Accenture MDR Quick Start Guide for Check Point Harmony Email

This quick start guide will help Accenture MDR customers configure Check Point Harmony Email to send logs to the Log collection Platform (LCP).

This document includes the following topics:

Supported Versions

A list of supported versions is available in the Accenture MDR Supported Products List document (Accenture_MSS_Supported_Products_List.xlsx) which can be found in Accenture Portal - https://mss.accenture.com/PortalNextGen/Reports/Documents

Port Requirements

Table 1-1: Port requirements for LCP communication.

Configuring Check Point Harmony Email

Pre-requisite - It has been recommended having admin or similar role privilege on Checkpoint Infinity Portal which should allow to create API keys to enable fetching Logs.

• Provide URL Base to MxDR with reference to your data residency settings configured for Harmony Email and Collaboration.

Note: You can select the data residency when you create an account in the Infinity Portal. After you choose the data residency region, your data is stored and processed only within the boundaries of the selected country.

Open

Steps to generate Client ID and Secret Key.

1. Log in to Checkpoint Infinity Portal

2. Navigate to Global Settings > API Keys.

Open

3. From the top toolbar, click New.

4. In the Create a New API Key window, from the Service tab click the down arrow and select a service as Harmony Email & Collaboration. Providing Expiration and Description are optional steps. By default, there is no set expiration.

5. Click Create. You need to copy Client ID and Secret Key and provide them to MxDR before closing the dialog box. Once you have done copying Client ID and Secret Key. click Close.

6. Click Refresh to see updated information about the API keys. The status of an Active API key should be shown as Green.

LCP Configuration Parameters

Table 1-2: The Check Point Harmony Email event collector (API - 5065) properties to be configured by MDR are given in the table.