Skip to main content

​
Overview

The Check Point Harmony integration enables ThreatAware to collect data from your Check Point Harmony environment, providing visibility into endpoint protection status and security posture across your organisation.
Connection Method: API Setup Time: 20 minutes Access Required: Check Point Administrator account

​
Data collected

The Check Point Harmony integration provides:
  • Endpoint protection status
  • Compliance and policy status
  • Device inventory from Harmony
  • Security event data

​
Use cases

Endpoint Protection Monitoring

Track Check Point protection status across all managed endpoints

Compliance Tracking

Monitor compliance status and policy adherence across your environment

Security Posture Assessment

Validate that Harmony controls are properly configured

Audit Support

Generate reports showing endpoint protection coverage

​
Setup instructions

1

Log in to Check Point Harmony

Access the Check Point Harmony Portal using an account with administrator privileges.
2

Enable API Access

Navigate to Settings or Manage & Settings in the Harmony console.
  • Find API Access and ensure it is enabled
  • (Optional) Configure IP whitelisting to restrict API access to specific IP addresses for enhanced security
3

Create an API User

Go to User Management > API Users in the Harmony console.
  • Click Add User to create a new API user
  • Enter a descriptive username (e.g., threataware-api)
  • Assign a secure password
  • Set permissions to Read-Only unless higher access is required
Only grant the minimum permissions necessary. Read-only access is recommended for ThreatAware integration.
4

Copy API Credentials

Note the following details from the API user you created:
  • Username: The API user name
  • Password: The password you assigned
5

Enter Credentials in ThreatAware

In ThreatAware, navigate to Settings > Integrations.
  • Search for and select Check Point Harmony
  • Enter the required credentials:
    • Username: API user name
    • Password: API user password
    • API Endpoint URL: Your Harmony instance URL (e.g., https://your-harmony-instance.checkpoint.com)
You can find your Harmony instance URL in the portal address bar or in your Harmony documentation.
6

Connect and Verify

Click Connect to establish the integration.Verify the connection status shows Active in ThreatAware before proceeding.

​
Required credentials

Field Name: Check Point API Username Type: String Description: The username for the API user created in Check Point HarmonyExample: threataware-api or svc_threataware
Field Name: Check Point API Password Type: Password (encrypted) Description: The password associated with the Check Point Harmony API user
Store this credential securely in your organisation’s password manager for future reference.
Field Name: Check Point API URL Type: String Description: The URL of your Check Point Harmony instanceFormat: https://your-harmony-instance.checkpoint.com Example: https://harmony.acme.com or https://checkpoint.company.net

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings > Integrations in ThreatAware
    • Confirm the Check Point Harmony integration shows Active status
    • Check the last sync timestamp
  2. Verify Data Collection
    • Wait 60 minutes for the initial data sync
    • Search for a known device in ThreatAware
    • Verify Check Point Harmony data appears in the device details
  3. Test Queries
    • Create a test query to filter devices with Harmony protection status
    • Verify the data matches your expectations

​
Troubleshooting

Symptoms: Integration status shows authentication failureSolutions:
  • Verify the Username and Password are entered correctly
  • Ensure API access is enabled in the Harmony console
  • Check that the API user account is not locked or expired
  • Confirm the password was entered without extra spaces
  • Test the credentials in the Check Point console directly
Symptoms: Integration fails to connect or times outSolutions:
  • Verify the API Endpoint URL is correct and accessible
  • Check firewall rules allow outbound HTTPS (443) to your Harmony instance
  • Test the URL in a browser to ensure it’s reachable
  • Verify the Harmony instance is online and responding
Symptoms: Integration connects but returns permission denied errorsSolutions:
  • Verify the API user has read access to required resources
  • Check if IP whitelisting is configured and includes your ThreatAware instance
  • Review the Check Point API Documentation for required permissions
  • Ensure the user has permissions across all required endpoints
Symptoms: Integration shows active but no Harmony data appearsSolutions:
  • Verify there is endpoint data in Harmony to collect
  • Check the API user permissions for data access
  • Verify devices from Harmony are syncing to ThreatAware
  • Review ThreatAware integration logs for errors

​
Additional resources

Check Point API Documentation

Official Check Point documentation for API configuration and permissions

ThreatAware Support

Contact ThreatAware support for integration assistance

​
Best practices

Credential Management
  • Create a dedicated service account specifically for ThreatAware
  • Store credentials securely in your organisation’s password manager
  • Rotate API credentials annually or per your security policy
  • Monitor for authentication failures in ThreatAware logs
Security Considerations
  • Only grant read-only permissions (never write access)
  • Configure IP whitelisting to restrict API access
  • Review Check Point audit logs periodically to monitor API usage
  • Follow your organisation’s least privilege principles