Web Download Protection - Check Point HARMONY R81 Administration Manual

Web Download Protection

Define the settings for the Harmony Endpoint Browser Extension to protect against malicious
files that come from internet sources. The Browser Extension is supported on Google Chrome.
The automatic options are:
Protect web downloads with Threat Extraction and Emulation - Send files for
n
emulation. While a file is tested, users receive a copy of it with all suspicious parts
removed. If the file is not malicious, users receive the original file when the emulation is
finished. Emulation can take up to two minutes.
n Protect web downloads with Threat Emulation - Send files for emulation. Users do not
receive a copy during the emulation. If the file is not malicious, users receive the original
file when the emulation is finished. Emulation can take up to two minutes.
n Do not use web download protection - The Harmony Endpoint Browser Extension is not
active.
When Threat Extraction is selected, it only applies to file types that can be extracted, such as
documents.
When Threat Emulation is selected, it only applies to file types that can be emulated, such as
executables and scripts.
You can edit the selections manually to define more settings for Threat Extraction and Threat
Emulation for different file types.
To change the setting for categories of file types:
1. In a Harmony Endpoint Threat Extraction and Threat Emulation rule, right-click the Web
Download Protection Action and select Edit Shared Action.
2. Expand the list for the type of file that you choose:
n Files that can be extracted and emulated (such as documents and pictures).
n Files that can only be emulated (such as executables and scripts).
n When neither Extraction nor Emulation is supported (such as videos).
3. Select an option for emulation and access to the original file from the options shown.
Different options show for different file types.
n Extract and suspend original file until emulation completes - Send files for
emulation. While a file is tested, the user receives a copy of it with all suspicious
parts removed.
R81 Harmony Endpoint Server Administration Guide | 339
Web Download Protection