© 2023 Check Point Software Technologies Ltd. All rights reserved.

Device Posture Check

Enforce Device Security Policies

Modern organizations allow workers to access the corporate network from far beyond the traditional network perimeter, using both laptops and mobile devices.

While broadening access increases operational agility, it also significantly expands security risks. Any devices that access sensitive data and resources can become targets for hacking and a key locus of vulnerability for the organization.

Harmony SASE Device Posture Check (DPC) enhances your overall security by ensuring that only devices that comply with predefined security policies can connect to your network. It also provides IT the device inventory and reporting tools they need to ensure that the network stays secure.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

DEVICE POSTURE CHECK 2

Benefits & Features

• Enhance network security by establishing trust only in devices that comply with security policies • Prevent malicious access and attacks by automatically denying access to insecure or compromised

devices on login or at predetermined intervals • Provide continued monitoring and support for company-wide compliance with DPC reporting

capabilities • View an up-to-date inventory dashboard of devices with network access, including access history and

device details • Define specific device posture policies for different user groups

Define Device Trust With Posture Check Profiles

Device security requirements can vary by role, device, OS, and other factors to account for security gaps. Device Posture Check profiles are therefore user- and group-specific, making it easy to create relevant device posture rules for access.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

DEVICE POSTURE CHECK 3

Optimized Compliance Parameters for Every Device Posture

Device Posture Check rules include parameters that ensure access is only occurring from secured and recognized Windows and Mac and Linux devices, while iOS and Android mobile devices can be included or excluded from access.

• Antivirus: Verify the presence of your organization’s preferred antivirus software.

• File-Exists: Verify the presence of a specific file in a specific path.

• Disk Encryption: Verify that the OS hard drive is encrypted.

• Certificate: Verify that a specific certificate is installed on the device (in the local Windows CA store or macOS Keychain)

• Process Running: Verify that a specified process (or antivirus program not in the antivirus dropdown) is running on the device.

• Registry: Verify that a specific registry key exists in the Windows Registry.

• Windows Security Center: Verify the status of the selected Firewall, Antivirus, or Windows Security Center is showing as “Good”.

• Active Directory Association: Verify that the user’s “logon domain” matches what is specified in the rule.

• Operating System Version: Verify that the device is using an accepted version.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

DEVICE POSTURE CHECK 4

Enforce Device Posture Pre- and Post-Connection

Attackers can exploit a device before it accesses the network or even while it is already connected to critical resources. Accordingly, Harmony SASE’s DPC makes it easy to check the security posture of your devices before connection and continuously on a custom schedule, for around-the-clock device security.

Get Detailed Device Monitoring and Reporting

Data on your connected devices and their activity is crucial for effective security policy. Device Posture Check reports can be examined in-depth in the Device Inventory panel, where you’ll find your device inventory, health status of each device and of the network overall, any applicable security warnings, and other reports useful for optimizing the health of your network.

Reports can be filtered by time period and relevant aspects of the device. Drill-down views display the in-depth details of individual devices including user information and the posture policy that applies to each user.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

DEVICE POSTURE CHECK 5

Worldwide Headquarters 5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@checkpoint.com

U.S. Headquarters 959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233

www.checkpoint.com

About Harmony SASE

Harmony SASE is a robust, yet easy-to-use, converged networking and network security platform that connects all users, in the office or remote, to all resources, located on-prem or in the cloud. It is a cloud- delivered service that includes advanced capabilities such as Zero Trust Remote Access, Internet access control, and SD-WAN. It enables any business to build a secure corporate network over a private global backbone in less than an hour. The entire service is managed from a unified console and is backed by an award-winning global support team that has you covered 24/7.