Check Point HARMONY R81 Administration Manual page 298

e. On the Endpoint Security Management Server, run:
cpstart
2.
Configure the Firewall Gateway to accept traffic from Anti-Malware signature update
servers and Cloud Reputation services
After configuring the proxy server, configure the Firewall Gateway to accept the traffic
to the Anti-Malware update servers.
a. In your Firewall Gateway, allow outbound internet connectivity.
b. In your Firewall Gateway, allow outbound connectivity to the Anti-Malware
update server.
3.
Configure the Firewall Gateway to allow the Endpoint Security server to access ports 80
and 443
The Endpoint Security server must have access to ports 80 and 443 on the Anti-
Malware Signature Update Server to retrieve the latest malware definitions. Make
sure that your Firewall Gateway allows this traffic.
4.
Install the Anti-Malware Engine on the Endpoint Security Servers
The Endpoint Security Management Server gets the Malware signatures from the
central Malware definition server. Endpoint Security clients with the Anti-Malware
component get Malware signature updates either from the Endpoint Security
Management Server or from their Endpoint Policy Server.
By default, the Endpoint Security Management Server and the Endpoint Policy
Servers do not have the Malware update engine installed. You must install the
Malware update engine on:
n The Endpoint Security Management Server - From SmartEndpoint.
n Endpoint Policy Servers - By installing a hotfix using CPUSE .
To Install the Malware update engine on the Endpoint Security Management
Server
a. Open SmartEndpoint
b. From the Menu, select Tools > Anti-Malware Updates.
c. Click Download and install engine.
R81 Harmony Endpoint Server Administration Guide | 298
Anti-Malware