Summary
In order for the Check Point MDR team to monitor your Check Point Email Security (formerly named Email & Collaboration) data we will require integration with your Check Point Infinity Portal.
Note: Prior to completing these steps, your Email Security service should be enabled, licensed, and configured.
If you require assistance in completing the configuration of your Email Security service please contact your sales engineer.
If you need any assistance with this procedure, please open a ticket in the MDR Customer portal under "MDR Support" or if you are currently onboarding reply to your welcome email, and we will schedule a time to assist.
Note: We will need these three items filled in on the MDR customer portal profile page when adding the integration also ensure the procedure outlined below is completed before adding:
- Client ID
- Client Secret (Key)
- Client (Authentication) URL
Required: Adding MDR SOC Access
Before submitting the integration on the MDR Portal please add Daniel Green danielgree@checkpoint.com to your Check Point Endpoint Security user pool. This is our MDR SOC Manager, he requires this access to do the following:
- He will add the MDR SOC team to your tenant as read only so that they can fully investigate malicious alerts seen from your environment.
STEPS:
- Select the Gear Icon>Users and select New in the toolbar.
- In the Name field, enter a user name. Daniel Green
- In the Email field, enter the new user's email address. danielgree@checkpoint.com
- In the Global Roles field, select the roles for the new user from the list. You can select multiple roles for each user. Please select "Admin"
- Click Add to save.
Procedure
- Log in to your Check Point Portal
- To manage your API keys, click on the arrow menu under your user name and select Gear Icon > API Keys
- Select "New" and "New account API key".
- For the Service, select Email and Collaboration.
- Select expiration appropriate to your license expiration.
- Once complete, all the information to enter on the MDR Customer portal when adding this integration is here but there is one additional step to do before clicking add noted below (Adding User).