Check Point Harmony Browse Solution Brief
Harmony Browse
A Revolution in Web Security
Harmony Browse enables users to safely browse the internet no matter where they are. It protects organizations and their employees from web-based threats using an innovative nano agent deployed within any browser. Unlike traditional web gateways, Harmony Browse delivers fast and private web access without re-routing and decrypting SSL traffic in the cloud or through an on-premises appliance.
Your company, data, and employees will be protected from a wide array of web threats. Harmony Browse blocks users from accidentally downloading malware, visiting phishing sites, accessing restricted websites, reusing corporate passwords, and more by employing Check Point’s industry-leading Threat Prevention technologies directly from the endpoint’s browser.
KEY PRODUCT BENEFITS
- Easy to deploy: Delivers security protections using an innovative NanoAgent directly into the browser
- High Threat Prevention: Prevents users from visiting zero-day phishing sites, downloading zero-day malware, accessing non-compliant websites, re-using corporate passwords for non-business web content, and more
- Fast web browsing: Experience zero latency by avoiding re-routing traffic through the cloud for inspection
- Single management: Over different platforms and browsers
- Enforce user data privacy: Keeps browsing history private, complying with data privacy regulations
How it Works
Blocks zero-day phishing sites designed to steal user credentials
Harmony Browse prevents credential theft by utilizing Check Point’s Zero-Phishing® technology to identify and block both known and unknown phishing sites. Sites are inspected within the user’s browser, analyzing page visuals, text, domains, and more. If the site is found to be malicious, the user is blocked from entering their credentials. The result is the broadest phishing protection in the market.
Prevents re-use of corporate passwords
Re-using corporate passwords on unauthorized or non-corporate sites puts organizations at risk. Users may be targeted to gain access to corporate credentials for malicious purposes. Access to corporate services is kept safe when workers are blocked from re-using their corporate credentials on non-corporate websites. In fact, during the past years, about two out of three breaches originated from compromised credentials.
Prevents advanced threats in downloaded web content
Every file downloaded through a browser is sent to the Threat Emulation ® sandbox to inspect for malware. Simultaneously, Check Point’s proactive Content Disarm and Reconstruction (CDR) technology, Harmony Threat Extraction ®, delivers a sanitized version of the file in milliseconds. Together these technologies block all of the NSA’s Top 25 CVE.
Reduces the attack surface by blocking access to websites according to the company policy
Harmony Browse URL filtering controls access to millions of websites by category, users, groups, and machines to protect users from malicious sites and enforce a safe web browsing experience.
Provides reputation on search engine results
Prevents users from clicking on malicious links, or accessing a link blocked by the corporate policy. When a user performs a search on a search engine, the results will be marked with colored icons: Green – safe site; Red – unsafe site; Orange – blocked by company policy.
Delivers Fast and Secure Web Browsing
Zero-latency assures a productive web browsing experience
Redirecting web traffic to secure web services for inspection creates latency and slows browsing. Installed on the browser, Harmony Browse inspects the decrypted SSL traffic within the web browser without re-routing traffic through a proxy, delivering a fast and productive user experience for workers from wherever they access the internet. In addition, Harmony Browse maintains the user’s web browsing localized profile wherever they go.
Preserves User Internet Privacy
Protecting user’s data privacy is no longer optional
Inspecting workers’ browsing with a secure web service is no longer acceptable, given today’s data privacy regulations. Harmony Browse inspects all SSL traffic within the browser, assuring that users’ internet data privacy is maintained. GDPR compliant, Harmony Browse keeps users’ browsing history completely private.
An Innovative High Performance Architecture
Swiftly deployed and managed via an easy-to-use cloud service
Harmony Browse is deployed quickly as a nano-agent within a web browser over multiple platforms. It accelerates the implementation, reduces management overhead and eliminates complexity. It’s simply uploaded to your organization’s preferred management system for distribution to all managed browsers on Mac, Windows, and Chrome OS.
Harmony Browse provides an independent security layer for internet access that protects the last mile, capturing all threats that get through existing email security, endpoint security, and application security. Harmony Browse may be paired with any secure web gateway or endpoint security solution to provide enhanced web security.
Managed via a cloud service, Harmony Browse is simply provisioned and easy to manage, enabling complete monitoring, full redundancy, and automatic backups.
Technical Specifications
| OPERATING SYSTEMS | |
|---|---|
| Operating System | Windows, Mac, Chrome |
| BROWSERS | |
| Browsers | Chrome, Firefox, Edge, Chromium, Safari (version 14.0 and above), Brave. Note: It is recommended to always use the latest browser version |
| Browser permissions | Read and change all on visited website, Read and change browsing history, Display notifications: Warnings and blocking, Manage downloads, Open downloaded files |
| WEB PROTECTION | |
| Threat Extraction | Removes exploitable content, reconstructs files to eliminate potential threats and delivers sanitized content to users in a few seconds. (Content Disarm & Reconstruction) |
| Threat Emulation | Threat sandboxing to detect and block unknown malware and targeted attacks found in downloaded files, and URLs to linked files within emails. Provides protection across the widest range of file types. Uncovers threats hidden in SSL and TLS encrypted communications |
| Zero-Phishing | Real-time protection from unknown phishing sites. Static and heuristic-based detection of suspicious elements across websites requesting private info |
| Corporate Credential Protection | Detection of corporate credentials reuse on external sites |
| URL Filtering | Allow/block access to websites in real-time based on category lists. Enforces organization policy for safe internet for users on/off organization premises, enforces regulation compliance, improves organization productivity |
| COMPLIANCE | |
| Bandwidth Consumption | File Storage and Sharing, Media Sharing, Media Streams, P2P File Sharing |
| Cloud Management | Harmony Browse Service (hosted on Check Point cloud) managed using a dedicated Infinity Portal dashboard. |
Why Harmony Browse?
“Valuable product, a good complement to an EDR.”
“The product has increased the overall enterprise security by preventing users from accessing phishing and malicious sites. Corporate credential reuse information is valuable both for users and security administrators. Easy to deploy and configure...”
Source: Gartner Peer Insight, August 15, 2022.
Secure Users, Devices and Access with Harmony
Harmony Browse is part of the Check Point Harmony product suite, the industry’s first unified security solution for users, devices and access. Harmony consolidates six products to provide uncompromised security and simplicity for everyone. It protects devices and internet connections from the most sophisticated attacks while ensuring Zero-Trust Access to corporate applications—all in a single solution that is easy to use, manage and buy.
For more information: www.checkpoint.com/harmony
About Check Point
Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber-attacks with an industry-leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and mobile device held information, plus the most comprehensive and intuitive one point of control security management system. Check Point protects over 100,000 organizations of all sizes.