This document contains a list of SK articles that explain some CloudGuard (former Dome9) use cases and typical how-to questions.

Using the REST API

• Create and Manage Exclusions using the CloudGuard REST API
• Onboard an Azure account using the CloudGuard API
• Onboard a Google Cloud Platform subscription using the CloudGuard API
• Attach a Security Group to an Instance using the CloudGuard API
• Retrieve & Search Findings
• Use the CloudGuard API to setup Roles and Permissions for an account
• Onboard an AWS account to CloudGuard using the REST API
• Create a new compliance ruleset and run an assessment with it
• Use the CloudGuard REST API to send findings to Dome9 from an external system
• Use the CloudGuard MSP REST API
• Use the CloudGuard REST API to obtain Compliance Assessment Trends

Network Security

• Cannot view CloudGuard Alerts & Findings
• Enable GuardDuty in AWS
• Create a Destination Log Group for VPC Flow Logs in AWS
• Create a Flow Log for VPC or Subnet in AWS
• Create an IAM Role for VPC Flow Logs
• AWS VPC Flow Log Limitations
• Convert Dome9 AWS Account Connection from IAM User to Cross Account Role

Compliance

• Configure CloudGuard as an AWS Security Hub provider
• Configure CloudGuard as a source for the Google Cloud Security Command Center (CSCC)
• How to configure PagerDuty with CloudGuard
• AWS Element: IAM Policy
• Custom Rules - GSL Reference
• Use CloudGuard in the CI/CD pipeline
• The CloudGuard Circuit Breaker for misconfigured Notification Policies

Integrations

• Configure Splunk as a Log system for CloudGuard
• Configure CloudGuard to send events to Slack using SNS
• Integrating Sumo Logic with CloudGuard
• How to create an SNS Subscription
• CloudGuard SNS Events Integration

Administration

• Create a user account in the Check Point BEYOND support system
• Create a Service Request in the Check Point BEYOND Support System
• Enable Multi-Factor Authentication in CloudGuard

Troubleshooting

• CloudGuard system was unable to retrieve GuardDuty findings due to permissions
• Troubleshooting AWS Permissions problems
• Troubleshooting: Account is already protected by CloudGuard
• Troubleshooting: AWS API key is missing permission
• Troubleshooting: You are not subscribed to this service
• What is my Pairing Key and where can I find it?
• Admin port exposed - Alert example
• Troubleshooting the onboarding of Kubernetes clusters to CloudGuard