Introduction to the Infinity Portal

Check Point's Infinity Portal is a comprehensive SaaS Software as a Service (SaaS) - An application delivered over the Internet by a provider. The application doesn’t have to be purchased, installed, or run on users’ computers. SaaS providers were previously referred to as ASPs (application service providers). management solution that provides administrators with a centralized console to manage Check Point Infinity Portal services. With its range of capabilities, the Infinity Portal simplifies security management, improves visibility, and enhances security across the enterprise.

Use the Infinity Portal to manage services that include:

Centralized Security Management - Provides a centralized console for managing security policies across different services.
Easy Deployment - Allows administrators to quickly and easily deploy new security policies and configurations to all connected devices.
Real-Time Visibility - Provides real-time visibility into security incidents and alerts, allowing administrators to quickly respond to threats and prevent security breaches.
Analytics and Reporting - Provides detailed analytics and reporting capabilities, allowing administrators to monitor security performance and identify areas for improvement.
Simplified Compliance - Provides a range of compliance features that help organizations meet regulatory requirements and maintain security standards.

This Administration Guide describes the host platform and the features that are the same for all the services.

See Getting Started with the Infinity Portal.

The onboarding process is different for different Infinity Portal services. When you open an Infinity Portal service for which you do not have a license, one or more of these options is available:

Connect the service to a User Center The Check Point User Center offers Single Sign-On (SSO) management for all your Check Point needs: (1) Manage Accounts & Products (2) Get Support Offers (3) License Products (4) Open & manage your Service Requests (5) Access Downloads and product documentation (6) Search Technical Knowledge Center account that has the required license.
Try the product:
- Use a free trial version of the service
- Request a free demonstration of the service.

Available Services

Infinity

Currently available Infinity services

Service	Description
MDR/MPR	Infinity MDR-MPR is a team of expert Check Point SOC analysts that monitor and respond to security events in your cloud environments. The MDR/MPR team can monitor security events for Check Point third-party security products.
XDR/XPR	Infinity XDR/XPR identifies threats in the organization and prevents their expansion by leveraging all the products together. It enables fast detection, investigation, and automated response with the use of big-data threat intelligence, multi-layered incident analysis, and machine learning. In addition, it gives enterprise-wide visibility into your network, cloud, email, endpoint, and mobile devices, all from a single pane of glass. See the Infinity XDR/XPR Administration Guide.
Events	Provides complete event visibility across all Check Point products for efficient monitoring, search, and threat hunting. See the Infinity Events Administration Guide.
Playblocks	Infinity Playblocks is a security collaboration platform that makes products, people and processes all work together offering out-of-the-box security and operational oriented playbooks, that are automatically triggered by the connected security products upon attack detection, and operational related incidents, to contain threats and prevent future attacks, always keeping the SOC team alerted and informed. See the Infinity Playblocks Administration Guide.

Quantum

Currently available Quantum Services

Service	Description
Security Management (Including Smart-1 Cloud)	Provides full management capabilities: Policy management Device management Log analysis Reporting Log retention See the Quantum Smart-1 Cloud Administration Guide.
Spark Management	Manage Quantum Spark SMB firewalls through custom templates (called Plans). Immediate onboarding (it is not necessary to wait for domain request approval). Advanced log views and filters. Integrates with Infinity Events. See sk180467.
IoT Protect	Secures connected devices such as printers, IP phones, security cameras, and IP TVs. The service delivers IoT Asset Discovery, IoT Autonomous Policy Management, and IoT Threat Prevention. See the Quantum IoT Protect Administration Guide.
SD-WAN	Enables you to connect multiple branches with multiple links to a data center, the Internet, and the cloud. In addition, SD-WAN allows you to make the most of your bandwidth and optimize connectivity, while you increase WAN health visibility to respond faster to burnouts and failures. See the Quantum SD-WAN Administration Guide.

