Manage Accounts

Check Point works with Distributors and Managed Security ServiceClosed A Check Point service offering that helps customers with deployments or technical services for Check Point products. Providers (MSSPs). Most commonly, Check Point works directly with a Distributor that manages MSSPs in a region. MSSPs sell Check Point services to customers and manage customer accounts.

The Manage Accounts page appears only in Infinity Portal accounts of type MSSP and Distributor.

To open the Manage Accounts page, from the top toolbar, navigate to > Manage Accounts.

Dashboard

The dashboard provides visibility into your managed child accounts in a single pane of glass.

With the dashboard, MSSPClosed Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services. can see and search:

  • Your child accounts and grandchild accounts

  • Accounts with trial and paid contract

  • Accounts with services that require activation

  • Accounts with contracts close to expiration

  • Accounts with expired contracts

When you click one of the dashboard widgets, it applies a corresponding filter and opens the Filters side panel. You can simultaneously use more than one widget or filter criteria.

Accounts

The Manage Accounts page contains a list of all child accounts associated with the current account. It includes:

  1. In the upper-left of the table, click the menu icon .

    The list of column names opens.

  2. Select columns to show in the table.

    Only the selected columns appear in the table.

  1. From the top MSSP toolbar, click the filter icon.

    The Filters window opens.

  2. Apply or remove filters.

    Filters continue to apply after you close the Filters window. If one or more filters are applied, a green dot appears on the filter icon .

How to Manage Accounts

You can create a new account inside of a current account as its child account. The child account inherits users from the parent account based on group inheritance settings. To configure group inheritance settings, see User Groups.

To navigate from a child account to its parent account, from the top toolbar, click the arrow icon .

  1. From the top toolbar, click > Manage Accounts.

  2. Click the arrow button next to New and select the type of account you want to create.

    Note - You can click New to create an account of the default type. The default type depends on the type of your account.

    If your account is of type MSSP, the New button creates an account of type Customer.

    If your account is of type Distributor, the New button creates an account of type MSSP.

    The New Account window opens.

  3. Enter an Account Name.

  4. Select a Parent Account.

    Note - By default, when you create a child account, the parent account is the account that is currently open. If this account has child accounts of type MSSP, you can select one of these accounts to be the Parent Account.

  5. Select a Data Residency.

    Note - Availability of data residencies depends on the data residency of the parent account.

  6. Select a Country and City.

  7. Enter a Website or web Domain that is associated with the account owner.

  8. Optional - To allow a child account of type MSSP to sell Pay-As-You-Go-Services (PAYG), set Enable Payg Contracts to ON. For more information, see Pay-As-You-Go (PAYG) Contracts.

  9. Optional - Select one or more services to Start a trial for the new account.

  10. Select Yes if your company is

    • owned

    • controlled

    • partially owned by a government

  11. Click Create.

    The New Account window closes. The new child account appears in the table.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click Edit.

    The Edit Account window opens.

  4. Edit the values for relevant fields.

  5. Click Apply to save changes.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click the Delete option in the top menu.

    A pop-up window opens: "Are you sure you want to delete [X]?"

  4. Click Delete to confirm.

In some scenarios, it is not possible to delete a child account:

  1. The child account itself has its child accounts. If an attempt is made to delete such an account, the admin receives this error message: "You cannot delete [X] parent because there are sub-accounts assigned to it. Delete them or assign them to another account first, and then try again."

  2. An account with a paid, active license. If an attempt is made to delete such an account, the admin receives this error message: "You cannot delete [X] child as it is attached to a User CenterClosed The Check Point User Center offers Single Sign-On (SSO) management for all your Check Point needs: (1) Manage Accounts & Products (2) Get Support Offers (3) License Products (4) Open & manage your Service Requests (5) Access Downloads and product documentation (6) Search Technical Knowledge Center account with active contracts. Detach them before removing this account."

  1. From the top toolbar, click > Manage Accounts.

  2. On the top taskbar, click Export and select All Accounts.

    The Infinity Portal creates a compressed folder with CSV files, one file for each region. The CSV file contains details for the current account and all of its child accounts.

An MSSP account administrator can reset the configuration of a 2FA authentication app (for example, Microsoft Authenticator) for a user of a child account. Reset the authentication app when a user gets a new phone or has a problem with the app. After the reset, if 2FA is required for account login, Check Point sends a 2FA authentication code in an SMS to the user's phone. Then, the user can log in to the Infinity Portal and create a new authenticator app configuration (see Configure an authentication app for 2FA).

Important - The reset does not change the phone number for the user. To change the phone number for the user, see Verify your phone number.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. Select an account.

  3. Select the Administrators tab.

    The 2FA configured column of the table shows one of these 2FA configurations for each user:

    Icon

    2FA Configuration

    The user does not have 2FA configured.

    By app

    The user has 2FA configured with an authenticator app.

    By phone

    The user has 2FA configured with SMS.

    App and phone

    The user has 2FA configured with an authenticator app and with SMS.

  4. In the table, below the Action column, click the Reset 2FA icon for the applicable user.

  5. In the window that opens, click Reset.

    Warning - This action cannot be undone.

  1. Click Export > 2FA Report.

  2. Infinity Portal creates a compressed folder with CSV files, one file for each region.

    The CSV file shows the status of Two-Factor Authentication for each user on the current account and all its child accounts.

Viewing and Editing Child Account Details

You can view and edit child account details from a parent account. You can also view and edit child account details in the General section of the child account settings.

To view and edit child account details

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. In the table, select an account name. If the account name does not appear, enter it in the search bar.

Services & Contracts

This pane shows information about Infinity Portal services and contracts associated with the selected account.

Field

Description

Service name

Shows the Infinity Portal's name for the service.

