Summary
In order for the Check Point MDR team to monitor your Cloudguard data we will require integration with your Cloudguard portal.
Note: Prior to completing these steps, your Cloudguard service should be enabled, licensed, and configured.
If you require assistance in completing the configuration of your Cloudguard service please contact your sales engineer.
If you need any assistance with this procedure, please open a ticket in the MDR Customer portal under "MDR Support" or if you are currently onboarding reply to your welcome email, and we will schedule a time to assist.
Note: We will need these three items filled in on the MDR customer portal profile page when adding the integration also ensure the procedure outlined below is completed before adding:
- Client ID
- Client Secret
- Client (Authentication) URL
Procedure
Log in to your Check Point portal tenant for Cloudguard
Once in Cloudguard go to Settings -> Roles -> Service Accounts
Click Add Account
Give it a name like Check Point MDR and select the role of Auditor
This will give you the ID and Secret.
To get the Client URL go here:
Go to settings -> account info
On the top right take note of your data center
Enter the URL that corresponds to your datacenter.
United States: https://api.dome9.com/v2/
Europe: https://api.eu1.dome9.com/v2/
Australia: https://api.ap2.dome9.com/v2/
Canada: https://api.cace1.dome9.com/v2/
India: https://api.ap3.dome9.com/v2/
Singapore: https://api.ap1.dome9.com/v2/
Once submitted the MDR support team will validate the configuration and if working put it in tuning. You will be notified.