Check Point Harmony Endpoint: How Media Encryption and Port Protection Secures USB Data

Check Point's Harmony Endpoint includes a Media Encryption and Port Protection (ME&PP) module designed to prevent data leakage and malware entry through USB and other removable media ports. The system distinguishes between storage devices, which can hold data and be encrypted, and peripheral devices like keyboards and mice, which cannot. Administrators can configure five write-action modes ranging from full access to complete write blocking, with an option to encrypt only business-related file types such as documents, spreadsheets, and archives while leaving personal files unencrypted. Each management instance is assigned a unique Site UUID, which is embedded on encrypted devices so that only trusted sites can unlock them, preventing access on unmanaged machines. An offline Explorer Utility can also be placed on the device to allow password-based access to encrypted data when no managed endpoint is available.