning courses. So, we wanted to secure our courses from cyber attacks. Thus, we wanted an end-to-end security system in place that would prevent/save us from cyber attacks and protect our sensitive data.

Systems can be accessed on multiple devices, whether they be laptops, Macs, Windows, or mobile devices. Those devices could be connected to a home or public network on a platform, like a Chrome browser, Mozilla Firefox, or Safari. We have been able to track this through reports by seeing how vulnerable those agents are to attacks. Then, we determine how they can become more secure, so we can stay on the cloud and mobile devices. These are the areas where we are trying to use their reports and tighten our security, putting more systems in place to prevent attacks.

Cognizant had a malware attack recently, as the threat of cyber attacks has increased, and a lot of customer data was compromised. However, because this Check Point SandBlast technology was there in place, we were able to thwart the cyber attacks that were attempted. Most of the time, these attacks are college kids trying to do some phishing attacks or look into sensitive data. With SandBlast, it is possible to identify those attacks at the very source, preventing those attacks and keeping us secure.

Going forward, we are planning to extend it to authors and professors who are helping us author our content. For example, if there is an author who will be taking help from various professors in university or instructors in schools, then they will need to get their inputs. What happens is they expose their course to those authors on their networks, devices, laptops, mobiles, or tablets. They access the course through an application. Now, those authors and professors don't have an app login because they might be a third-party vendor. So, we are trying to have the SandBlast Mobile version on this site as well, based on the impressive performance of SandBlast, so our data remains secure and more users are able to utilize our systems and access our data. This will make it more valuable for our end users.

On the coverage part, there are malware, phishing, operating system exploitations, denial-of-service attacks, and man-in-the-middle attacks (MITM), so we have classified the attacks that can happen on a learning, educational system, like ours into five to six categories. With SandBlast Agent deployed in the cloud, we have good coverage to cover these attacks, as it is very extensive. The best part is (through our reports) we were able to identify the type of attacks. So far, our security has been 100 percent. We have not felt that a data breach has happened, so we are pretty happy with SandBlast Agent.

My main use case for Check Point Harmony Endpoint is to secure laptops and desktops across our organization, including remote endpoints, providing layered defense against malware, zero-day attacks, phishing, and data loss, making it a critical part of our endpoint security stack.

Check Point Harmony Endpoint has positively impacted our organization by significantly improving our security posture, especially for remote and hybrid users, with approximately 400 out of our 500 members working from home, leading to almost 90% of security being handled by this product. It helps protect endpoints from advanced threats through behavioral analysis, real-time threat protection, and simplified endpoint management through the cloud-based console. The solution has also improved compliance and risk management to ensure endpoints meet security standards even outside the corporate network.

We use it for the complete protection of more than 5,000 devices of our company and our customers. 

We have Harmony Endpoint (Advanced) managed from the Check Point Cloud, mostly for Microsoft Windows 7, 8, and 10 devices, as well as Windows Servers (mostly 2012 and 2019). We also have a few protected Linux desktops and server devices. 

As for the protections enabled, we have mainly Threat Prevention (including Antimalware, Antibot, Anti-ransomware, EDR, and Threat Emulation/sandboxing); Firewall, application control, compliance, and port protection modules deployed.

We used to use other security solutions (Windows Defender and Kaspersky), however, we had security incidents that affected us (viruses and ransomware) and they were very difficult to identify or when we did identify them it was already a long time after the incident occurred and we did not know the cause and therefore affected the operability of our company considerably. 

Since we made the decision to move to Check Point Harmony we have had greater visibility of everything that happens on our devices and take a preventive approach rather than a reactive strategy, in addition to being more confident that we have Check Point protecting us.

My main use case for Check Point Harmony Endpoint is that we use it as an EDR solution for all our endpoints.

My team uses Check Point Harmony Endpoint primarily as an EDR solution focused on threat detection and incident response.

Check Point provides zero-day protection, which helps us significantly with our security regarding our main use case.

Check Point Harmony Endpoint offers top tier security, AI-powered threat prevention, and strong scalability, which stand out as the best features.

The AI-powered threat prevention in Check Point Harmony Endpoint helps us to detect and prevent sophisticated attacks, and its scalability means it can be deployed across various devices and environments, helping us daily.

Check Point Harmony Endpoint has positively impacted our organization by providing shorter incidents and better compliance.

Our incident response has increased by 5 to 10%, which showcases specifics on how much the incident duration has decreased and how compliance has improved.

My main use case for Check Point Harmony Endpoint is as an EDR solution for our organization level for anti-ransomware protection and behavior guard in the threat emulation, which are features we use in our day-to-day life.

Basically, we use Check Point Harmony Endpoint for threat prevention and EDR features which help us monitor our endpoints and servers, and we've achieved compliance and cleared our ISO audit through this EDR solution. Particularly, we've utilized features that allow us to detect alerts from these systems and help in mitigating them.

In my experience with Check Point Harmony Endpoint, the best features it offers are forensics and incident analysis, which have helped us, and among them, anti-phishing is one of the most used features. Additionally, we utilize features such as threat intel published via the EDR solution that help categorize or detect incidents.

The forensics and incident analysis features of Check Point Harmony Endpoint have helped us significantly while performing analysis over the EDR, allowing us to dig down into incidents, including the process involved and the files associated. I would rate this capability as four out of five.

On a scale of one to ten, I would rate Check Point Harmony Endpoint as a nine due to its improved user interface, forensics and incident response capabilities, behavioral analysis, zero-day threat protection, detailed logging, audit trails, and encryption enforcement.