Harmony Web Protection

Designed as an additional method for existing Check Point SandBlast customers to protect users from malicious websites and malicious files downloaded using the Chrome browser, the SandBlast Web Extension blocks the most advanced and targeted web-based attacks from reaching your system.

(NOTE: your company must have either a SandBlast Appliance or access to the SandBlast Cloud Service in order to use this extension)

Check Point SandBlast elevates threat prevention to the next level with evasion-resistant malware detection, all while ensuring rapid delivery of safe content. The extension provides a transparent interface for Chrome users to leverage three key capabilities:

• Threat Emulation inspects incoming files within a secure sandboxing environment to detect even the most sophisticated zero-day threats. On file download, the extension will intercept the download and send it to emulation in an isolated sandbox environment, according to the threat emulation configuration. Access to the file will be granted only if it was deemed safe by the sandbox verdict. Files that were found to be malicious will be blocked to protect the user.
• Threat Extraction complements this solution by promptly delivering a safe reconstructed version of potentially malicious files, maintaining uninterrupted business flow. Supported file types will be immediately sanitized and access to a risk-free version of the file will be granted to the user. The original version of the file will be available to the user, by demand, if it was found to be safe by threat emulation. • Zero Phishing detects unknown phishing sites that target secure and confidential user information and prevents employees from reusing their corporate credentials on external sites. Web pages requesting user inputs (such as user credentials and credit card details) will be inspected in real time to detect signs of phishing attempts. User inputs to pages that were found to be phishing sites will be blocked. The extension also detects, logs and warns irresponsible usage of corporate credentials in untrusted web sites.