Service Status

Shows if the service is active or requires activation. For more information, see Services & Contracts.

Contract type

Shows if the contract is trial, evaluation, annual subscription, or Pay-As-You-Go.

Contracts Status

Shows if the contract is active, about to expire, or expired.

Package (SKU)

Shows the SKU of each license.

Quantity threshold

Shows the maximal number of units assigned for a contract. Units are defined differently for each Infinity Portal service. Currently, this number is not enforced by Check Point and is not billable for contracts other than PAYG.

Registration Date

Shows the date on which the license was assigned to the account.

Expires on

Shows the date on which the contract is set to expire.

Contract ID

Shows the internal ID number for the contract.

User Center ID

Shows the User Center ID of the account that purchased the contract.

Sync UC

If the account is linked with a User Center account, you can click a button in this column to sync the account with the User Center immediately.

Managing Contracts for a Child Account

MSSP Partners and Distributors can manage these types of contracts:

  • Pay-As-You-Go -Use the contract to bill your customers based on usage. For more information, see Pay-As-You-Go (PAYG) Contracts

  • Not For Resale - This contract enables MSSP to test or evaluate the service.

    • The contract is valid for 7 years.

    • The number of available units for each service is predefined.

    • You cannot edit this type of contract.

    • You cannot add a Not For Resale contract more than once, that is, a canceled contract cannot be added again.

Prerequisite

To add a contract of the type Not For Resale, you must have an account of Partner - MSSP.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the Services & Contracts tab, click Add Contract.

    The Add Contract window opens.

  4. In the Add Contract window, enter these details:

    • Service name - select one of the services that provide the required contract type.

    • For Contract type, select Not For Resale.

      For this type of contract, the rest of the options are disabled.

  5. Click Add.

To link a paid subscription, see Managing Subscription Contracts for Child Accounts.

Archived Contracts

By default, a PAYG or Not-For-Resale contract is archived 30 days after it expires. Archived contracts are visible when Show archived contracts is selected.

  • To archive a contract that has been expired for less than 30 days, select the contract and click Archive contract.

Usage

This tab shows usage information for the selected account. To see usage data for a month, select the month and year from the list. If you select the current month, usage data is not final.

To see usage information for related child accounts and their child accounts, generate a report using Export.

Field

Description

Service Name

Name of a service associated with the Infinity Portal account.

Contract type

Shows if the contract is trial, evaluation, annual subscription, or Pay-As-You-Go.

Package (SKU)

Show the stock-keeping unit of each license (as per service reporting)

Quantity Threshold

Shows the maximal number of units assigned for a contract. Units are defined differently for each Infinity Portal service. Currently, this number is not enforced by Check Point and is not billable for contracts other than PAYG.

Past Day Usage

Total usage on the previous day. Units are defined differently for each service.

Monthly Usage

Sum of usage units divided by the number of days in the month. Units are defined differently for each service.

Yearly Subscriptions

Number of yearly subscriptions purchased for the service.

Monthly Pay-As-You-Go

Number of service units used during the month on a PAYG contract.

This video shows how to see the usage for customers:

  1. Above the table, on the right, click Export.

  2. Select a usage report, Summarized or Daily.

    Your web browser downloads a ZIP file.

  3. Unzip the file and view the report.

Administrators

This tab shows information about administrators of the child account. For more information, see Users and User Groups.

General

This tab shows basic information about the child account.

Field

Description

Account ID

The Account ID field contains a unique ID for this account, which the Customer support or Sales staff request to troubleshoot incidents or enable a feature.

Unique Login URL

The URL that users of the child account use to access Infinite Portal.

Parent Account Name

The name of the parent account.

Parent Account ID

The Account ID of the parent account.

Registration Date

The date when the account was initially registered in the Infinity Portal.

Data Residency

The geographic region where your organizational data is stored. You can select the region only when you create an Infinity Portal account. For more information, see How to Create an Account.

The Primary Contact section shows the email address of the primary administrator who functions as a focal point for all future correspondence with Check Point. If the child account has more than one primary administrator, you can change the Primary Contact.

To change the Primary Contact:

  1. Select the administrator from the list.

  2. Click Save.

Add or Edit a Personalization (Description) of the Child Account

In the Personalization section, you can add a description in the text box. The description appears in the table above when you hover over the information icon () in the child account name cell.

To add or edit the description:

  1. Enter text in the text box.

  2. Click Save.

Note - To change between accounts, it is necessary to have the account type called Partner.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. Hover over the arrow icon to the right of the account's name that you want to see.
    If the account's name does not show, enter its name in the search bar.

  3. In the Account Link window that opens, click Yes to change accounts.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. Select one of the accounts. In the Services column, see the names of the services activated for the account.

  3. To switch to an account's service, click the required service name.

  4. In the Account Link window that opens, click Yes to open the service.

You can add a logo to appear in the upper-right corner of the Infinity Portal. By default, a child account inherits the logo from its parent account. You can configure a different logo for a child account.

Example - Account A is the parent of Account B. Account B is the parent of Account C. By default, Account B inherits the logo from Account A. By default, Account C inherits the logo from Account B. If you set a new logo for Account B, then by default, Account C inherits the new logo from Account B.

Watch the Video

This video shows how to upload and manage logos for a parent account and child accounts:

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. Go to the General tab. In the Personalization section, open the Logo menu.

  4. Select one of these options:

    • Use inherited logo - If the account is a child account, it inherits the logo from its parent account. If the account is not a child account, it is not possible to configure this option.

    • Set a logo for only this account - Upload an image file that meets the listed requirements.

  5. Click Save.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select a parent account that is not a child account.

  3. Go to the General tab. In the Personalization section, open the Logo menu.

  4. Click the trash can icon .

  5. Click Save.