Create an API account for the Check Point NGTP integration

An API account role is required in your ServiceNow AI Platform instance for this integration. The Username and Password associated with this account are created in the ServiceNow AI Platform and entered in Check Point, so the Check Point authenticates with the ServiceNow AI Platform when retrieving Block List entries.

Before you begin

Role required: admin

About this task

The ServiceNow AI Platform admin creates an API account role (sn_sec_checkpoint.api_account_access). This account is used exclusively for entering credentials required for authentication on Check Point, so the Gateway can retrieve Block Lists from the ServiceNow AI Platform. This account is a separate, unique API user account in the ServiceNow AI Platform instance, and assigned to the Check Point administrator.

Procedure

1. Navigate to All > Organization > Users.
2. Click the Users module.

   

3. On the Users list that is displayed, click New.

   

   A new form is displayed.

   

4. Fill in the form, as needed.
   Note:

   The values for User ID title, and email address shown in the following table and figure are example values.

   Field	Description
   User ID	Unique User ID for the role in your ServiceNow AI Platform instance. This user ID is entered in the Username field in the Client Authentication section of the Block List Configuration Check Point gateway. An example is CKPT API account SN.
   First Name	Person you are assigning
   Last Name	Person you are assigning
   Title	Job Title, for example FW admin.
   Password	Unique password created for this role. This password is entered in the Password field in the Client Authentication section of the Block List Configuration on Check Point gateway.
   Email	Unique email address

5. Click Submit.
   Once submitted, you can assign the role.
6. On the Users list in the User ID column, click the name of the user ID you entered, CKPTAPI account SN, for example.

   

7. On the open record in the Roles section, click Edit.

   

8. On the Edit Members form that is displayed, enter sn_sec_checkpoint.api_account_access in the Collection field.

   

9. In the Collection column, select then move sn_sec_checkpoint.api_account_access to the Roles List.
10. Click Save.
11. Navigate to Users, and in the User column on the list, click the ID name that you created for the role (CKPT API account SN).

    

12. 
    The user record is displayed. This record verifies that the user account has been assigned.