Connected, Disconnected And Restricted Rules - Check Point HARMONY R81 Administration Manual

Connected, Disconnected and Restricted Rules

Endpoint Security can enforce policy rules on computers and users based on their connection
and compliance state.
When you create a policy rule, you select the connection and compliance states for which the
rule is enforced. You can define rules with these states:
n Connected state rule is enforced when a compliant endpoint computer has a connection
to the Endpoint Security Management Server. This is the default rule for a component
policy. It applies if there is no rule for the Disconnected or Restricted states of the
component. All components have a Connected Rule.
n Disconnected state rule is enforced when an endpoint computer is not connected to the
Endpoint Security Management Server. For example, you can enforce a more restrictive
policy if users are working from home and are not protected by organizational resources.
You can define a Disconnected policy for only some of the Endpoint Security
components. See
n Restricted state rule is enforced when an endpoint computer is not in compliance with
the enterprise security requirements. In this state, you usually choose to prevent users
from accessing some, if not all, network resources. You can define a Restricted policy for
only some of the Endpoint Security components. See
Security Component" on page 140
"Rule Types for Each Endpoint Security Component" on page 140
R81 Harmony Endpoint Server Administration Guide | 139
Connected, Disconnected and Restricted Rules
"Rule Types for Each Endpoint