© 2024 Check Point Software Technologies Ltd. All rights reserved.

The frequency and complexity of cyberattacks have been escalating dramatically in recent times. Research by Check Point reveals a 38% year-over-year increase, with organizations facing an average of 1,150 attacks every week. The advent of artificial intelligence (AI) is further exacerbating cyber threats, as cybercriminals exploit AI to devise novel and sophisticated attack vectors with relative ease. Compounding the issue is a shortage of cybersecurity professionals, leaving organizations worldwide grappling with the challenges posed by the rapidly evolving cybersecurity landscape.

Harmony Endpoint is a comprehensive and unified endpoint security solution engineered to safeguard the workforce against today’s intricate threat landscape. It delivers 360-degree endpoint protection by integrating advanced Endpoint Protection (EPP), Endpoint Detection and Response (EDR), and Extended Detection and Response (XDR) capabilities into a singular client. Its prevention-first methodology ensures your organization remains unexposed to attacks while simultaneously streamlining security operations, reducing both costs and operational overheads.

With Harmony Endpoint organizations can benefit from Check Point’s cutting-edge solution, including:

Harmony Endpoint All the Endpoint Protection You Need

Sophisticated Attacks

As cyberattacks get more and more sophisticated, keeping

your organization safe is more challenging than ever.

Multiple Security Products

The multitude of attack vectors forces organizations to deploy

multiple security products.

Endless Attack Surface

The new Hybrid work infrastruc- ture, the use of BYOD and cloud services are creating more entry points for potential cyber threats.

Security Excellence

Real-Time Prevention across all attack vectors, protects against the most imminent threats such as Ransomware and Phishing attacks.

Powered by Check Point’s Threat Cloud Al to provide Zero-Day protection with

more than 60 AI engines

Consolidated Solution

All Endpoint protection you need, EPP, EDR & XDR, with wide OS

Support, All in a single agent and unified

management.

Flexible Management

Easy deployment for on-prem, cloud or MSSP management, and

seamless integration into your existing security ecosystem, with an API-Based augmentation to your current management and

security tools.

© 2024 Check Point Software Technologies Ltd. All rights reserved.

HARMONY ENDPOINT SOLUTION BRIEF 2

Comprehensive & Consolidated Solution • Ransomware & Malware Protection: Fortifying organization data against sophisticated ransomware

attacks.

• Posture Management: Reduce the attack surface with Automated Vulnerability & Patch management.

• Zero-Phishing & Browser Protection: Blocks the most sophisticated phishing attacks with zero impact on end users.

• Data Protection: Safeguarding Sensitive Data Loss with advance DLP Capabilities and unique Full Disc Encryption, to keep valuable data safe and maintain compliance and regulation

A Leading Endpoint Solution

Leader Frost Radar for Global

Endpoint Security Market, 2023

A Visionary

2023 Magic Quadrant™ for Endpoint Protection

Platforms

Leader & Fast Mover GigaOm Radar for

Ransomware Prevention report, 2023

Strategic Leader AV-Comparatives

EPR Test, 2023

© 2024 Check Point Software Technologies Ltd. All rights reserved.

HARMONY ENDPOINT SOLUTION BRIEF 3

Technical Specifications

Harmony Endpoint Packages

Packages

Harmony Endpoint Prevent – includes: Threat Intelligence – ThreatCloud and IOC Management Access Control - Firewall, Application Control, Endpoint Compliance, Remote Access (VPN) Threat Prevention - Anti-Ransomware (Including Intel TDT), Anti-Malware, Anti-Bot, Anti-Exploit, Behavioral Guard, and Port Protection Harmony Endpoint Basic – includes Harmony Endpoint Prevent, plus: Browser Security – Zero Phishing, URL Filtering, Corporate password Reuse, Safe Search EDR – Forensics collection & automated reports, MITRE Mapping, and Threat Hunting Harmony Endpoint Advanced – includes Harmony Endpoint Basic, plus: Sandboxing & CDR – Threat Emulation and Threat Extraction & Sanitization Harmony Endpoint Complete – includes Harmony Endpoint Advanced, plus: Data Protection – Full Disk Encryption and Removable Media Encryption Harmony Endpoint Elite - includes Harmony Endpoint Complete, plus: Infinity XDR for Endpoint, Posture Management, and DLP. Data Protection – includes Full Disk Encryption, Removable Media Encryption, Port Protection, Remote Access VPN, Endpoint Compliance, Application Control and Firewall.