CloudGuard

Currently available CloudGuard Services

Service	Description
CSPM - Posture Management	Cloud Security Posture Management Examine the compliance of your cloud environments. Select built-in rulesets or create your compliance test rulesets.
CWPP - Workload Protection	Cloud Workload Protection Platform Manage serverless functions in your AWS Amazon® Web Services. Public cloud platform that offers global compute, storage, database, application and other cloud services. and Azure environments and Kubernetes clusters. Learn how to use Image Assurance to analyze Kubernetes images at each phase of their life cycle. Learn how to use Admission Control to configure and control operations for Kubernetes clusters.
CIEM - Entitlement Management	Cloud Infrastructure Entitlement Management Get controlled entry to environments that CloudGuard protects with the IAM Safety feature. Give visibility into cloud entitlements and Effective policy. Identify and alert about inactive and misconfigured entities and anomalous behavior. Automatically finds over-permissive policies based on actual use and recommends the right quantity of privileges.
Code Security	Integrate the Code Security functionality into your CI/CD pipeline to find and prevent risk in cloud deployments: Integrate to CircleCI Integrate to GitLab Integrate to Jenkins
CDR - Detection & Response	Content Disarm and Reconstruction (Cloud Intelligence and threat hunting) Use CDR to hunt for and visualize threats and anomalous behavior in your environments by cloud log files.
WAF - Web Application &API Security	A fully automated Web Application Firewall with API Security. Powered by a patented machine learning engine which continuously analyzes users' HTTPS requests as they visit a website or use an API. See the CloudGuard WAF Administration Guide.

For more information, see the CloudGuard Administration Guide.

Harmony

Currently available Harmony Services

Service	Description
SASE - Internet & Private Access	Harmony SASE delivers 2x faster internet security combined with full mesh Zero Trust Access and optimized SD-WAN performance - all with an emphasis on ease-of-use and streamlined management. See the Harmony SASE Administration Guide.
Connect	Secures your branch offices with enabled cloud-native, next-generation Threat Prevention that runs on top of your existing SD-WAN edge appliance or router. See the Harmony Connect Administration Guide.
Endpoint	Prevents, protects against, and quickly responds to advanced attacks on endpoint computers. See the Harmony Endpoint EPMaaS Administration Guide.
Mobile	Market-leading Mobile Threat Defense solution that offers advanced malware detection for known and unknown mobile applications. Alerts on OS vulnerabilities, risky device configuration, and jailbreak/rooting detection. Harmony Mobile offers a broad range of network security capabilities, through: Anti-Phishing with Zero-Phishing: Blocks phishing attacks, known and unknown phishing sites, and SSL. Safe Browsing: Blocks use of malicious sites from web browsers, which leverages the dynamic security intelligence provided by the Check Point ThreatCloud A database of security intelligence that is dynamically updated using a worldwide network of threat sensors.™. Conditional Access: Blocks infected machines from entry into corporate applications and data. Wi-Fi Network Security: Finds malicious network behavior and Man-in-the-Middle attacks. Protected DNS: Protects end-users' privacy and prevents MiTM attacks & DNS Spoofing of plain text DNS messages. URL Filtering A Check Point software blade that allows granular control over which web sites can be accessed by a given group of users, computers or networks.. See the: Harmony Mobile Administration Guide. Harmony Mobile Integration Guide.
Email & Collaboration	Provides full protection against Malware and zero-day threats while preventing account breaches: Zero-Day Threat Protection Phishing Protection Identity Prevent Account Takeover Data Leakage Prevention SaaS Shadow IT Discovery Intuitive Cloud Management See the Harmony Email & Collaboration Administration Guide.
Browse	Harmony Browse defends users against web-based threats, delivering unrivaled protection against zero-day threats without impacting network performance. See the Harmony Browse Administration Guide.
SaaS	Harmony SaaS discovers all of your SaaS services, identifies SaaS misconfiguration, and delivers the most advanced protection for SaaS-based threats. See the Harmony SaaS Administration Guide.

Check Point Labs

This section describes Cloud Services Early Availability. It is updated regularly.