Introduction

The "Sync with User Center" feature lets users synchronize certain information regarding their environment to the Check Point UserCenter.
The additional information that is presented in the UserCenter account provides:

• Better inventory management
• Pro-active support
• More efficient ticket resolution

 

Example of a UserCenter Account

 

 

Prerequisites

1. Device with licenses and installed policy / database.

2. Uploading/downloading data to Check Point is allowed.

   For details, refer to sk111080.

3. Internet connectivity to Check Point Servers.

   • Make sure the Management Server can connect to the required Check Point servers:

     Server	Command to Run on the Management Server
     dl3.checkpoint.com	curl_cli [-x <ProxyAddress>:<ProxyPort>] -v http://dl3.checkpoint.com
     services.checkpoint.com	curl_cli [-x <ProxyAddress>:<ProxyPort>] -v --cacert $CPDIR/conf/ca-bundle.crt https://services.checkpoint.com
     updates.checkpoint.com	curl_cli [-x <ProxyAddress>:<ProxyPort>] -v --cacert $CPDIR/conf/ca-bundle.crt https://updates.checkpoint.com

   • Proxy configuration (if needed).

     For details, refer to sk83520.
     • MDS / Domain : Configure Proxy in the Gaia Portal.
     • Single-Domain: Proxy can be configured in SmartConsole / Gaia Portal.
       Note: When proxy is configured in SmartConsole, the "Install Database" operation is required (click Menu > Install database > select the Management Server object > click Install).
4.  The Sync to User Center feature is based on CPDiag* - it must be updated to the latest version.

* CPDiag is a SW suite of tools designed to collect statistics, data and metrics from Check Point products (GW/MGMT) and upload it to Check Point servers for analysis.
The collected data is valuable for correlation and learning, both to Check Point and the customers (Proactive support).
The information collected by CPDiag contains parameters about the GW health, usage, events, errors and configuration.
For more information, please review the section: “Which information is sent to Check Point User Center”.
When allowing uploading/downloading data to Check Point, CPDiag is updated on a monthly basis.

How to configure the "Sync with UserCenter" feature

• • In SmartConsole R80.10 and above

    In SmartConsole, on the Navigation Toolbar, click "MANAGE & SETTINGS" > "Sync with UserCenter".

    When synchronization is enabled, an update will occur once a day.

    
     
    Note: For MDS, The above procedure needs to be done at least on one Domain Management Server in order to sync with the UserCenter. 
    
    

• In SmartDashboard R75.47 - R77.x

  In SmartDashboard, go to the "Help" menu and click "Sync with UserCenter...".

  

  
  Clicking the "Sync Now" button runs a relevant script on the Security Management Server. The script collects information from the Security Management database, as well as from the managed Security Gateways and writes it into the $FWDIR/conf/SMC_Files/SU/data_file.xml file.

  Checking the box "Periodically sync server and gateways data with UserCenter" will run the script once a week.

  

  Once the information is sent to Check Point, the User Center can present it in the list of "Software Products & Appliances".

  Note: In a Multi-Domain Security Management Server environment, this feature is only available per Domain context. Currently, it does not work with Multi-Domain (MDS) context.

 

Which information is sent to Check Point User Center

The following information is sent to Check Point User Center:

• Module name
• IP Address
• MAC Address
• Version
• Install Policy time stamp
• Appliance model
• Machine type (gateway/management/etc.)
• OS
• Is this VSX?
• Cluster name (if exists)
• Hit Count last time stamp
• APPI last update
• IPS last update
• Hardware (memory, CPU, network card, etc.)
• License data
• Active blades
• User/Kernel crash information
• Non Private CPView history statistics

 

Related solutions

• sk102186 - Sync with User Center fails with "Internal Error: Failed to complete licensing information operation"
• sk88240 - R7x License Information Tool

Known limitations

Some devices will not be displayed in the product list:

• LSM gateway.
• Multiple devices with the same CK (Bundles SKUs, Vsec).

For further assistance contact Check Point Support.