MSP Portal

The CloudGuard MSP portal allows MSPs and CloudGuard resellers to create and manage their customers' CloudGuard Dome9 accounts.

MSPs and MSSPs

Managed Service Providers (MSP) provide services to business customers to manage their IT needs. This can include procurement, setup, and ongoing operational monitoring. For customers using cloud-based IT, or a cloud-based web presence, these services are in the cloud (on providers such as AWSClosed Amazon® Web Services. Public cloud platform that offers global compute, storage, database, application and other cloud services. and AzureClosed Collection of integrated cloud services that developers and IT professionals use to build, deploy, and manage applications through a global network of data centers managed by Microsoft®.). Resellers are MSPs that sell CloudGuard and cloud platform services to customers.

Managed Security Service Providers (MSSP), in addition, provide network security services to their customers. This could include configuring a secure network, monitoring their security posture, and responding to security events. These additional services can be applied to the cloud if the customer's presence is located there.

How CloudGuard can help MSPs for cloud-based computing

CloudGuard provides cloud security and compliance services for customers with a presence on AWS, Azure or GCPClosed Google® Cloud Platform - a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products, such as Google Search, Gmail, Google Drive, and YouTube.. This includes analysis of a customer's current security posture, or compliance, ongoing monitoring, and corrective actions to remedy problems.

MSPs that work through CloudGuard can offer these services on to their customers. Further, they can use different use-case models with their customers. These are described in the next section.

Resellers can use the CloudGuard MSP portal to create CloudGuard accounts for their customers.

Work Modes

MSPs can work with CloudGuard in different ways:

  • In one model, the MSP provides a full service to the customer:

    • Create accounts for them with the cloud provider and with CloudGuard

    • Have full access to the customer's CloudGuard account to act on their behalf

    • Generate reports for them

  • In another model, the MSP or Reseller provides the accounts and bills the customer for them, while the customer manages these accounts on their own.

  • In a third model, a large enterprise, with a number of business units, can work with CloudGuard as an MSP. Each individual business unit is a separate account. Each account is managed by one overall MSP account (in either of the above models).

The MSP can build this flexibility in managing customer accounts into their business and pricing models. They can offer full services for customers who do not want to be bothered with the day-to-day management of their network, or reduced services for customers who do want to manage their own account, but yet want to procure all their services from one provider. They can also choose which of the CloudGuard services they wish to offer their customers.

CloudGuard Account Types

There are two types of CloudGuard accounts that you can manage:

  • Enterprise accounts are for regular CloudGuard enterprise customers.

  • Reseller/MSP/Distributor accounts are for customers that have and manage enterprise customers of their own. You must sign-on to the portal with this type of account.

Roles

An MSP account itself is a Super User, with full permissions over itself and its enterprise accounts. You can sign-on to a managed account in CloudGuard with any of the roles that are defined for the account, including as a Super User. You can define roles with specific permissions for each account (see Adding a Role).

Cross-Account Trust Capability

When you, as an MSP, create enterprise accounts for your customers, you can choose to allow the MSP account to sign-on to them and assume a role on them. This is called cross-account trust (also referred to as federated access), and it allows you, as the MSP, to actively manage customer accounts in CloudGuard.