Stay One Step Ahead in The Cloud: CloudGuard February’s Updates

[Enosh]

February Newsletter 

Exciting news! We've launched new features to enhance your prevention-first cloud security. Dive into this update for the latest features, improvements, and updates to your CloudGuard Cloud Security platform, this time adding CloudGuard Network Security updates! 

 CloudGuard Cloud Native Application Protection Platform: 

🚀 Effective Risk Management: Improved Asset Risk Score Calculation 

Better Prioritization With Enhanced Risk Calculation  

Contextual data, risk modifiers and compensating controls reduces asset risk score thus, helping your teams to better prioritize and save critical time. 

With this improvement you get:  

• Calculated asset findings  

• Better risk modifiers ​ 

• Compensation controls: 

• WAF integration – Either preventive or detective mode 

Figure 1: EC2 instance VM without compensating control (CloudGuard WAF) calculated risk – 9.7 

Figure 2: EC2 instance VM with compensating control (CloudGuard WAF) calculated risk – 8.6   

🚀 Cloud Identity Entitlement Management: Enhanced Role Visibility & Usability to DevSecOps 

Better Visibility With Identical Custom Roles Deduplication   

Grouping identical roles in specific account or environment to avoid cloud vendor limitations. 

Use the Identical Identities window to identify roles in your cloud environment that have duplicate permissions. This will help combine roles in your cloud environment safely and efficiently.  

 🔗 New Integration: Microsoft Sentinel Connector & CloudGuard CNAPP  

Microsoft Sentinel Connector now available in Azure Market  

Streamline CloudGuard security events to Microsoft Sentinel to achieve a unified view and enhance security visibility to your security events.  Learn more here  

With The New Integration you can:  

1. Enhance Visibility and Context Across Environments 
2. Streamline Threat Detection and Automated Incident Response 
3. Improve Compliance and Risk Management 

 🚀 Integration update: CloudGuard CNAPP ServiceNow support latest Xanadu release   

ServiceNow Xanadu release support  

CloudGuard ServiceNow App (version 2.4.1) is supported & certified ServiceNow Xanadu release.  

🆕 New Platform Improvement: Google Cloud Platform Project onboarding 

A New Comprehensive View To GCP Project Onboarding  

Introducing a new refreshed GCP onboarding to CloudGuard. New user experience with the same great functionality. 

 🔒 Image Assurance: Image layer breakdown 

Map which development processes generates risk 

When it comes to Containers, the ability to build layers on top of layers, also creates confusion in attributing security risks to the relevant teams  

Introducing the new Image layer capability 

With Image layer breakdown you could:   

1. Easily understand which Image generated which risk  

1. Assign required fixes to the relevant team that owns the image layer 

1. Reduce overall effort and remediation costs 

Click to find out how to focus on the riskiest layers . 

 CloudGuard Network Security 

  🆕 Updated Version: R82 is GA and supported in Public Cloud  

Check out the “what’s new” section in R82 CloudGuard admin guide to learn about all the new capabilities.   

🚀 New Capability: Simplifying Azure Virtual WAN DevSecOps   

Faster Deployment & Config using Terraform templates and API  

Significantly reduce operational complexity and enable new use cases with the new CloudGuard Network Security capabilities for Azure Virtual WAN:  

1. Configure Inbound Protection Use Case in Virtual WAN NVA  

1. Configure gateway objects in SmartConsole and install policies in one step  

1. Custom Template Creation  

1. Security Management via CloudGuard NVA Private IP   

GitHub Repositories:  

• Deploy to a new Virtual WAN Hub  

• Deploy to an existing Virtual WAN Hub  

Click To Learn more  

Fig 1. Check Point CloudGuard Network Security Integration with Azure Virtual WAN  

 🚀 New Capability: CloudGuard Network Security Support for Azure IAM   

Leverage Azure Active Directory identity access management (IAM) without the hassle of managing secrets or manually updating configurations. This enhancement simplifies the process and enhances security by integrating seamlessly with the Azure identity access management platform.  

🚀 New Capability: CloudGuard Controller identifies new Azure and AWS asset types  

When creating network management policies, you can now use these cloud asset types:  

1. Azure App Gateway  

1. Azure API Management Service  

1. AWS ENI  

🚀 New Capability: Simplified deployment for Mult-Domain Management Server (MDS) in Public Cloud  

Simplified NAT configuration for Check Point MDS deployed in Public Cloud.  

As part of R82 improvements, configuration for Check Point MDS that is deployed on a Public Cloud is now a matter of a few clicks as described Here  

 🚀 New Capability: CloudGuard Network Security on Infinity Portal  

A new Infinity Portal “Welcome Page” now contains important information for those starting their journey with CloudGuard Network Security. Future updates will include a simplified Deployment Wizard, new Operational Dashboard, and more.  

Check Point Infinity Portal  

 

🚀 New Capability: Simplified Auto-Scaling Configuration in SmartConsole  

Smart Console users can now manage the Check Point CME configuration without having to connect to the Check Point Management Server via SSH.  

It will be available in Smart-1 Cloud, Web SmartConsole, and Windows SmartConsole according to the RLM release cycle. 

 🚀 New Capability: Accelerate Deployment with Terraform Registry   

Speed deployment with CloudGuard Network Security Terraform templates now available in the Check Point GitHub repository. These Check Point registries simplify the usage and integration of Terraform and other templates into customer environments: 

1. AWS module  
2. Azure module  
3. GCP module – Coming soon! 

 🌟 Stay Ahead with Check Point 

 Explore Our New Features in Your CloudGuard Portal