diff --git a/crowdsec-docs/static/img/checkpoint_step1.png b/crowdsec-docs/static/img/checkpoint_step1.png new file mode 100644 index 000000000..4526becbf Binary files /dev/null and b/crowdsec-docs/static/img/checkpoint_step1.png differ diff --git a/crowdsec-docs/static/img/checkpoint_step2.png b/crowdsec-docs/static/img/checkpoint_step2.png new file mode 100644 index 000000000..872fe617b Binary files /dev/null and b/crowdsec-docs/static/img/checkpoint_step2.png differ diff --git a/crowdsec-docs/static/img/checkpoint_step3.png b/crowdsec-docs/static/img/checkpoint_step3.png new file mode 100644 index 000000000..55fcd2c94 Binary files /dev/null and b/crowdsec-docs/static/img/checkpoint_step3.png differ diff --git a/crowdsec-docs/static/img/checkpoint_step4.png b/crowdsec-docs/static/img/checkpoint_step4.png new file mode 100644 index 000000000..11f957f98 Binary files /dev/null and b/crowdsec-docs/static/img/checkpoint_step4.png differ diff --git a/crowdsec-docs/static/img/checkpoint_step5.png b/crowdsec-docs/static/img/checkpoint_step5.png new file mode 100644 index 000000000..26695059a Binary files /dev/null and b/crowdsec-docs/static/img/checkpoint_step5.png differ diff --git a/crowdsec-docs/static/img/checkpoint_step6.png b/crowdsec-docs/static/img/checkpoint_step6.png new file mode 100644 index 000000000..bf2cf924c Binary files /dev/null and b/crowdsec-docs/static/img/checkpoint_step6.png differ diff --git a/crowdsec-docs/unversioned/integrations/checkpoint.mdx b/crowdsec-docs/unversioned/integrations/checkpoint.mdx index 798127fe6..35a1cf1cb 100644 --- a/crowdsec-docs/unversioned/integrations/checkpoint.mdx +++ b/crowdsec-docs/unversioned/integrations/checkpoint.mdx @@ -48,7 +48,41 @@ Once the integration is generated you will be presented with a credentials scree }} /> -[Checkpoint Documentation](https://support.checkpoint.com/results/sk/sk132193) +## Checkpoint Configuration + +In the gateways and servers tab, double-click on the specific gateway you want to configure + +![](/img/checkpoint_step1.png) + +You will have this properties menu, select "Threat Prevention (Custom)", then activate at least Anti-Bot or Anti-Virus. + +![](/img/checkpoint_step2.png) + +Now go to the "Security policies" tab, and click on "New IOC Feed" + +![](/img/checkpoint_step3.png) + +Click on "Custom Policy", then below on "Indicators". Add your feed information and click "Test Feed". + +You need to put the username and password provided by the console in the "Feed URL" so it can use basic authentication: + +``` +https://:@admin.api.crowdsec.net/v1/integrations//content +``` + +In this example, we used "Generic Firewall Format", but you can use checkpoint format and select the data column "1". + +![](/img/checkpoint_step4.png) + +Select the Gateway and click "Test Feed" + +![](/img/checkpoint_step5.png) + +Check That the feed is working and save the configuration. + +![](/img/checkpoint_step6.png) + +You can also take a look at the [Checkpoint Documentation](https://support.checkpoint.com/results/sk/sk132193) for more information (if you want to do it using CLI): ## Format example