Check Point CloudGuard

Check Point CloudGuard automates governance across multi-cloud assets and services including security posture assessment, misconfiguration detection, and enforcement of security best practices and compliance frameworks.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Check Point CloudGuard server.

2. API Key (required) - A V2 API key associated with a user account that has permissions to fetch assets.

3. API Secret (required) - A V2 API secret associated with a user account that has permissions to fetch assets. For more details, see APIs.

4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

5. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

6. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

7. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch device findings (optional, default: false) - Select to fetch device information from Check Point CloudGuard.
2. Enabled asset types - List of asset types that can be fetched. All the types are selected by default.
   • Clear asset types you do not want to fetch.
   • When you click in the box, a drop-down list appears. You can both select and clear asset types you do not want to fetch from here too.
3. Fetch only billable asset types - Select this option to filter assets based on billable property.
4. Asset types to fetch as separate assets - Select assets that you want to fetch as separate assets instead of as devices from the drop-down list.

APIs

Axonius uses the CloudGuard API.
You can create an API key and secret by opening the CloudGuard web application and navigating to the My Settings section.

Required Permissions

The value supplied in API Key must be associated with credentials that have permissions to use RESTful HTTP requests.

Supported From Version

Supported from Axonius version 4.5