Binding with Infinity XDR/XPR

Note: Infinity XDR/XPR is served from a different portal from NDRClosed Network Detection and Response. It is published on the Infinity Portal: portal.checkpoint.com.

Creating a Infinity XDR/XPR API Key

  1. Log in to the Infinity Portal and select Infinity XDR/XPR as the application.

  2. On GLOBAL SETTINGS > API Keys, click * New, select Infinity XDR/XPR as the Service. Optionally: Enter a Description (for example. Binding with NDR Indicator Management).

  3. Click CREATE.

  4. Infinity XDR/XPR outputs two values: a Client IDClosed Identifier, and an Access Key. Copy these values, as you cannot retrieve the Access Key after you close the window.

Importing the Infinity XDR/XPR API Key into NDR Indicator Management

  1. Log in to the NDR Indicator Management application portal and open the customer domain.

  2. On the MANAGEMENT > API Keys tab, click * New, select Infinity XDR/XPR as Type, and enter the Client ID and Access Key that you copied from the Infinity XDR/XPR.

  3. NDR pulls the Infinity XDR/XPR's outputs automatically and adds to NDR's native Behavioral Analytics AIClosed Artificial Intelligence engines. This let you visualize incidents in context with NDR's advanced threat visualization capabilities.

  4. In addition, NDR let you pivot back to Infinity XDR/XPR for ThreatCloud and Open Source investigation.