Endpoint Security Client - Check Point Software

1 2 November 2011 User Guide Endpoint Security Client Classification: [Public] 2011 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright and distributed under licensing restricting their use, copying, distribution, and decompilation. No part of this product or related documentation may be reproduced in any form or by any means without prior written authorization of Check Point . While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS and FAR TRADEMARKS: Refer to the Copyright page ( ) for a list of our trademarks.

2 Refer to the Third Party copyright notices ( ) for a list of relevant copyrights and third-party licenses. Important Information Latest Software We recommend that you install the most recent Software release to stay up-to-date with the latest functional improvements, stability fixes, Security enhancements and protection against new and evolving attacks. Revision History Date Description 11/2/2011 First release of this document Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments on Endpoint Security Client User Guide). Contents Important Information .. 3 Introduction to Endpoint Security .. 6 Getting Started .. 6 Checking if the Client is 6 Getting the Endpoint Security Installation.

3 7 Installing and Upgrading the Client .. 7 Using the Client .. 8 Tour of the Endpoint Security Main 8 10 Notification Area .. 11 Responding to 13 New Application Alerts .. 13 New Network and VPN Alerts .. 13 Compliance Alerts .. 13 Media Encryption and Port Protection Alerts .. 14 VPN .. 15 VPN Basics .. 15 Types of Endpoint Security VPNs .. 15 Creating a VPN Site .. 16 Connecting to the VPN .. 17 Legacy VPN Client .. 17 Compact and Extended VPN Interfaces .. 17 Authentication in the Legacy VPN Client .. 17 Creating Profiles and Sites in the Legacy VPN Client .. 21 Connecting and Disconnecting Using the Legacy Client .. 25 Advanced Configuration Options in the Legacy Client .. 30 Switching to Endpoint Connect .. 31 Command Line Options.

4 31 Check Point Endpoint Connect VPN Client .. 32 Authentication in Endpoint Connect .. 32 Creating Sites in Endpoint Connect .. 36 Connecting and Disconnecting Using Endpoint Connect .. 36 Advanced Configuration Options in Endpoint Connect .. 39 Switching to the Legacy VPN Client .. 41 Full Disk 42 Overview of the Login 42 Using the Virtual Keyboard .. 42 Using Special Characters .. 42 Changing the Language .. 43 Authenticating to Full Disk Encryption .. 43 Ensuring That No One Tampered with Your 43 Authenticating for the First Time with Fixed Password .. 43 Authenticating with a Smartcard or USB Token .. 44 If You Do Not Have Your Password .. 44 Anti-malware .. 45 Uninstalling other Anti-virus Software .. 45 Your Anti-malware Status.

5 45 Updating Anti-malware .. 45 Scanning .. 46 Understanding Scan Results .. 46 Viewing Quarantined Items .. 46 Firewall & Application Control .. 48 Understanding Firewall Protection .. 48 Understanding Application 48 Media Encryption and Port 49 Components of Media Encryption and Port Protection .. 49 Using Media Encryption and Port Protection .. 49 Encrypting Media .. 50 Encrypting CDs and DVDs .. 51 Encrypting Media In Windows 7 .. 51 Accessing Encrypted Media from a Media Encryption Computer .. 51 Accessing Encrypted Media from non-Media Encryption 52 Media Encryption and Port Protection Scanning .. 53 Changing the Encrypted Device Password .. 53 Converting Legacy Encrypted Devices to Media Encryption .. 53 WebCheck .. 55 WebCheck Protection.

6 55 Suspicious Site W arnings .. 55 Yellow Caution Banner .. 55 "May Be Unsafe" Messages .. 56 Dangerous Site Messages .. 56 58 Technical Difficulties .. 58 Using Logs .. 58 What Can I do with Logs .. 58 Collecting Information for Technical Support .. 59 Index .. 61 Page 6 Chapter 1 Introduction to Endpoint Security Check Point Endpoint Security is the first and only single Client that combines all essential components for total Security on the Endpoint . It includes these Software Blades: Firewall and Application Control, Malware Protection, Full Disk Encryption, Media Encryption and Port Protection, and VPN. Check Point Endpoint Security protects PCs and eliminates the need to deploy and manage multiple agents. In This Chapter Getting Started 6 Using the Client 8 Responding to Alerts 13 Getting Started Endpoint Security is managed by an Endpoint Security Management Server that is controlled by an administrator.

7 The administrator creates the Endpoint Security policy that your Client uses to protect your computer. The exact instructions that you must follow to install the Endpoint Security Client on your machine depend on the administrator's choices. Here are some items that are referenced in the instructions below: Item Description The Endpoint Security icon that appears in your taskbar notification area. An example of an IP address that you might be told to connect to. Checking if the Client is Installed Your administrator might have installed the Endpoint Security Client for you. If you do not know if you already have the Endpoint Security Client installed, Check your Endpoint Security status. To Check your Endpoint Security status: 1.

8 From the Endpoint Security icon in your taskbar notification area, right-click and select Display Overview. The Endpoint Security Main Page opens. Note - If you do not see the Endpoint Security icon in your taskbar notification area, expand the taskbar to show hidden icons. If you still do not see the Endpoint Security icon, you probably do not have the Client installed. 2. Look at your status in the Endpoint Security Main Page. If it shows that you are Connected, your Client is properly installed and you do not have to do anything. If not you might need to Connect or follow instructions from your administrator. Getting Started Introduction to Endpoint Security Page 7 Getting the Endpoint Security Installation If an Endpoint Security Installation window opens, follow the on-screen instructions to continue the installation ("Installing and Upgrading the Client " on page 7).

9 If an Endpoint Security Installation window does not open, do this procedure to get the installation. The exact steps depend on the choices made by your administrator. Note - You must have administrator rights on your computer to install the package. To get the Endpoint Security Client installation: 1. If necessary, follow the instructions from your administrator to double-click a package. The Endpoint Security icon appears in your taskbar notification area if it was not there already. 2. From the taskbar notification area icon, right-click and select Connect to connect to the Endpoint Security Management Server, if you are not already connected. You might have to enter an IP address that your administrator provides. 3. If a window with a fingerprint opens, click Approve.

10 4. You might have to download and install the Client package at this Point . 5. Follow the on-screen instructions to complete the installation and restart. Installing and Upgrading the Client When the installation is ready to start, a message opens that says to close all open applications and save your data before the installation or upgrade procedure starts. You might have the option to postpone an automatic installation or upgrade for a specified period of time. You will see a message when the installation is complete. To install or upgrade your Endpoint Security Client : 1. When the Endpoint Security Installation window opens, do one of these actions: Click Install to continue the installations. Save your data and close all open applications.