Forum Discussion

Steve Switzer's avatar
Steve Switzer
Copper Contributor
Oct 05, 2017

Cloud App Security lack of integration with checkpoint FW

We have cloud app security as part of our microsoft estate 

We also have checkpoint firewalls as our main firewall for our on site security

Unfortunatley according to the compatibility matrix for the two products this is one of the least compatible  match ups we could have.

Why both microsoft and checkpoint are major security players .. checkpoint is still the major firewall producer .

It works for shadow IT but we cant see users or data quantities which is a real pain to be honest.

If we had palo alto we would be able to see all of this

Is this likely to change anytime soon ?

Cloud App Security
  • Niv Goldenberg's avatar
    Niv Goldenberg
    Icon for Microsoft rankMicrosoft
    Oct 05, 2017

    Hi Steve,

     

    Cloud App Security's Shadow IT Discovery is based on inteligent analysis of traffic logs generated by the customer's Proxy/Firewall. Thefore, the granualrity of the Discovery report and the ability to provide visibilty into specific users and data quantities tightly relies on the data logged in the traffic by the appliance. Cloud App Security cannot show or analyze attributes that are not included in your logs.

    As you saw in the compatibiltiy matrix (available at https://docs.microsoft.com/en-us/cloud-app-security/set-up-cloud-discovery), Checkpoint Firewalls do not include username nor data quanitites information.

    Unfortunatley, I am not aware of any plans from Checkpoint to add these attributes. However, I can assure you that once they are added Cloud App Security will support them.

     

    Thanks,

    Niv

     

     

    • Deleted's avatar
      Deleted
      Feb 19, 2018

      Dear all,

       

      understand, but I guess that Checkpoint has these attributes. But of course you have to have appropriate license/blade activated. Checkpoint has Identity Awareness blade, which collects for example Active Directory users/computers and extend its log information with this. Also there is way to enable Application Control/URL filtering/IPS blade, switch on accounting information on firewall rules to gather traffic data, and show such a information in Event Manager, Report Manager, guess there should be some way how to extend support of CheckPoint devices for CloudApp Security.

Resources