Manage License Permission

Check Point Distributors can offer the Infinity Portal services to their MSSPClosed Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services. Partners and authorize them to further provide these services.

Prerequisite

  • To enable your account to resell Infinity Portal services, you must obtain Check Point's permission. For this, contact MSSP_Program@checkpoint.com.

Default Authorization

Distributors can set up a default authorization profile that is assigned automatically to all existing and future accounts.

Note - An account's initial authorization level inherited from its parent is the default authorization level assigned to its MSSP child accounts.

When a Distributor assigns an authorization profile Profi to an MSSP-1, this Profi profile is automatically assigned to all child MSSP accounts in the MSSP-1 hierarchy. Only the Distributor can change these authorizations.

To change the default authorization profile:

  1. From the top toolbar, navigate to > Manage License Permission.

  2. In the Customized Authorization Profiles, select a new default profile.

    This new default profile is automatically assigned to all new child accounts. Existing child accounts remain with their current authorization profile.

Configuring Authorization Profiles

Distributors configure authorization profiles to define what MSSPs can offer to their customers.

To configure a new authorization profile:

  1. From the top toolbar, navigate to > Manage License Permission.

  2. Under Customized Authorization Profiles, click Create New Authorization Profile.

  3. In the Create New Authorization Profile window, enter these details:

    1. Enter a distinctive name, for example, Harmony Endpoint with Harmony Browse.

    2. Enter a description.

    3. Select the relevant entities in the hierarchy of services, packages, add-ons, etc. Use a tooltip to see the entity's detailed description.

  4. Click Save.

The Infinity Portal creates a new authorization profile. Click the menu icon to edit or delete the profile.

The Customized Authorization Profiles section contains authorization profiles available for you to assign to your MSSPs.

Profile Assignment

To define the accounts that can offer services:

  1. From the top toolbar, navigate to > Manage License Permission.

  2. Above Profiles Assignment, see the name of the default profile. This profile is assigned to all MSSP child accounts.

  3. Under Profiles Assignment, see the names of other authorization profiles available for your account.

  4. For a non-default profile, in the Assign Accounts column, click + and select one or more accounts to assign the non-default profile.

  5. Click Apply.

Alternatively, Distributors can change authorization for an MSSP Partner from the Manage Accounts page by one of these methods:

  • Select an account, click Edit Account on the top bar, and change the authorization profile.

  • Select an account, go to the Manage License Permission tab on the bottom pane, and change the authorization profile.