AI Copilot: Threat or Ally for Security Professionals? How to enable?

[israelfds95]

Today, I want to talk about AI Copilot—how to enable it and share some initial tests.

At first, I was a bit apprehensive, but it’s clear that Copilot is becoming a powerful ally in daily operations, helping with environment analysis, logs, rule bases, and policy management.

That said, there’s a risk: for less experienced professionals, Copilot can become a crutch. It should be used as a tool, not as a replacement for critical thinking and troubleshooting skills.

For experienced analysts, Copilot truly shines as a productivity booster, making complex tasks faster and more efficient.

Key Facts and Best Practices about Check Point AI Copilot

Integration: AI Copilot is available in SmartConsole (desktop and web) for Security Management Servers running R81.20 (Build 660+) and R82 (Build 1027+). Web SmartConsole requires Build 125+.

Requirements: The SMS must be connected to the Infinity Portal.

How are you using AI Copilot in your daily work? Have you found it to be a game-changer, or do you have concerns? Let’s discuss!

At the moment, I still see some limitations: it can’t create policies or objects, or delete rules. It’s currently more focused on consulting logs and searching for information about objects and policies.

How to enable Infinity AI Copilot in SmartConsole
https://support.checkpoint.com/results/sk/sk182844

How to Enable AI Copilot – Tutorial

1 – Go to SmartConsole → Infinity Services

2 – Connect to your Infinity Portal account

• You need an Infinity Portal account. The SK does not specify whether a specific paid license is required to use AI Copilot.

3 – Enable Log Sharing

It’s important to note that Log Sharing, Configuration Sharing, and Gateway Connector are now located in a new position within SmartConsole. You can find them in the upper-right corner, under the three-dot menu at the top of the Infinity Services page.

Previously, these options were located in the lower-left area. This change took me a bit of time to figure out—I was used to the original position and initially thought the option had disappeared. If you ran into the same situation, the image shows exactly where to find it.

4 – Find Infinity AI Copilot

• Enable it

Enable Infinity AI Copilot

Now, AI Copilot will appear in the upper-right corner.

NOTE: You may need to close and reopen SmartConsole for it to appear.

Now see the copilot, let's test!!

What is the best use for AI Copilot?

What can’t you do?

Question: Do we have any unused network objects in our configuration?

It analyzes the configuration and provides the answer

You can click directly on the object

But this can be easily checked directly in Object Explorer under the Unused Objects option, which provides a complete view. We can also check Where Used to be safe and confirm whether the object is truly not being used, and then decide if it really makes sense to remove it.

I created a host to test whether Copilot can delete it.

It can’t delete it.

It can’t create rules, but it can help with API commands. However, it can’t run the commands.

It can’t create rules

It can provide SK information and insights.

It can understand Portuguese

It primarily supports English, Portuguese, and Spanish, which are the best languages for Copilot at the moment.

[WiliRGasparetto]

Excellent work, Israel, it turned out great!

[the_rock]

Amazing work, as always. Well, AI is just the part of world we live in, its not going away : - )

[israelfds95]

Exactly. I see that there is some concern about AI, but when used correctly, it becomes a great ally.

[the_rock]

Amazon Ruffus AI helped me get my money back few times, so effortless : - )

[PhoneBoy]

Nicely done!

[_Val_]

Moved to the correct space

[gmasters428]

Great post, Israel. Thank you.

[israelfds95]

Thanks my friend. I'm happy that you liked

[WiliRGasparetto]

Thank you very much, your contribution is very useful for the Forum

[Vincent_Bacher]

Thank you very much for the interesting and detailed summary. I would also be concerned that, in larger multi-domain environments, the system might reach its limits.