Skip to main content

Check Point CloudGuard

Check Point CloudGuard is a cloud security tool that provides protection for your cloud infrastructure. You can bring alert, alert definition, and cloud resource data from Check Point CloudGuard into Brinqa to gain a comprehensive view of your cloud security landscape, thus enhancing your cybersecurity posture.

This document details the information you must provide for the connector to authenticate with Check Point CloudGuard and how to obtain that information from Check Point CloudGuard. See create a data integration for step-by-step instructions on setting up the integration.

Required connection settings

When setting up a data integration, select Check Point CloudGuard from the Connector drop-down. If you cannot find the connector in the drop-down, make sure you have installed it first. You must provide the following information to authenticate Check Point CloudGuard with Brinqa:

  • API URL: The CloudGuard API URL. The default URL is

  • API ID and API Secret: The API ID and API secret associated with the CloudGuard account, which must have permissions to log in to the API server and return data.

Generate Check Point CloudGuard API credentials

For the Check Point CloudGuard connector to use the CloudGuard API, you must provide API credentials. To generate API credentials, follow these steps.

  1. Log in to your organization's Check Point CloudGuard portal as an administrator at

  2. Navigate to Settings > Account > Credentials.

  3. Click Create API Key.

    The API ID and API secret display. You cannot view the API secret again. Copy and save it to a secure location.


If you do not have permissions to generate credentials, contact your CloudGuard administrator. For additional information, see Check Point documentation.

Additional settings

The Check Point CloudGuard connector contains an additional option for specific configuration:

  • Page size: The maximum number of records to get per API request. The default setting is 50. It is not recommended to go over 50.

Types of data to retrieve

The Check Point CloudGuard connector can retrieve the following types of data from the CloudGuard API:

Table 1: Data retrieved from CloudGuard

Connector ObjectRequiredMaps to Data Model
Alert DefinitionYesAlert Definition
Cloud ResourceYesCloud Resource

The Check Point CloudGuard connector does not currently support operation options for the types of data it retrieves.

For detailed steps on how to view the data retrieved from Check Point CloudGuard in the Brinqa Platform, see How to view your data.

Attribute mappings

Click the tabs below to view the mappings between the source and the Brinqa data model attributes.

Table 2: Alert attribute mappings

Source Field NameMaps to Attribute
acknowledgedLocal variable
alertTypecategories, Local variable
alertWindowEndTimeLocal variable
alertWindowStartTimeLocal variable
bundleIdLocal variable
bundleNameLocal variable
cloudAccountIdLocal variable
cloudAccountExternalIdLocal variable
cloudAccountTypeLocal variable
commentsLocal variable
entityNameLocal variable
entityNetworkLocal variable
entityTagsLocal variable
entitydome9IdLocal variable
entityTypeLocal variable
excludedLocal variable
findingKeyLocal variable
occurrencesLocal variable
orgIdLocal variable
orgPathLocal variable
originLocal variable
ownerUserNameLocal variable
remediationActionsLocal variable
scanIdLocal variable
statusstatus, statusCategory

Local variable indicates that the field is processed within a specific context, such as a particular workflow or calculation. Unlike other attributes, local variables aren't mapped to the unified data models. They only exist on the source data model.


The Check Point CloudGuard connector uses the CloudGuard API v2. Specifically, it uses the following endpoints:

Table 5: Check Point CloudGuard API v2 Endpoints

Connector ObjectAPI Endpoints
Alert DefinitionPOST
Cloud ResourcePOST


The Check Point CloudGuard connector has undergone the following changes:


  • Added a formatter to process Date Time attributes.