Stay One Step Ahead in The Cloud: CloudGuard February’s Updates

Enosh — Mon, 10 Feb 2025 13:45:47 GMT

February Newsletter

Exciting news! We've launched new features to enhance your prevention-first cloud security. Dive into this update for the latest features, improvements, and updates to your CloudGuard Cloud Security platform, this time adding CloudGuard Network Security updates!

CloudGuard Cloud Native Application Protection Platform:

🚀 Effective Risk Management: Improved Asset Risk Score Calculation

Better Prioritization With Enhanced Risk Calculation

Contextual data, risk modifiers and compensating controls reduces asset risk score thus, helping your teams to better prioritize and save critical time.

With this improvement you get:

Calculated asset findings

Better risk modifiers

Compensation controls:

WAF integration – Either preventive or detective mode

Figure 1: EC2 instance VM without compensating control (CloudGuard WAF) calculated risk – 9.7

Figure 2: EC2 instance VM with compensating control (CloudGuard WAF) calculated risk – 8.6

🚀 Cloud Identity Entitlement Management: Enhanced Role Visibility & Usability to DevSecOps

Better Visibility With Identical Custom Roles Deduplication

Grouping identical roles in specific account or environment to avoid cloud vendor limitations.

Use the Identical Identities window to identify roles in your cloud environment that have duplicate permissions. This will help combine roles in your cloud environment safely and efficiently.

🔗 New Integration: Microsoft Sentinel Connector & CloudGuard CNAPP 

Microsoft Sentinel Connector now available in Azure Market 

Streamline CloudGuard security events to Microsoft Sentinel to achieve a unified view and enhance security visibility to your security events.  Learn more here 

With The New Integration you can:

Enhance Visibility and Context Across Environments
Streamline Threat Detection and Automated Incident Response
Improve Compliance and Risk Management

🚀 Integration update: CloudGuard CNAPP ServiceNow support latest Xanadu release  

ServiceNow Xanadu release support 

CloudGuard ServiceNow App (version 2.4.1) is supported & certified ServiceNow Xanadu release. 

🆕 New Platform Improvement: Google Cloud Platform Project onboarding

A New Comprehensive View To GCP Project Onboarding

Introducing a new refreshed GCP onboarding to CloudGuard. New user experience with the same great functionality.

🔒 Image Assurance: Image layer breakdown

Map which development processes generates risk

When it comes to Containers, the ability to build layers on top of layers, also creates confusion in attributing security risks to the relevant teams 

Introducing the new Image layer capability

With Image layer breakdown you could:  

Easily understand which Image generated which risk

Assign required fixes to the relevant team that owns the image layer

Reduce overall effort and remediation costs

Click to find out how to focus on the riskiest layers .

CloudGuard Network Security

  🆕 Updated Version: R82 is GA and supported in Public Cloud 

Check out the “what’s new” section in R82 CloudGuard admin guide to learn about all the new capabilities.  

🚀 New Capability: Simplifying Azure Virtual WAN DevSecOps  

Faster Deployment & Config using Terraform templates and API 

Significantly reduce operational complexity and enable new use cases with the new CloudGuard Network Security capabilities for Azure Virtual WAN: 

Configure Inbound Protection Use Case in Virtual WAN NVA

Configure gateway objects in SmartConsole and install policies in one step

Custom Template Creation

Security Management via CloudGuard NVA Private IP

GitHub Repositories: 

Deploy to a new Virtual WAN Hub

Deploy to an existing Virtual WAN Hub

Click To Learn more

Fig 1. Check Point CloudGuard Network Security Integration with Azure Virtual WAN 

🚀 New Capability: CloudGuard Network Security Support for Azure IAM  

Leverage Azure Active Directory identity access management (IAM) without the hassle of managing secrets or manually updating configurations. This enhancement simplifies the process and enhances security by integrating seamlessly with the Azure identity access management platform. 

🚀 New Capability: CloudGuard Controller identifies new Azure and AWS asset types 

When creating network management policies, you can now use these cloud asset types: 

Azure App Gateway

Azure API Management Service

AWS ENI

🚀 New Capability: Simplified deployment for Mult-Domain Management Server (MDS) in Public Cloud 

Simplified NAT configuration for Check Point MDS deployed in Public Cloud. 

As part of R82 improvements, configuration for Check Point MDS that is deployed on a Public Cloud is now a matter of a few clicks as described Here

🚀 New Capability: CloudGuard Network Security on Infinity Portal 

A new Infinity Portal “Welcome Page” now contains important information for those starting their journey with CloudGuard Network Security. Future updates will include a simplified Deployment Wizard, new Operational Dashboard, and more. 

Check Point Infinity Portal 

🚀 New Capability: Simplified Auto-Scaling Configuration in SmartConsole 

Smart Console users can now manage the Check Point CME configuration without having to connect to the Check Point Management Server via SSH. 

It will be available in Smart-1 Cloud, Web SmartConsole, and Windows SmartConsole according to the RLM release cycle.

🚀 New Capability: Accelerate Deployment with Terraform Registry  

Speed deployment with CloudGuard Network Security Terraform templates now available in the Check Point GitHub repository. These Check Point registries simplify the usage and integration of Terraform and other templates into customer environments:

AWS module
Azure module
GCP module – Coming soon!

🌟 Stay Ahead with Check Point

Explore Our New Features in Your CloudGuard Portal

Re: Stay One Step Ahead in The Cloud: CloudGuard February’s Updates

the_rock — Tue, 11 Feb 2025 02:53:03 GMT

Amazing work!

Andy

topic Stay One Step Ahead in The Cloud: CloudGuard February’s Updates in Cloud Firewall

Stay One Step Ahead in The Cloud: CloudGuard February’s Updates

Re: Stay One Step Ahead in The Cloud: CloudGuard February’s Updates