Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added crowdsec-docs/static/img/checkpoint_step1.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added crowdsec-docs/static/img/checkpoint_step2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added crowdsec-docs/static/img/checkpoint_step3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added crowdsec-docs/static/img/checkpoint_step4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added crowdsec-docs/static/img/checkpoint_step5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added crowdsec-docs/static/img/checkpoint_step6.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
36 changes: 35 additions & 1 deletion crowdsec-docs/unversioned/integrations/checkpoint.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,41 @@ Once the integration is generated you will be presented with a credentials scree
}}
/>

[Checkpoint Documentation](https://support.checkpoint.com/results/sk/sk132193)
## Checkpoint Configuration

In the gateways and servers tab, double-click on the specific gateway you want to configure

![](/img/checkpoint_step1.png)

You will have this properties menu, select "Threat Prevention (Custom)", then activate at least Anti-Bot or Anti-Virus.

![](/img/checkpoint_step2.png)

Now go to the "Security policies" tab, and click on "New IOC Feed"

![](/img/checkpoint_step3.png)

Click on "Custom Policy", then below on "Indicators". Add your feed information and click "Test Feed".

You need to put the username and password provided by the console in the "Feed URL" so it can use basic authentication:

```
https://<username>:<password>@admin.api.crowdsec.net/v1/integrations/<integration_id>/content
```

In this example, we used "Generic Firewall Format", but you can use checkpoint format and select the data column "1".

![](/img/checkpoint_step4.png)

Select the Gateway and click "Test Feed"

![](/img/checkpoint_step5.png)

Check That the feed is working and save the configuration.

![](/img/checkpoint_step6.png)

You can also take a look at the [Checkpoint Documentation](https://support.checkpoint.com/results/sk/sk132193) for more information (if you want to do it using CLI):

## Format example

Expand Down
Loading