Harmony Endpoint Solution Brief
Harmony Endpoint
All the Endpoint Protection You Need
The frequency and complexity of cyberattacks have been escalating dramatically in recent times. Research by Check Point reveals a 38% year-over-year increase, with organizations facing an average of 1,150 attacks every week. The advent of artificial intelligence (AI) is further exacerbating cyber threats, as cybercriminals exploit AI to devise novel and sophisticated attack vectors with relative ease. Compounding the issue is a shortage of cybersecurity professionals, leaving organizations worldwide grappling with the challenges posed by the rapidly evolving cybersecurity landscape.
As cyberattacks get more and more sophisticated, keeping your organization safe is more challenging than ever.
Security Excellence
Real-Time Prevention across all attack vectors, protects against the most imminent threats such as Ransomware and Phishing attacks. Powered by Check Point’s Threat Cloud AI to provide Zero-Day protection with more than 60 AI engines.
Multiple Security Products
The multitude of attack vectors forces organizations to deploy multiple security products.
Endless Attack Surface
With Harmony Endpoint organizations can benefit from Check Point’s cutting-edge solution, including:
The new hybrid work infrastructure, the use of BYOD and cloud services are creating more entry points for potential cyber threats.
Harmony Endpoint is a comprehensive and unified endpoint security solution engineered to safeguard the workforce against today’s intricate threat landscape. It delivers 360-degree endpoint protection by integrating advanced Endpoint Protection (EPP), Endpoint Detection and Response (EDR), and Extended Detection and Response (XDR) capabilities into a singular client. Its prevention-first approach ensures your organization remains unexposed to attacks while simultaneously streamlining security operations, reducing both costs and operational overheads.
Flexible Management
Easy deployment for on-prem, cloud or MSSP management, and seamless integration into your existing security ecosystem, with an API-Based augmentation to your current management and security tools.
Comprehensive & Consolidated Solution
- Ransomware & Malware Protection: Fortifying organization data against sophisticated ransomware attacks.
- Posture Management: Reduce the attack surface with Automated Vulnerability & Patch management.
- Zero-Phishing & Browser Protection: Blocks the most sophisticated phishing attacks with zero impact on end users.
- Data Protection & GenAI Protect: Safeguarding Sensitive Data Loss with Full Disc Encryption, advanced DLP Capabilities, and innovative GenAI Security, to keep valuable data safe and maintain compliance and regulation.
Technical Specifications
| Harmony Endpoint Packages | |
|---|---|
| Packages | Harmony Endpoint Prevent - includes: Threat Intelligence-ThreatCloud and IOC Management Access Control-Firewall, Application Control, Endpoint Compliance, Remote Access(VPN) Threat Prevention-Anti-Ransomware (Including Intel TDT), Anti-Malware, Anti-Bot, Anti-Exploit, Behavioral Guard, and Port Protection Harmony Endpoint Basic - includes Harmony Endpoint Prevent, plus: Browser Security-Zero Phishing, URL Filtering, Corporate password Reuse, Safe Search EDR-Forensics collection & automated reports, MITRE Mapping, and Threat Hunting Harmony Endpoint Advanced - includes Harmony Endpoint Basic, plus: Sandboxing & CDR-Threat Emulation and Threat Extraction & Sanitization Harmony Endpoint Complete - includes Harmony Endpoint Advanced, plus: Data Protection-Full Disk Encryption and Removable Media Encryption Harmony Endpoint Elite - includes Harmony Endpoint Complete, plus: Infinity XDR for endpoint, Posture Management, DLP, and Gen AI security Data Protection - includes Full Disk Encryption, Removable Media Encryption, Port Protection, Remote Access VPN, Endpoint Compliance, Application Control and Firewall. |
| Optional Add-Ons | InfinityXDR/XPR - includes Incident Management, Events Correlation, Infinity Playbooks for Endpoint. Vulnerability Management - includes Vulnerability Management for Operating Systems and 3rd party applications Posture Management - includes Vulnerability Management and Patch Management DLP & GenAI Security-Includes Upload & Download scanning, Clipboard & Print control, and GenAI security tools to discover and prevent data loss in real time. All with more than 700 pre-defined data types and Microsoft Tagging option. |
| Centralized Management | |
| Cloud & On-Prem Management | Cloud Management, On-Premise Management, MSSP Platform |
| Operating Systems | |
| Operating System | Windows Workstation - 11,10,8, and 7 Windows Server - 2022,2019,2016,2012, and 2008 MacOS - Sonoma, Ventura, Monterey, Big Sur, Catalina Linux - Ubuntu, Debian, RHEL, AlmaLinux, CentOS, OracleLinux, AmazonLinux, SLES, OpenSUSE, Fedora VDI & Terminal Server - VMware, Citrix, Terminal Server Servers - SQL, Web Servers, DHCP Servers, SharePoint, Active Directory, Exchange, HyperV, DNS. |
| Built-In Integrations | |
| Integrations & APIs | API-based with easy integration to third parties SDK UEM Integrations - intune, Jamf Azure Active Directory |
Feature Description
| Threat Intelligence | |
|---|---|
| ThreatCloud | The brain behind Check Point Software's threat prevention power, combines big data threat intelligence with advanced AI technologies to provide accurate prevention to all Check Point Software customers. |
