Print Download PDF Send Feedback

Previous

Next

CloudGuard Controller for OpenStack

The CloudGuard Controller integrates the Check Point Security Management Server with OpenStack Keystone.

The Check Point Data Center server connects to OpenStack and retrieves network object data from OpenStack Neutron.

Connecting to an OpenStack Server

Step

Description

1

In SmartConsole, create a new Data Center object in one of these ways:

  • In the top left corner, click Objects menu > More object types > Server > Data Center > New OpenStack.
  • In the top right corner, click Objects Pane > New > More > Server > Data Center > OpenStack.

2

In the Enter Object Name field, enter the desired name.

3

In the Hostname field, enter the URL of your OpenStack server in this format:

http(s)://1.2.3.4:5000/<keystone_version>

Example: https://1.2.3.4:5000/v2.0

Note - If you do not know your keystone URL, run this command on the OpenStack server to find it:

openstack endpoint show keystone | grep publicurl

4

In the Username field, enter your username for the OpenStack server.

5

In the Password field, enter your password for the OpenStack server.

6

Click Test Connection.

If the certificate window opens, confirm the certificate and click Trust.

7

When the connection status changes to Connected, click OK.

If the status is not Connected, troubleshoot the issue before you continue.

8

Click OK.

9

Publish the session.

Note - If you want to log into an OpenStack domain that is not your default domain, use this format: <OpenStack_domain_name>/<user_name>

OpenStack Objects

Objects

Object

Description

Instances

Virtual Machines inside the cloud.

Security groups

Sets of IP address filter rules for networking access.

They are applied to all instances within a project.

Subnet

A block of IP addresses and associated configuration states.

Subnets are used to allocate IP addresses when new ports are created on a network.

Imported Properties

Imported Property

Description

IP

  • VM - Virtual Machine's IP address
  • Security Group - IP addresses of the Virtual Machines inside the group
  • Subnets - IP addresses of the Virtual Machines inside the subnet

Note

  • Instances - Empty
  • Security Group - Description of the group
  • Subnet - IP address and mask of the subnet

URI

Object path