---
sourceDocument: Xanadu Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/security-management

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configure a block list as a Custom Intelligence Feed on the Check Point NGTP integration

# Configure a block list as a Custom Intelligence Feed on the Check Point NGTP integration {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The firewall administrator must configure the Custom Intelligence Feed corresponding
to the Block List created in ServiceNow AI Platform.

## Before you begin

Role required: admin

## About this task

This task needs to be performed on each of the Check Point NGTP Gateway. The firewall administrator would need the SSH access of the Gateway servers. If your organization has ServiceNow AI Platform change management and approval processes, verify that email send/receive capability is enabled.

The firewall administrator would
need the retrieval URL of Block List and the ServiceNow user credentials with role
Check Point API Account Access Role (sn_sec_checkpoint.api_account_access).

If
Firewall administrator is not using ServiceNow AI Platform, the NOW Security Incident
Administrator can provide the required information via an Email. Alternately, if
firewall administrator is using ServiceNow AI Platform, the Change Request associated with
Block List can be assigned to firewall administrator. This Change Request has the
required information to configure Custom Intelligence Feed.

For more
information on setting up Custom Intelligence Feed on Check Point Gateways, refer
to: [https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=\&solutionid=sk132193](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132193)

## Procedure

1. Verify that email send/receive capability is enabled in your ServiceNow AI Platform instance by navigating to Email propertiesAdministrationEmail Properties.
2. Under Outbound Email Configuration, verify that Email sending and Email receiving are selected.
3. Modify SSH to Check Point Gateway with expert mode.
4. Execute the command to add Custom Intelligence Feed.  
   The command execution is interactive and prompts for feed format and password.
   * When prompted for Feed Format, enter 'cp_csv'
   * When prompted for ServiceNow AI Platform user password with API Access.

   {#configure-blk-list-as-custom-intell-feed__ul_ty1_k3d_qgb}The command execution would warn about the server certificate (NOW platform) not being trusted by the machine and would prompt to add the server security certificate to machine's trusted store. Enter Y.  
   "Status:Succeed" message would appear, confirming that the Feed is successfully added.

*[\>]: and then