| IOC Management | Indicator of Compromise (IOC) is an indicator to cybersecurity professionals about unusual activity or an attack. Harmony Endpoint allows you to add IoCs for domains, IP addresses, URLs, MBS Hash keys, and SNAI Hash keys that will automatically be blocked. |
| Access Control | |
| Firewall | Firewall rules accept or drop network traffic to and from Endpoints, based on IP addresses, Domains, Ports, and Protocols. |
| Application Control | Enable the option to restrict network access for specified applications. Application control rules define if to allow, block, or terminate applications and processes. |
| Endpoint Compliance | The compliance component ensures Endpoint's compliance with the organization's security rules. Endpoints that do not comply show as "non-compliant" and the administrator can apply restrictive policies for them. |
| Remote Access VPN | Virtual private network (VPN) enables users who are working remotely to securely access and use data that resides in the corporate data center and headquarters, encrypting all traffic the users send and receive |
| Threat Prevention | |
| Anti-Ransomware | Constantly monitors for ransomware specific behavior and identifies illegitimate file encryption. Detects and quarantines all elements of a ransomware attack identified by forensic analysis. |
| Anti-Malware | Protection from all kinds of malware threats, ranging from worms and Trojans to spyware and keystroke loggers. |
| Anti-Bot | A bot is malicious software that can invade and infect Endpoints. Harmony Endpoint Anti-Bot component detects and prevents all bot threats. |
| Anti-Exploit | Provides protection against exploit-based attacks compromising legitimate applications, ensuring those vulnerabilities can't be leveraged. |
| Behavioral Guard | Adaptively detects and blocks malware mutations according to their real-time behavior. Identifies, classifies, and blocks malware mutations in real-time based on minimal process execution tree similarities. |
| Port Protection | Protects sensitive information by requiring authorization for access to storage devices and other input/output devices. |
| Attack Investigation | |
| Forensics Collection & Automated Reports | On detection of a malicious event, forensics analysis is automatically initiated, and the entire attack sequence is presented as a Forensics Report. |
| MITRE Mapping | The MITRE ATTACK dashboard provides real-time visibility on all the techniques observed by Harmony Endpoint; it maps all events to MITRE tactics, Techniques, and Procedure (TTPs). |
| Browser Security | |
| Zero-Phishing | Real-time protection from unknown zero-day phishing sites. Static and heuristic-based detection of suspicious elements across websites requesting private info. |
| Corporate Credential Protection | Detection of corporate credentials reuse on external sites. |
| URL Filtering | Lightweight browser plugin, allow/block access to websites in real-time with Full visibility to HTTPS traffic. |
| Safe Search | Safe search is a feature added to search engines that acts as an automated filter for potentially offensive and inappropriate content. |
| DLP and GenAI Security | Includes Upload & Download scanning, Clipboard & Print control, and GenAI security tools to discover and prevent data loss in real-time. |
| Threat Hunting | |
| Threat Hunting | Collection of all raw and detected events on the endpoint, enabling advanced queries, drill-down, and pivoting for proactive threat hunting and deep investigation of incidents. |
| Sandboxing & Content Disarm & Reconstruction (CDR) across email and web | |
| Threat Extraction | Removes exploitable content, reconstructs files to eliminate potential threats and delivers sanitized content to users in a few seconds. |
| Threat Emulation | Threat sandboxing capability to detect and block new, unknown malware and targeted attacks found in email attachments, downloaded files, and URLs to files within emails. |
| Data Protection | |
| Full Disk Encryption | Full disk encryption provides the highest level of data security. It combines boot protection and strong disk encryption to ensure that only authorized users can access the data. |
| Removable Media Encryption | Media Encryption enables users to create encrypted storage on removable storage devices that contain business-related data. |
Why Harmony Endpoint?
Today more than ever, endpoint security plays a critical role in enabling your remote workforce. With 70% of cyber attacks starting on the endpoint, complete endpoint protection at the highest security level is crucial to avoid security breaches and data compromise.
Harmony Endpoint is a complete endpoint security solution built to protect the remote workforce from today’s complex threat landscape. It prevents the most imminent threats to the endpoint such as ransomware, phishing, or drive-by malware, while quickly minimizing breach impact with autonomous detection and response.
This way, your organization gets all the endpoint protection it needs, at the quality it deserves, in a single, efficient, and cost-effective solution. Harmony Endpoint is part of the Check Point Harmony product suite, the industry’s first unified security solution for users, devices, and access. Harmony consolidates six products to provide uncompromised security and simplicity for everyone. It protects devices and internet connections from the most sophisticated attacks while ensuring Zero-Trust Access to corporate applications—all in a single solution that is easy to use, manage and buy.