We are excited to announce an Infoblox Security Ecosystem integration with Check Point’s Next Generation Firewall (NGFW)
Integrating Check Point’s Next Generation Firewall into the Infoblox Security Ecosystem increases the visibility of threats for both network security and incident response teams. Infoblox along with Check Point’s Next Generation Firewall allows effective, and granular control over network assets that include access control, geo policies, and much more. This integration enables security automation, saves valuable administrative time, and effectively increases the leverage and ROI of both products.
This integration supports a wide variety of events: ADP, Discovery, Fixed, Host, Lease, Network, RPZ, Range, and Tunnel. A grid with NIOS version 8.3 or higher is required.
The Infoblox and Check Point Integration Deployment Guide will cover the steps required to properly deploy this integration. Integration templates are included. The templates are in a .json format and are provided “as-is”. Templates should be fully tested in your lab environment and modified as needed before implementing them into production.
The templates require extensible attributes described in the table below. It is recommended to inherit attributes with the default values from the network view level.
|
Name
|
Description
|
|
CP_AddByHostName
|
Defines if Host records are to be added to Check Point by name.
|
|
CP_AssetSync
|
Defines if syncing asset events with Check Point is desired or not.
|
|
CP_AssetTimestamp
|
Timestamp that records when the asset was last synced with Check Point.
|
|
CP_SecuritySync
|
Defines if syncing security events with Check Point is desired or not.
|
|
CP_SecurityTimestamp
|
Timestamp that is updated whenever a security event occurs.
|
In addition to the Extensible Attributes, the following Session Variables are also required:
|
Name
|
Description
|
|
CP_AssetGroup
|
The Asset Group is a Network Group located on the Check Point firewall. All supported network objects that are populated from Infoblox are members of this group.
|
|
CP_SecurityGroup
|
The Security Group is a Network Group located on the Check Point firewall. When a security event is triggered by a device, the device is added to this group.
|
Below is a demo video which cover use cases and the configuration of this integration:
Feedback, Comments, or Questions are welcome.
