Integrations

Overview

The Checkpoint Integration allows Cywift to securely connect with Check Point Security Management Server to collect firewall policies, rule bases, object configurations, and compliance-related data.

This integration helps improve firewall visibility and automate compliance monitoring.

Before starting the integration, ensure the following:

• Administrative access to Check Point Management Server
• Management server hostname or IP address
• Valid API username and password
• API service enabled
• Network connectivity between Cywift and Check Point Management Server

Step 1: Enable API Access and Create Read-Only User

Cywift uses API-based communication to securely collect firewall data.

Enable API Service

Log in to the CheckPoint Management Server CLI.

Check API status:

api status

If API is disabled,start it:

api start

Create Read-OnlyUser

Log in toSmartConsole.

Navigate to:

Manage &Settings → Permissions Profiles

Create or assign aprofile with read-only permissions.

Create a new administrator and assign the read-only profile.

Publish changes.

Validate API Access

Test API connectivity:

mgmt_cli show gateways-and-servers -u <username> -p <password>

Important Notes:

• Use read-onlypermissions only
• Publish all changes after configuration
• Restrict API access where possible

Step 2: Navigate to Integrations in Cywift

• Log in to the Cywift Platform
• Go to Integration from the left menu
• Under NGFW
• Select Checkpoint
• Click Connect

Step 3: Add Individual Integration

Use this option when integrating a single Check Point Management Server.

Required Fields

Number of Integration
Select Individual Integration

Integration Type
Select NGFW

Collectors
Select a configured collector

Integration System
Select Checkpoint

Alias
Enter a friendly name for the integration

Owner
Select the integration owner

Host Address
Enter the management server hostname or IP address

Username
Enter the API username

Password
Enter the corresponding password

Actions

Test Connection
Verifies API connectivity and authentication

Cancel
Discards configuration

Step 4: Add Bulk Integration

Use this option to integrate multiple Check Point Management Servers.

Steps

• Select Bulk Integration
• Choose Integration Type (NGFW)
• Select Collectors
• Choose Integration System: Checkpoint
• Click Download Template
• Fill in the template with required management server details
• Upload the completed file
• Click Test Connection

‍ Troubleshooting Tips

• Ensure API serviceis enabled
• Verify username and password
• Confirm read-only permissions are assigned
• Check management server connectivity
• Ensure firewall rules allow API communication
• Verify Smart Console changes are published