Optional Add-Ons

Infinity XDR / XPR – includes Incident Management, Events Correlation, Infinity Playblocks for Endpoint. Vulnerability Management – includes Vulnerability Management for Operating Systems and 3rd party applications Posture Management – includes Vulnerability Management and Patch Management DLP – includes upload and download scanning, Clipboard control, Text Scan for AI sites. All with more than 700 pre-defined data types.

Centralized Management Cloud &

On-Prem Managment

Cloud Management On-Premise Management MSSP Platform

Operating Systems

Operating System

Windows Workstation – 11, 10, 8, and 7 Windows Server – 2022, 2019, 2016, 2012, and 2008 MacOS –Sonoma (14), Ventura (13), Monterey (12), Big Sur (11), Catalina (10) Linux – Ubuntu (22.04.03, 22.04, 20.04, 18.04, 16.04), Amazon (2), CentOS (7.8-8.5), Debian (9.12- 11.7), OpenSUSE (15.3, 42.3), SUSE (12 SP5, 15 SP3), , Oracle (7.9-8.7), RHEL (7.8-8.7, 9.0-9.2) VDI & Terminal Server – VMware, Citrix, Terminal Server Servers – SQL, Web Servers, DHCP Servers, Share Ppint (2010, 2016, 2013), Active Directory, Exchange, HyperV, DNS.

Built-In Integrations

Integrations & APIs

API-based – with easy integration to third parties SDK UEM Integrations – Intune, Jamf Azure Active Directory

© 2024 Check Point Software Technologies Ltd. All rights reserved.

HARMONY ENDPOINT SOLUTION BRIEF 4

Feature Description Threat Intelligence

ThreatCloud The brain behind Check Point Software’s threat prevention power, combines big data threat intelligence with advanced AI technologies to provide accu-rate prevention to all Check ThreatCloud Point Software customers.

IOC Management Indicator of Compromise (IoC) is an indicator to cyber security professionals about unusual activity or an attack. Harmony Endpoint allows you to add IoCs for domains, IP addresses, URLs, MD5 Hash keys and SHA1 Hash keys that will automatically blocked. Access Control

Firewall Firewall rules accept or drop network traffic to and from Endpoints, based on IP addresses, Domains, Ports and Protocols. Application Control Enable the option to restrict network access for specified applications. Application control rules define if to allow, block or terminate applications and processes.

Endpoint Compliance The compliance component ensures Endpoint’s compliance with the organization’s security rules. Endpoints that do not comply show as “non-compli-ant” and the administrator can apply restrictive policies for them.

Remote Access VPN Virtual private network (VPN) enables users who are working remotely to securely access and use applications and data that reside in the corporate data center and headquarters, encrypting all traffic the users send and receive Threat Prevention

Anti-Ransomware Constantly monitors for ransomware specific behavior and identifies illegitimate file encryption, signature-less. Detect and quarantine all elements of a ransomware attack are identified by forensic analysis and then quarantined. Data Restoration - Encrypted files are automatically restored from snapshots to ensure full business continuity. Intel TDT – Implementing processor-level protection using Intel Threat Defense Technology.

Anti-Malware Protection from all kinds of malware threats, ranging from worms and Trojans to adware and keystroke loggers.

Anti-Bot A bot is a malicious software that can invade and infect Endpoints with many infection methods.Harmony Endpoint Anti-Bot component detects and prevents all bots threats.

