Skip to main content

Cyware Orchestrate

Check Point Firewall

App Vendor: Check Point

App Category: Network Security

Connector version: 1.0.0

API Version: 1.1.0

About App

Check Point Firewall prevents malware and application-layer attacks across the whole network. The Check Point Firewall app enables security teams to integrate with the checkpoint firewall enterprise application to manage hosts, publish changes, and retrieve session tokens.

The Check Point Firewall app is configured with the Orchestrate application to perform the following actions:

Action Name

Description

Add A Host

This action adds a host.

Publish All Changes by User

The action publishes all the changes that are made by a user.

Show Host Detail

This action retrieves the details of a host.

Get Session Token

The action retrieves the token of an authorized session.

Configuration Parameters

The following configuration parameters are required for the Check Point Firewall app to communicate with the Check Point Firewall enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base URL

Enter the base url.

Example:

"https://<sample-server>:<port>"

Text

Required

Base URL format:http|https://<checkpoint_firewall_server_ip|domain.tld:port>

Username

Enter the username.

Example:

"sample username"

Text

Required

Password

Enter the password.

Example:

"sample password"

Password

Required

SSL Verification

Optional preference to either verify or skip the SSL certificate verification.

Example:

True

Boolean

Optional

Allowed values:

  • true

  • false

Default value: false

Action: Add A Host

This action adds a host.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Object name

Enter the object name.

Example:

"<Sample object name>"

Text

Required

IP address

Enter the IP address.

Example:

"<Sample IP address>"

Text

Required

Group name

Enter the group name.

Example:

"Blacklist"

Text

Required

Token

Enter the token.

Example:

"<Sample token>"

Text

Required

You can retrieve the Token using the Get Session Token action.

Example Request

[
  {
    "object_name": "<Sample object name>",
    "ip_address": "<Sample IP address>",
    "group_name": "Blacklist",
    "token": "<Sample token>"
  }
]
Action: Publish All Changes by User

The action publishes all the changes that are made by a user.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Token

Enter the token.

Example:

"<Sample token>"

Text

Required

You can retrieve the Token using the Get Session Token action.

Example Request

[
  {
    "token": "<Sample token>"
  }
]
Action: Show Host Details

This action retrieves the details of a host.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Token

Enter the token.

Example:

"<Sample token>"

Text

Required

You can retrieve the Token using the Get Session Token action.

Object name

Enter the object name.

Example:

"<Sample object name>"

Text

Required

Example Request

[
  {
    "token": "<Sample token>",
    "obj_name": "<Sample object name>"
  }
]
Action: Get Session Token

The action retrieves the token of an authorized session.

Action Input Parameters

This action does not require any input parameter.