Check Point HARMONY R81 - Configuring Capsule Docs

Capsule Docs
R81 Harmony Endpoint Server Administration Guide|281
Item Description Item Description
2 Active Directory Server C External Network
3 SMTP Server 7 Public-facing DNS Server
4 Internal users 8 Mobile users
5 Management Console 9 External users
Notes:
n
Management Server (1) - A Secondary Management Server and Endpoint
Policy Servers can be used for redundancy and load balancing.
n
Active Directory Server (2) - Each user account in the Active Directory must
have a valid email address. This is usually populated automatically if Microsoft
Exchange is configured. User authentication fails if there are two AD accounts
with the same email address.
n
SMTP Server (3) - Is only required if the organization shares data with external
users
n
SMTP Server (3) with encryption protocols SSL and TLS are supported.
n
Reverse Proxy (6), and a Public-facing DNS Server (7) are only required if
one or more of these conditions exist:
l
The organization shares data with external users.
l
Protected document are accessed from mobile devices that do not have
access to internal resources.
If these conditions do not exist, a DNS Server is still required but does not need
to be accessible from external networks.
To share protected documents externally, you must have an SMTP server and configure a
Reverse Proxy.
Configuring Capsule Docs
Before you configure Capsule Docs policy in SmartEndpoint:
1.
Enable Endpoint Policy Management
Enable the Endpoint Policy Management component on the Endpoint Security
Management Server.
2.
Configure the Active Directory server as the Primary DNS server