CloudGuard Controller for Claroty CTD Server

Starting in R82 Jumbo Hotfix Accumulator Take 118, the CloudGuard ControllerClosed Provisions SDDC services as Virtual Data Centers that provide virtualized computer networking, storage, and security. integrates the Check Point Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. with a Claroty CTD Server.

Authentication to the Claroty CTD Data CenterClosed Virtual centralized repository, or a group of physical networked hosts, Virtual Machines, and datastores. They are collected in a group for secured remote storage, management, and distribution of data. is performed using a username and a password.

Important - The CloudGuard Controller server clock must be synchronized with the current local time. Use of a NTP server is recommended. Time synchronization issues can cause polling information from the cloud to fail.

Prerequisites

Claroty CTD API Version v2 or higher.

Limitations

  • The Asset IP address is not imported if it is localhost (127.0.0.1, ::1 or “localhost”).

Connecting to the Claroty CTD Server

Use the existing credentials (username and password) to establish the connection to the Claroty CTD server.

Connecting to a Claroty CTD Server with SmartConsole

Step

Instructions

1

In SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., use one of these options to create a new Data Center object:

  • In the top left corner, click the Objects menu > Cloud > Data Center > New Claroty CTD

    Or

  • In the top right corner, click the Objects Pane > New > Cloud > Data Center > Claroty CTD

2

In Enter Name, enter the applicable name.

3

In the Hostname field, enter the Claroty CTD server FQDN,or the server IP address and port number. Example:

claroty_ctd_hostname

Or:

172.0.1.2<:Port>

Note: The Claroty CTD port is optional and defaults to port 443. If your Claroty CTD server uses port 443, you do not need to provide the port.

4

In the Username and Password field, enter the credentials.

5

Click Test Connection.

If the certificate window opens, confirm the certificate and click Trust.

6

When the connection status changes to Connected, click OK.

If the status is not Connected, troubleshoot the issue before you continue.

7

Click OK.

8

Publish the SmartConsole session.

9

Install the Access Control policy on the Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object.

Claroty CTD Objects and Properties

Claroty CTD Objects

Object

Description
Asset

Any device or system that Claroty CTD discovers and monitors.

Tag

Resembles an attribute of an asset.

Notes:

  • An Asset can have one, multiple, or no Tags.

  • Important:

    • Import of IPv6 addresses is disabled by default. To enable it, you must set the claroty_ctd.collectIpv6 parameter in the vsec.conf file:

      • claroty_ctd.collectIpv6=true

      For details, refer to the Configuration Parameters section.

    • The import filter for class_type is set to OT by default. To modify it, you must set the claroty_ctd.classType parameter in the vsec.conf file

Claroty CTD advanced configuration

To change the default settings of Claroty CTD Data Center in CloudGuard Controller:

  1. Add this section to the vsec.conf file on the Management server:

    # Claroty CTD Data Center configuration values.
    # Overrides:
    # global.scannerInterval
    # global.scanSleepUpperLimitInSeconds
    # global.connectTimeoutInMilliseconds
    # global.readTimeoutInMilliseconds
    # Default value: 30, 300, 5000000, 120000
    # claroty_ctd.classType valid values: 'OT', 'IT', 'IoT' and 'Any'.
    claroty_ctd.scannerInterval=30
    claroty_ctd.scanSleepUpperLimitInSeconds=300
    claroty_ctd.connectTimeoutInMilliseconds=5000000
    claroty_ctd.readTimeoutInMilliseconds=120000
    claroty_ctd.collectIpv6=false
    claroty_ctd.classType=OT

  2. Modify the parameter values as required in your environment.

  3. Save the file and restart the CloudGuard Controller service.