Important Information

Certifications

For third party independent certification of Check Point products, see the Check Point Certifications page.

Latest Version of this Document in English

Open the latest version of this document in a Web browser.

Download the latest version of this document in PDF format.

Patent Notice

CloudGuard is protected by the following patents in the United States and elsewhere.

This page is intended to serve as notice under 35 U.S.C. § 287(a):

US9,531,754, US10,616,235, US10,979,457

US11,431,732, US11,797,685, US11,843,614

US11,481,517, US11,966,466

US11,212,305

Revision History

Date	Description
February 2025	Merging of the Dome9 and Infinity Portal Administration Guides
January 2025	Added: WAF Support to Risk Calculation Sending Security Events to Microsoft Sentinel Updated: Cloud Detection and Response (CDR) Onboarding a Google Cloud Platform (GCP) Project and Google Workspace
December 2024	Added: Onboarding Docker Hub Container Registry Vulnerability Exclusions Ignoring Malware from Toxic Combinations Base Image and Vendor Image to Images Classifying Assets with Cyera Securing Open Source Code CI/CD Hardening Teams and Asset Mapping Code Security Integration with Confluence Code Security Integration with Jira Code Security Integration with Terraform Cloud GitHub Bot Gitlab Pre-Receive Hook Bitbucket Pre-Receive Hook Gitlab Pipeline Updated: Integration with Microsoft Teams
October 2024	Added: Onboarding Quay.io Container Registry Azure Collection of integrated cloud services that developers and IT professionals use to build, deploy, and manage applications through a global network of data centers managed by Microsoft®. account encryption to AWP for Azure Environments
September 2024	Added: Pod and Container Requirements Toxic Combinations Action Hub Exclusions for Toxic Combinations Security Controls Agent status errors to Kubernetes Runtime Protection Troubleshooting The option of ECS Amazon Elastic Container Service (ECS) - a fully managed container orchestration service that helps you deploy, manage, and scale Docker containers running applications, services, and batch processes. scanner to container registries: Onboarding GitHub Container Registry Onboarding Harbor Registry Onboarding JFrog Artifactory Onboarding Sonatype Nexus Registry
July 2024	Merged all types of Exclusions into one topic: Configuring CloudGuard Exclusions Renamed Integrations to Integration Hub
June 2024	Added: CDR and Centralized Account and Sub-Accounts scanning to Onboarding of AWS Organizations Exclusions for Vulnerabilities - Parameters for Vulnerabilities Updated: Integration Hub Notifications Onboarding an Azure Subscription
May 2024	Added: SBOM Classifying Assets with Sentra Vulnerability Search Onboarding Azure Organizations Centralized Account and Sub-Accounts scanning to AWP for AWS Environments
March 2024	Added: Onboarding GitHub Container Registry Scan Engine V2
February 2024	Added: Reports Ruleset Versions (Viewing a Ruleset Version) Updated: Onboarding Azure Subscriptions to Intelligence Known Limitations Integration with Microsoft Teams
January 2024	Added: Agentless Workload Posture support for AWS Amazon® Web Services. Public cloud platform that offers global compute, storage, database, application and other cloud services. China accounts
December 2023	Added: Environment Risk (Risk Level) Updated: ERM Protected Assets
November 2023	Added: Function Apps scanning in AWP for Azure Environments (Early Availability) Centralized Account and Sub-Accounts scanning in AWP for Azure Environments (Early Availability) Onboarding Sonatype Nexus Registry Updated: Kubernetes Runtime Protection
October 2023	Added: Toxic Combinations Updated: Explanation and lists of supported entities in Risk Management Authentication methods in Onboarding AWS Elastic Container Registry Cloud Infrastructure Entitlement Management (CIEM) Findings
September 2023	Changed the configuration and script in Configure Policies for Azure Key Vault Entities
August 2023	Added: Updating Onboarded AWS Organizations Container Environments
July 2023	Added: Errors Troubleshooting in ImageScan Agent Image Scan Findings ECS scanner to Image Assurance ECS scanner to Onboarding Container Registries
June 2023	Added: Asset Details Entitlement Map
May 2023	Added: CIEM Policies, Exclusions, and Remediation Onboarding of AWS Organizations
April 2023	Added: Kubernetes Posture Management AWP for Azure Environments (Early Availability)
March 2023	Added: Onboarding Oracle Cloud Infrastructure Environments Integrating Amazon GuardDuty Findings with CloudGuard
February 2023	Added: ERM Protected Assets ERM Rulesets
January 2023	Added: Serverless Functions In-Account Mode for Agentless Workload Posture Image Admission Onboarding Google Artifact Registry Onboarding JFrog Artifactory Onboarding Harbor Registry Container Registry Scanning

Click here to see the earlier revision history

Date	Description
December 2022	Identity is now Cloud Infrastructure Entitlement Management (Cloud Infrastructure Entitlement Management (CIEM)) Added: Agentless Workload Posture Risk Management
November 2022	Added: New Code Security (Spectral) functionality The ShiftLeft The ShiftLeft tool scans source code, containers and serverless functions, looking for vulnerabilities including those associated with the Log4j tool. This tool alerts the security and DevOps teams if any vulnerabilities are detected in the pre-build phase, ensuring that vulnerable code is not deployed. functionality moved under CI-CD Tool The Google Container Registry A collection of repositories used to store and access container images. type in Onboarding Container Registries The function `containSecrets` in Governance Specification Language (GSL)
September 2022	Added: Which CloudGuard endpoints do I have to allow on my network? API Audit Logs System Audit Logs
August 2022	Added Troubleshooting Kubernetes Onboarding
July 2022	Added: Sending Findings to Eventarc Sending Findings to Azure Defender for Cloud Image Admission (Early Availability) Email Notifications Glossary Configuring CloudGuard as an AWS Security Hub Provider
June 2022	Added: Sending System Notifications to AWS SNS Removing Intelligence from AWS Environments with API
May 2022	Added: Images Workloads Settings Onboarding Container Registries
April 2022	Added: Frequently Asked Questions New wizard - Onboarding AWS Environments to Intelligence Onboarding AWS Environments to Intelligence with API Configuring CloudGuard Policies
March 2022	Added: Getting Started with CloudGuard New AWS onboarding experience: Unified Onboarding of AWS Environments Added: GSL Builder Billing Reports Intelligence for Kubernetes Containers Onboarding Kubernetes Clusters to Intelligence Removing Intelligence from Kubernetes Clusters
December 2021	Added: Removing Intelligence from AWS Environments Removing Intelligence from Azure Subscriptions
November 2021	Added CloudGuard Permissions for Intelligence
September 2021	Added: ShiftLeft Integration to CI/CD Pipeline ShiftLeft Integration to CircleCI, ShiftLeft Integration to GitLab, ShiftLeft Integration to Jenkins
July 2021	Added: Assessment Results View ShiftLeft Configuration in CloudGuard Kubernetes Containers Integration to the Infinity Portal
June 2021	Updated: AWS Resources and Permissions for Serverless Runtime Protection
May 2021	Added: Admission Control Image Assurance Vulnerability Policies (Image Assurance) Image Assurance Troubleshooting
March 2021	Added: Integration with Microsoft Teams Sending Reports to Jira
February 2021	Added: Kubernetes Runtime Protection Data Handling AWS Runtime Protection Implementation AWS Resources and Permissions for Serverless Runtime Protection Updated the menu, changed the name from CloudGuard Dome9 to CloudGuard General updates
25 November 2020	Added ShiftLeft
10 August 2020	Updated Onboarding Cloud Environments
24 May 2018	First release of this document