SandBlast Agent Dynamic Updates

SandBlast Agent dynamic updates enable stronger security for endpoints, with regular updates to SandBlast Agent files. This keeps clients protected from the latest threats.

By default, the Threat Emulation Check Point Software Blade on a Security Gateway that monitors the behavior of files in a sandbox to determine whether or not they are malicious. Acronym: TE. component runs the EPNetUpdate.exe process every 6 hours to get updates and update relevant files.

If necessary, you can disable the dynamic updates in Database Tool (GuiDBEdit Tool).

To enable or disable SandBlast Agent dynamic updates:

1. Close all SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. windows.

2. Connect with Database Tool (GuiDBEdit Tool) (see sk13009) to Endpoint Security Management Server A Security Management Server that manages your Endpoint Security environment. Includes the Endpoint Security policy management and databases. It communicates with endpoint clients to update their components, policies, and protection data..

3. Search for: enable_efr_updatability

4. Right-click and select Edit.

5. To change the value:

   • true - enabled (default)

   • false - disabled

6. Save the changes.

7. Close Database Tool (GuiDBEdit Tool).

8. In SmartEndpoint A Check Point GUI application which connects to the Endpoint Security Management Server, to manage your Endpoint Security environment - to deploy, monitor and configure Endpoint Security clients and policies., install policy.