Anti-Exploit Provides protection against exploit-based attacks compromising legitimate applications, ensuring those vulnerabilities can’t be leveraged. Harmony Endpoint Shuts down the exploited process upon detecting one, remediates the entire attack chain

Behavioral Guard Adaptively detects and blocks malware mutations according to their real-time behavior. Identifies, classifies, and blocks malware mutations in real-time based on minimal process execution tree similarities. Port Protection Protects sensitive information by requiring authorization for access to storage devices and other input/output devices.

Attack Investigation

Forensics Collection & Automated Reports

On detection of a malicious event, Forensics analysis is automatically initiated, and the entire attack sequence is presented as a Forensics Report. By using the Forensics report, the user can prevent future attacks and to make sure that all affected files and processes work correctly.

MITRE Mapping The MITRE ATT&CK dashboard provides real-time visibility on all the techniques observed by Harmony Endpoint, it maps all events to MITRE tactics, Techniques and Procedure (TTPs). Browser Security

Zero-Phishing Real-time protection from unknown zero-day phishing sites. Static and heuristic-based detection of suspicious elements across websites requesting private info Corporate Credential Protection Detection of corporate credentials reuse on external sites.

URL Filtering Lightweight browser plugin, allow/block access to websites in real-time with Full visibility to HTTPS traffic Safe Search Safe search is a feature added to search engines that acts as an automated filter for potentially offensive and inappropriate content

DLP Includes Upload & Download scanning, Clipboard control, Text Scan for AI site, all with more than 700 pre-defined data types. Threat Hunting

Threat Hunting Collection of all raw and detected events on the endpoint, enabling advanced queries, drill-down, and pivoting for proactive threat hunting and deep investigation of the incidents. Sandboxing & Content Disarm & Reconstruction (CDR) across email and web

Threat Extraction Removes exploitable content, reconstructs files to eliminate potential threats and delivers sanitized content to users in a few seconds.

Threat Emulation Threat sandboxing capability to detect and block new, unknown malware and targeted attacks found in email attachments, downloaded files, and URLs to files within emails. Provides protection across widest range of file types, including Office, Adobe PDF, Java, Flash, executables, and archives, as well as multiple Windows OS environments. Uncovers threats hidden in SSL and TLS encrypted communications.

Data Protection

Full Disk Encryption Full disk encryption provides the highest level of data security. It combines boot protection and strong disk encryption to ensure that only authorized users can access the data. Removable Media Encryption Media Encryption enables users to create encrypted storage on removable storage devices that contain business-related data.

© 2024 Check Point Software Technologies Ltd. All rights reserved.

HARMONY ENDPOINT SOLUTION BRIEF 5

Why Harmony Endpoint?

Today more than ever, endpoint security plays a critical role in enabling your remote workforce. With 70% of cyber attacks starting on the endpoint , complete endpoint protection at the highest security level is crucial to avoid security breaches and data compromise.

Harmony Endpoint is a complete endpoint security solution built to protect the remote workforce from today’s complex threat landscape. It prevents the most imminent threats to the endpoint such a

ransomware, phishing, or drive-by malware, while quickly minimizing breach impact with autonomous detection and response.

This way, your organization gets all the endpoint protection it needs, at the quality it deserves, in a single, efficient, and cost-effective solution.

Harmony Endpoint is part of the Check Point Harmony product suite, the industry’s first unified security solution for users, devices and access. Harmony consolidates six products to provide uncompromised security and simplicity for everyone. It protects devices and internet connections from the most sophis- ticated attacks while ensuring Zero-Trust Access to corporate applications - all in a single solution that is easy to use, manage and buy.

Learn more: https://www.checkpoint.com/products/advanced-endpoint-protection/

Worldwide Headquarters 5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599

U.S. Headquarters 100 Oracle Parkway, Suite 800, Redwood City, CA 94065 | Tel: 1-800-429-4391

www.checkpoint.com

© 2024 Check Point Software Technologies Ltd. All rights reserved.