May

New Features

• Added New Data Residencies: Australia and India

  Harmony SASE is now available in the Infinity Portal in two new data residencies, Australia and India, in addition to the existing US and EU options. This expansion supports customers with regional data residency requirements and broadens our global reach. See the blog post.

• New iOS Agent with Harmony Mobile Protect available on the App Store
  The latest iOS agent is now live on the App Store and available from the Downloads page in Harmony SASE. The new version:

  • Integrates Harmony Mobile Protect security features with SASE Private Access connectivity. 

  • Requires a Harmony Mobile Protect license.

• Internet Access – Allow Logs now available
  Administrators can now view Allow logs for Internet Access policies, in addition to existing block and alert logs. This enhancement improves visibility of permitted user activity and helps with auditing and troubleshooting. Available on agent version 11.5 or above.

  Note:

  This feature may generate a high volume of logs.
• Internet Access Logs integrated with Infinity Events and SIEM Export Support
  • All security engines in Internet Access, such as URL Filtering, Anti-Virus, and Anti-Bot, now send logs to Infinity Events, providing centralized and real-time visibility across your SASE deployment.
  • You can now export logs to your SIEM solution via Syslog from Infinity Events. This enables streamlined incident response, threat hunting, and compliance reporting by integrating SASE logs into your existing security workflows.
    
    Note:

     Configuration for SIEM export is available in the Infinity Portal. For more information, see the Infinity Portal Administration Guide.
• Agent Anti-Tampering
  

  Anti-tampering is now supported (available on agent version 11.5 and above). Uninstalling the agent requires a code, preventing unauthorized removal.

• Internet Access Transparent Installation
  A new transparent install capability allows Internet Access protection to be applied immediately upon agent installation, without requiring user login. This ensures instant security for internet traffic. For more information, see the Harmony SASE Admin Guide.

Enhancements

• Trusted Networks Enhancement
  Trusted networks can now be identified using an HTTPS server, providing more flexible and secure detection mechanisms.
• Unified Log View
  Harmony SASE introduces a redesigned log screen that aligns with Check Point Infinity Events, delivering a unified and consistent log experience across platforms to enhance visibility and simplify analysis.

Early Availability

Improved security visibility by capturing only events blocked by firewall rules
Key features:

• Improved Visibility - Only events that are blocked by firewall rules are logged, helping you quickly identify and troubleshoot unauthorized access attempts.
•  Network-Level Control - Logging can be enabled or disabled at the network level directly from the Firewall configuration page, allowing for granular logging based on specific network needs.
• Log Access - You can view the logged events in:
  • SASE Unified Logs
  • Infinity Events page
  • To enable firewall logs, contact Check Point Support.