Manage License Permission

Check Point Distributors can offer the Infinity Portal services to their MSSPClosed Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services. Partners and authorize them to provide these services further.

Prerequisite

  • To enable your account to resell Infinity Portal services, you must obtain Check Point's permission. For this, contact MSSP_Program@checkpoint.com.

Default Authorization

Distributors can set up a default authorization profile that is automatically assigned to all existing and future accounts.

Note - An account's initial authorization level inherited from its parent is the default authorization level assigned to its MSSP child accounts.

When a Distributor assigns an authorization profile called All Harmony to an MSSP-1, it is automatically applied to all child MSSP accounts in the MSSP-1 hierarchy. Only the Distributor can change the All Harmony profile to another profile for the child accounts.

To change the default authorization profile:

  1. In the top toolbar, click > Manage License Permission.

  2. Above Customized Authorization Profiles, select a new default profile. It appears after By default, all accounts are permitted to manage.

    Infinity Portal informs you how many accounts currently use the default profile and suggests whether to keep or replace it.

  3. Select to keep the existing profile or assign a new default profile to the existing accounts.

  4. Click Apply.

    This new default profile is automatically assigned to all new child accounts. The profile of existing child accounts is based on your choice.

Configuring Authorization Profiles

Distributors configure authorization profiles to define which PAYG services MSSPs can offer to their customers.

To configure a new authorization profile:

  1. In the top toolbar, click > Manage License Permission.

  2. Under Customized Authorization Profiles, click Create New Authorization Profile.

  3. In the Create New Authorization Profile window, enter these details:

    1. Enter a distinctive name, for example, Harmony Endpoint with Harmony Browse.

    2. Enter a description.

    3. Select the relevant entities in the hierarchy of services, packages, add-ons, etc. Use a tooltip to see the entity's detailed description.

  4. Click Save.

The Infinity Portal creates a new authorization profile. Click the menu icon to edit or delete the profile.

The Customized Authorization Profiles section contains authorization profiles available for you to assign to your MSSPs.

Profile Assignment

You can assign PAYG customized profiles to specific accounts.

To define the accounts that can offer services:

  1. In the top toolbar, click > Manage License Permission.

  2. Above Customized Authorization Profiles, see the name of the default profile. This profile is assigned to all MSSP child accounts.

  3. Under Profiles Assignment, see the names of other authorization profiles available for your account.

  4. For a non-default profile, in the Assign Accounts column, click + and select one or more accounts to assign the non-default profile.

  5. Click Apply.

Alternatively, Distributors can change authorization for an MSSP Partner from the Manage Accounts page by one of these methods:

  • Select an account, click Edit Account on the top bar, and change the authorization profile.

  • Select an account, go to the Manage License Permission tab on the bottom pane, and change the authorization profile.

To remove customized authorization:

  1. Under Profile Assignment, see the name of the authorization profile to remove from your accounts.

  2. In the Assigned Accounts column, click on the account tag to remove the customized authorization.

    The account now has the default authorization profile.