Connecting On-Premises Management Servers and Security Gateways to the Check Point Portal

For information about releases, see sk177205 -Connecting an On-Premises Management Server to the Check Point Portal - Release Updates.

You can connect from your on-premises Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. and Security Gateways to the Check Point Portal Check Point Portal is a cloud-based management platform that provides a centralized console for managing a wide range of Check Point security services. It streamlines security operations by offering real-time visibility, easy deployment, analytics, and compliance features—all from a single interface. The portal supports services across key areas such as network security, workspace security, exposure management, and AI security.. This lets you:

Run services that are managed in the Check Point Portal on your Management Server and Security Gateways.

To see the full list of services, go to SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. > Integration & Services view.

For some services for the Management Server, you must enable Configuration Sharing and Log Sharing. See the documentation for the specific service in the Check Point Portal Administration Guide.
See a unified log view of all your Check Point products, in the cloud and on-premises.

This way, you can search for logs and events from all Check Point products in the same place.
Use new administrator capabilities on the on-premises Management Server.

For example, you can run management APIs on the on-premises Management Server through the Check Point Portal securely from anywhere in the world.

Prerequisites

You must have a valid license for each Check Point Portal application or service that you use.

In the SmartConsole Access Control Rule Base All rules configured in a given Security Policy. Synonym: Rulebase., add this rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. for Check Point Security Gateways. Use Check Point Services as an updatable object (seeUpdatable Objects):

Source	Destination	Services	Action
Any	Check Point Services	http	Allow

For non-Check Point gateways, allow access to the domains listed in Scenario 3 of sk179105.
You must have the Manage integration with Check Point Portal services option selected on your permission profile. To have this option selected:
1. Go to Manage & Settings > Permissions & Administrators > Permission Profiles
2. Open the relevant Permission Profile.
3. Go to Management, and select Manage integration with Check Point Portal services.

Connecting Your Security Management Server and Security Gateway to the Check Point Portal

Notes:

When connecting a Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. to the Check Point Portal, its Dedicated Log Servers are automatically connected to the Check Point Portal.
Starting from R82 Jumbo Hotfix Accumulator Take 103, when connecting a Domain Management Server to the Check Point Portal, its Dedicated Log Servers are automatically connected to the Check Point Portal.

To connect your Security Management Server and Security Gateway objects from SmartConsole to the Check Point Portal

In SmartConsole, go to the Integration & Services view.

Click Get Started.

The Instructions window opens.
If you do not already have an account in the Check Point Portal, click Create Account. For information about how to open an Check Point Portal account, see Getting Started with the Check Point Portal topic in the Check Point Portal Administration Guide.
In Connect to the Check Point Portal and get a token, click Get Token to retrieve a token from the Check Point Portal to create trust between your Management Server and your Check Point Portal account.

If you have more than one account, the Select Account window in the Check Point Portal opens.

Select the applicable account from the drop-down list and click Next.

Note - Each Management Server can connect to one account only.

The Connect my Self-hosted Security Management Environment and Security Gateways to Infinity page opens.

Select the check box that indicates that you agree to share your Management Server data with the Check Point Portal, and click Next.

The Copy This to SmartConsole page opens.
Copy the token and paste it in the Instructions window in SmartConsole.

The Management Server connects to the Check Point Portal.
Some services require a running agent on the Security Gateways. You can configure automatic onboarding of Security Gateways when connecting the Management Server to the cloud. In Connection timing for Security Gateways, select one of these options:
- Immediately (the default option) - All supported Security Gateways are connected to the Check Point Portal immediately when the Security Management Server / Domain Management Server is connected to the Check Point Portal.
- After policy installation - All supported Security Gateways are connected to Check Point Portal only after the Security Management Server / Domain Management Server is connected to Check Point Portal and you install the Access Control policy.
Click Connect.

To configure the connection timing of Security Gateways to the Check Point Portal

In SmartConsole > Integration & Services view, click the three dots menu at the top right corner of the page:
Select Gateway Connector.

The Gateway Connector window opens.
Select one of these two options:
- Immediately (the default option) - All supported Security Gateways are connected to the Check Point Portal immediately when the Security Management Server / Domain Management Server is connected to the Check Point Portal.
- After policy installation - All supported Security Gateways are connected to Check Point Portal only after the Security Management Server / Domain Management Server is connected to Check Point Portal and you install the Access Control policy.
Click OK.

Note - For more information on Security Gateway onboarding, see sk180557.

Sharing Configuration Information with the Check Point Portal

To share your on-premises Management Server configuration information with the Check Point Portal

In SmartConsole > Integration & Services view, click the three dots menu at the top right corner of the page.
Select Configuration Sharing.

The Configuration Sharing window opens.
Toggle the Enable button to ON.
Click OK.

The Management Server configuration information is now synchronized with the Check Point Portal.

Note - You cannot edit objects shared from the Management Server in the Check Point Portal.

Sharing Logging Information with the Check Point Portal

Sharing logging information with the Check Point Portal is subject to daily quota based on your contract. The log sharing quota is calculated on a daily basis and automatically renews at midnight (00:00) UTC each day.

To share your on-premises Management Server log information with the Check Point Portal

In SmartConsole > Integration & Services view > click the three dots menu at the top right corner of the page.
Select Log Sharing.

The Log Sharing window opens.
Toggle the Enable button to ON.
Select the products whose log information you want to share:
- All products
- Specific products - Select the applicable products from the drop-down list.
Click OK.

The Management Server now synchronizes the log information with the Check Point Portal.

Starting from R82 Jumbo Hotfix Accumulator Take 103, if the volume of logs sent to the cloud exceeds your allocated daily quota, a yellow triangle icon appears next to the Log Sharing option. To resolve this issue:

Optimize log ingestion by selecting specific products instead of all products, or by adjusting the list of selected products (for example, removing products that generate large volumes of logs).
Upgrade your contract to increase your daily log sharing quota.

To make sure that the synchronization took place:

Go to the Check Point Portal > the Events & AIOps application.
In the left navigation panel, click Logs.

Note - To enable log sharing on a Standalone Configuration in which the Check Point Firewall and the Security Management Server products are installed and configured on the same server. server, the server must have:

For an incoming log rate of less than 500 logs per second - at least 2 CPU cores and 16GB of RAM.
For an incoming log rate of more than 500 logs per second - at least 4 CPU cores and 16GB of RAM.

Troubleshooting

For Troubleshooting issues, see sk181504.