Checkpoint Infinity

[Ihenock1011]

Hi All,

We have checkpoint infinity portal access, and I want to know how we can leverage our security posture using this infinity portal. I have seen a couple of videos on YouTube about what the infinity portal is, but I didn't get the full information. So, are there any deep dive tutorials or resources available for free on the internet? Kindly send me the link.

Regards,

[PhoneBoy]

How you will leverage Infinity Portal will depend on the products and services you’ve purchased from Check Point.
Some products/services can only be managed from Infinity Portal (Harmony Mobile, Quantum SD-WAN, and Harmony SASE for instance).
For others, management in the could (versus on-premise) is an option (for Harmony Endpoint or Quantum Security Gateways with Smart-1 Cloud).
Quantum Security Gateways can leverage Infinity Portal for automated remediation with Playblocks.

Infinity Portal provides an integration point between the various security services.
Infinity Events gives you unified visibility across your various Check Point products.

if you can detail which Check Point products you have, we can offer more specific information where Infinity Portal will be helpful.

[Ihenock1011]

@PhoneBoy Thanks for the information and we have checkpoint endpoint security, Maestro based on premise Quantum Security gateways, and SOC XDR.

[PhoneBoy]

Where is the management for Endpoint Security and your Quantum Security Gateways?
You're already sharing intelligence between your products because they all use ThreatCloud 🙂

In any case, you should be able to leverage this:  https://www.checkpoint.com/infinity/events/ 
Even if you're using on-premise management, the logs can be fed to Infinity Events.
There are also features you can leverage by connecting your on-prem management to Infinity Portal.
Most of these features are extra cost, but there are certain notifications we provide for free via Playblocks.

[the_rock]

I believe there are lots of videos on it on CP youtube channel, but as Phoneboy said, if you tell is what exactly the goal is, we can provide better answer.

Best,

Andy

[Ihenock1011]

My goal is firstly to manage different CP products via the Infinity portal, and secondly, to understand the term "Infinity Playblocks" better and learn how to automatically block threats through this technology.

[Tal_Paz-Fridman · Accepted solution]

For resources related to Infinity Playblocks I suggest the following:

Playblocks: Security Automation & Collaboration Platform

https://www.youtube.com/watch?v=zPi9URdUZf0

Overview and Demo

https://www.youtube.com/watch?v=9-UAEtLGE8M 

[the_rock]

excellent!

[genisis__]

I'm doing a POC right now and thus far have found issues, which TAC have resolved.  These will be rolled out as a generic update within 1 month (so I was told by R&D).
I think I've found another issue which is more serious, but I want to double check my observation and then go through TAC to confirm before I post anything without facts.

This relates to S1C - Management