Check Point Infinity

Check Point Infinity protects against cyber threats across networks, endpoint, cloud and mobile devices. This adapter supports the entire Infinity platform, including Check Point firewalls.

Parameters

1. CheckpointR80 Host URL - The hostname of the Check Point Infinity server
2. User Name and Password (required) - The credentials for a user account that has Read-only permissions to fetch assets.
3. CheckPoint Domain (optional) - An optional domain to connect within the Check Point Infinity server.
4. API Version (default: v1.5 or earlier) - Select the API Version to use, either v1.5 or earlier, or v1.6 and later. Refer to Check Point Management API Reference
5. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
6. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

Advanced Settings

1. Calculate Last Seen from creation/modification date (optional) - Select whether to calculate Last Seen based on the Last Modified Date or Creation Date.
2. Compare devices to "Unused Objects" database (optional) - When selected, assets that match a record in the Unused Objects database by their UID receive a new Detected as Unused Object field set to Yes in the Query Wizard; assets that don't match any such records are set to No in the Query Wizard.
3. Exclude devices that match "Unused Objects" (optional) - When selected, regardless of the Compare devices to "Unused Objects" database parameter, assets that match a record in the Unused Objects database are excluded from the fetch, and aren't added to Axonius.
4. Create Devices from Smart Mgmt logs (optional) - Select to create devices from Smart Management API logs.
5. Extended NAT Handling for device enrichment - Select this option to match host objects against the NAT rulebase to anticipate additional IP addresses for those objects.
6. Internal CIDR blocks *(optional, default: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) - Enter the internal CIDR blocks that you want to fetch from.
7. Log search timeframe (optional, default: last-hour) - Filter search results of logs by the specified timeframe. The Smart Management log API can return a maximum of 1 million records.
8. Log search criteria (optional, default: blade:"Firewall") - Filter search results of logs by specific types of devices and products.

Creating a read-only user for Check Point Infinity

Creating a read-only user varies between different versions of Check Point Infinity and instructions for doing so can be found in the Check Point user manual. As a general reference, the following guide can be used to create read-only administrators.