Welcome to the Check Point Jump Start demo lab. In this training lab, we're going to demonstrate the CloudGuard Posture Management Console. First, connect to the CloudGuard web portal. You will need to authenticate with a valid subscription, username, and password. I don't actually have a valid posture management license subscription, so I'm going to use the Check Point training environment called DemoPoint. Check Point DemoPoint is a great learning and demonstration utility that can help you to learn CloudGuard solutions and also some other Check Point products. You can access the DemoPoint point, if you're a Check Point employee or a Check Point distributor or a reseller. For more information on how to get started with DemoPoint, you can search our Check Point website for how to get started with DemoPoint. Let's get right into it. We first need to login to the CloudGuard native portal. You just need to open a web browser and go to the CloudGuard native portal website. Once you've logged in, you will notice a familiar look to this interface. It's designed to look similar to the RAD SmartConsole with all the main menu features designed in a linear fashion on the left side of your screen. If this is the first time logging into the CloudGuard console, it could be a bit overwhelming at first. That's because this console was assigned to service most of the CloudGuard products. For the scope of this video and also for simplicity's sake, we're going to focus only on the CloudGuard posture management menu options and drill only on these features and their capabilities, which is about half of the menu features that you see here. The other half is related to other CloudGuard products that we mentioned about in the lecture part. But as of yet, I have not done any specific training on them. Maybe in a future video, I will elaborate more on these other products. Remember, I talked about Cloud Intelligence and Threat Hunting. Well, here's a product menu for that product, which is called the Intelligence icon. I also mentioned about the CloudGuard Workload Protection. Well, here's that menu icon for that product. I also talked about CloudGuard web, web application as an API protection and shift left is related to that. The only reason I mentioned these are the products is like I said, this CloudGuard console can be overwhelming the first time you login. I just want to point out that these are the products that are also managed by the same CloudGuard console. But on this video, I just only want to focus on learning about the CloudGuard posture management features. You can ignore the other Cloud guide products, menus, and their features. Now remember, in our lecture portion of this video training, I emphasized that there were four main core topics that a posture management solution should be able to do. I stressed them over and over again. These four main core topics that we talked about are: visibility, inventory, compliance, and security. Now let's go over these key main topics again, but now with the CloudGuard console. When we talked about visibility, I mentioned that your posture management solution should be like a window into your whole Cloud infrastructure. Now, there's no specific menu icon for visibility, but in fact, you can say to all of these CloudGuard menus, will give you the full visibility into your Cloud. All of these posture management icons will give you the visibility into your Cloud infrastructure in some way or another. I know there's a bit of overlap in some cases, but that's fine. Better to give you more details than less. But I think the best place to start the visualization of your assets is at the overview tab. This is a great place to start because it gives you a nice and compact format and a complete summarization of all your assets that have been onboarded from your Clouds or multi-clouds. Here is where you have the home dashboard page, the main page to monitoring your Cloud environments. As you can see, the Check Point and DemoPoint account has four monitoring environments, one account for each Cloud provider and one Kubernetes account, which is a total of four accounts. Also notice that we have close to 3,000 total assets in my inventory. At the time of this recording, this list keeps growing. All of these assets are distributed across these four CloudGuard accounts. We can also see a breakdown of all the top protected assets and also a chart listing all the protected assets per platform. You can also see a bunch of other stats and statistics and also alerts listed by top accounts and also by top alerts. All of these are what we call widgets. You can shift the widgets around on a homepage to give you the look and feel that you want. You can customize your homepage with your favorite stats and statistics and widgets. You can even create your own homepage with your favorite tools and utilities and widgets. Another icon related to visibility is the Events icon. Here, you can see all the events and logs that have been generated and triggered by various engines. In this case, we see that the compliance engine has triggered a few alerts, some with high and medium and low severity. Also you can see which Cloud Environments trigger these alerts. Notice that we have over 30,000 events. You can even export all of these events if you so choose. We can spend a few hours here exploring all the features in this interface. But for now, I just want to point out the main core topics. Another core topic that we listed that your posture management should be able to do is a list of your inventory. Here we have the Assets icon, which contains a complete list of all your assets. The Environment tab, again, we have the four environments and we can drill down into each environment to see all the protected assets and policies that were assigned to those assets. In the Protected Assets tab, here you can see close to 3000 assets. You can filter by Platform, Environment, Region, Networks, or other criteria. Let me show you some of this. Let's select Azure environment and then select Asset Type as Virtual Machine. When we click on an asset, we can get the full details of those assets, and you can see the inbound and outbound firewall rules. Another main topic that we talked about was the compliance. Your posture management solution should be able to run compliance assessments. Look here at this icon, here we have the Posture Management icon, which encompasses both the compliance and the best-practice rules. In the Welcome page, I really liked this new Welcome page. I like how Check Point has organized all the posture management main features into a centralized landing page. From the centralized landing page, you can launch all the posture management features. You can check your compliance status. You can run compliance assessments. You can manage best-practice rules and rule sets, and you can even manage your policies and configure automatic remediation. In this landing page, we have the main features that we can execute with posture management just with a simple click of a button. Now another core feature that we talked about in the lecture part of this series was security. You need to make sure that your Cloud assets are as secure as possible. Here we have the Network Security menu, this is your Cloud network security. Here again, they've added a welcome landing page. I think the centralized landing page is a blessing. It is very intuitive in helping you to understand and navigate through the menu options. From here, you can inspect your network configurations. You can explore your actual traffic. You can even check out your traffic logs and review your Cloud security groups. Next, let's take a look at identities with the Identity icon. Again, we have the Welcome landing page, which is a great organized jumping point into your Cloud identities. Notice that it is grouped in two, we have the Visibility menus, and that gives us a view of your account activities, of activity logs, and Cloud users and Cloud roles. We also have the IAM safety, here you can create your users and roles and even elevate privileges. Now let's skip the Workload Protection and Intelligence and Shiftleft icons. As I mentioned, these icons are for other CloudGuard products that we briefly mentioned in introduction phase in Lesson 1 of the lecture series. Finally, we come to the Resource icon. Again, we have a welcome landing page, and here it basically links to documentation and administration guides to the release notes. Also, a quick link to the Check Point support center, if you want to quickly lookup an SK or an article. We also have links to additional reference material. Links to the API reference manual, links to the GSL reference guide, and linked to the Cloudbot resource page. You can even check out the status of all of our CloudGuard Check Point servers and even a link to directly open a case with Check Point. Finally, we have the setting section. Here you can check out your account information. You can even change your password. You can even get your CloudGuard mobile app from the Apple App Store and even an app from the Google playlist. Now there's a bunch of other features that I did not get to in this intro. Since for now, I just wanted to give you a high-level view of the CloudGuard native portal. If you want more information on any of these features that we talked about, you can get more information out our Check Point YouTube channel. That brings us to the end of this overview. I hope to see you in the next jump-start training video series. Until then, so long and bye for now.
