Appendix B – Binding with Infinity XDR/XPR

Note: Infinity XDR/XPR is served from a different portal from Infinity NDRClosed Network Detection and Response. It is published on the Infinity Portal: portal.checkpoint.com.

Creating a Infinity XDR/XPR API Key

  1. Log in to the Infinity Portal and select Infinity XDR/XPR as the application.

  2. On GLOBAL SETTINGS > API Keys, click * New, select Infinity XDR/XPR as the Service. Optionally: Enter a Description (for example. Binding with Infinity NDR Indicator Management).

  3. Click CREATE.

  4. Infinity XDR/XPR outputs two values: a Client IDClosed Identifier, and an Access Key. Copy these values, as you cannot retrieve the Access Key after you close the window.

Importing the Infinity XDR/XPR API Key into Infinity NDR Indicator Management

  1. Log in to the Infinity NDR Indicator Management application portal and open the customer domain.

  2. On the MANAGEMENT > API Keys tab, click * New, select Infinity XDR/XPR as Type, and enter the Client ID and Access Key that you copied from the Infinity XDR/XPR.

  3. Infinity NDR pulls the Infinity XDR/XPR's outputs automatically and adds to Infinity NDR's native Behavioral Analytics AIClosed Artificial Intelligence engines. This let you visualize incidents in context with Infinity NDR's advanced threat visualization capabilities.

  4. In addition, Infinity NDR let you pivot back to Infinity XDR/XPR for ThreatCloud and Open Source investigation.