Introduction to the Infinity Portal

Check Point's Infinity Portal is a comprehensive SaaSClosed Software as a Service (SaaS) - An application delivered over the Internet by a provider. The application doesn’t have to be purchased, installed, or run on users’ computers. SaaS providers were previously referred to as ASPs (application service providers). management solution that provides administrators with a centralized console to manage Check Point Infinity Portal services. With its range of capabilities, the Infinity Portal simplifies security management, improves visibility, and enhances security across the enterprise.

Use the Infinity Portal to manage services that include:

  • Centralized Security Management - Provides a centralized console for managing security policies across different services.

  • Easy Deployment - Allows administrators to quickly and easily deploy new security policies and configurations to all connected devices.

  • Real-Time Visibility - Provides real-time visibility into security incidents and alerts, allowing administrators to quickly respond to threats and prevent security breaches.

  • Analytics and Reporting - Provides detailed analytics and reporting capabilities, allowing administrators to monitor security performance and identify areas for improvement.

  • Simplified Compliance - Provides a range of compliance features that help organizations meet regulatory requirements and maintain security standards.

This Administration Guide describes the host platform and the features that are the same for all the services.

See Getting Started with the Infinity Portal.

The onboarding process is different for different Infinity Portal services. When you open an Infinity Portal service for which you do not have a license, one or more of these options is available:

Available Services

Infinity

Service

Description

MDR/MPR

Infinity MDR-MPR is a team of expert Check Point SOC analysts that monitor and respond to security events in your cloud environments. The MDR/MPR team can monitor security events for Check Point third-party security products.

XDR/XPR

Infinity XDR/XPR identifies threats in the organization and prevents their expansion by leveraging all the products together. It enables fast detection, investigation, and automated response with the use of big-data threat intelligence, multi-layered incident analysis, and machine learning. In addition, it gives enterprise-wide visibility into your network, cloud, email, endpoint, and mobile devices, all from a single pane of glass.

See the Infinity XDR/XPR Administration Guide.

Events

Provides complete event visibility across all Check Point products for efficient monitoring, search, and threat hunting.

See the Infinity Events Administration Guide.

Playblocks

Infinity Playblocks is a security collaboration platform that makes products, people and processes all work together offering out-of-the-box security and operational oriented playbooks, that are automatically triggered by the connected security products upon attack detection, and operational related incidents, to contain threats and prevent future attacks, always keeping the SOC team alerted and informed.

See the Infinity Playblocks Administration Guide.

Quantum

Service

Description

Security Management (Including Smart-1 Cloud)

Provides full management capabilities:

  • Policy management

  • Device management

  • Log analysis

  • Reporting

  • Log retention

See the Quantum Smart-1 Cloud Administration Guide.

Spark Management

Manage Quantum Spark SMB firewalls through custom templates (called Plans).

  • Immediate onboarding (it is not necessary to wait for domain request approval).

  • Advanced log views and filters.

  • Integrates with Infinity Events.

See sk180467.

IoT Protect

Secures connected devices such as printers, IP phones, security cameras, and IP TVs. The service delivers IoT Asset Discovery, IoT Autonomous Policy Management, and IoT Threat Prevention.

See the Quantum IoT Protect Administration Guide.

SD-WAN

Enables you to connect multiple branches with multiple links to a data center, the Internet, and the cloud. In addition, SD-WAN allows you to make the most of your bandwidth and optimize connectivity, while you increase WAN health visibility to respond faster to burnouts and failures.

See the Quantum SD-WAN Administration Guide.

CloudGuard

Service

Description

Posture

  • Examine the compliance of your cloud environments.

  • Select built-in rulesets or create your compliance test rulesets.

Network

  • Visualize the security policies in your environments.

  • Protect and manage your cloud assets, such as Security Groups.

  • Control who gets access to cloud assets.

Workload

Identity

  • Get controlled entry to environments that CloudGuard protects with the IAM Safety feature.

  • Give visibility into cloud entitlements and Effective policy.

  • Identify and alert about inactive and misconfigured entities and anomalous behavior.

  • Automatically finds over-permissive policies based on actual use and recommends the right quantity of privileges.

ShiftLeftClosed The ShiftLeft tool scans source code, containers and serverless functions, looking for vulnerabilities including those associated with the Log4j tool. This tool alerts the security and DevOps teams if any vulnerabilities are detected in the pre-build phase, ensuring that vulnerable code is not deployed.

Integrate the ShiftLeft functionality into your CI/CD pipeline to find and prevent risk in cloud deployments:

  • Integrate to CircleCI

  • Integrate to GitLab

  • Integrate to Jenkins

Intelligence

Use Intelligence to hunt for and visualize threats and anomalous behavior in your environments by cloud log files.

WAF

A fully automated Web Application & API Security. Powered by a patented machine learning engine which continuously analyzes users' HTTPS requests as they visit a website or use an API. See the CloudGuard WAF Administration Guide.

For more information, see the CloudGuard Administration Guide.

Harmony

Service

Description

SASE - Internet & Private Access

Harmony SASE delivers 2x faster internet security combined with full mesh Zero Trust Access and optimized SD-WAN performance - all with an emphasis on ease-of-use and streamlined management. See the Harmony SASE Administration Guide.

Connect

Secures your branch offices with enabled cloud-native, next-generation Threat Prevention that runs on top of your existing SD-WAN edge appliance or router.

See the Harmony Connect Administration Guide.

Endpoint

Prevents, protects against, and quickly responds to advanced attacks on endpoint computers.

See the Harmony Endpoint EPMaaS Administration Guide.

Mobile

Market-leading Mobile Threat Defense solution that offers advanced malware detection for known and unknown mobile applications. Alerts on OS vulnerabilities, risky device configuration, and jailbreak/rooting detection.

Harmony Mobile offers a broad range of network security capabilities, through:

See the:

Email & Collaboration

Provides full protection against Malware and zero-day threats while preventing account breaches:

  • Zero-Day Threat Protection

  • Phishing Protection Identity

  • Prevent Account Takeover

  • Data Leakage Prevention

  • SaaS Shadow IT Discovery

  • Intuitive Cloud Management

See the Harmony Email & Collaboration Administration Guide.

Browse

Harmony Browse defends users against web-based threats, delivering unrivaled protection against zero-day threats without impacting network performance.

See the Harmony Browse Administration Guide.

SaaS

Harmony SaaS discovers all of your SaaS services, identifies SaaS misconfigurations, and delivers the most advanced protection for SaaS-based threats.

See the Harmony SaaS Administration Guide.

Check Point Labs

This section describes Cloud Services Early Availability. It is updated regularly.