> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Check Point Firewall

> Connect a Check Point Quantum firewall to Myrmex over SSH — create the access account and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Check Point** Quantum firewall (Gaia OS) so Myrmex can read its configuration, audit its hardening, help you clean up policies, and — with approval — apply changes. Myrmex reaches the device over **SSH** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network, on demand — nothing is stored on the Myrmex side.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read & troubleshoot" icon="magnifying-glass">
    Inspect system status, interfaces, routing, connections, access rules, NAT, and VPNs — read-only diagnostics, pulled live.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit against Gaia OS hardening controls.
  </Card>

  <Card title="Policy hygiene" icon="broom">
    Find shadowed, unused, or overly-permissive access rules and propose cleanups.
  </Card>

  <Card title="Backup & diff" icon="floppy-disk">
    Back up the configuration on demand and compare revisions over time; with approval, apply rule and VPN changes.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the firewall's management IP over SSH. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* **SSH reachable** on the Gaia management interface (SSH is enabled by default; confirm the Collector's IP is permitted).
* An **administrator account** Myrmex can use to log in (a read-only role is enough for analysis; a read-write role is required to apply changes).

## Step 1 — Create the Access Account on Check Point

<Steps>
  <Step title="Allow SSH to the management interface">
    SSH is enabled by default on Gaia. In the **Gaia Portal**, confirm the Collector's IP is allowed to reach the management interface (allowed clients / access settings).
  </Step>

  <Step title="Create a role (optional, recommended)">
    In **Gaia Portal → User Management → Roles**, create a role scoped to what Myrmex should do — read-only for analysis, or read-write (adminRole) to allow changes.
  </Step>

  <Step title="Create the user">
    In **Gaia Portal → User Management → Users**, add a user with a strong password, assign the role above, and set the shell to the Gaia CLI (`/etc/cli.sh`) so commands run. Note the **username** and **password** — you'll enter them in Myrmex.
  </Step>
</Steps>

<Tip>
  Prefer least privilege: start with a read-only account, and only grant read-write once you want the agents to apply changes for you.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → Check Point Firewall**, then fill in:

| Field           | Description                                                                                                             |
| --------------- | ----------------------------------------------------------------------------------------------------------------------- |
| **Name**        | A unique name for this firewall instance.                                                                               |
| **Description** | Optional note to identify the device.                                                                                   |
| **Collector**   | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will open the SSH connection to the device. |
| **IP**          | The IP address or hostname of the Check Point Firewall.                                                                 |
| **SSH Port**    | The SSH port (default `22`).                                                                                            |
| **Username**    | The Check Point SSH username with admin privileges (created in Step 1).                                                 |
| **Password**    | The SSH password for the user.                                                                                          |
| **Model**       | The Check Point Quantum firewall model series.                                                                          |
| **Version**     | The Check Point Gaia OS version.                                                                                        |

## Connect

Click **Connect** to validate the SSH connection and finish. The firewall then appears under **Environment → Integrations**, and you can start asking the AI about it in the Workspace.

<Note>
  This integration is operated by the [Integration Specialist agent](/documentation/multi-agent-system/integration-specialist-agent), which runs the Gaia CLI on your behalf. Browse more connectors in the [Integrations directory](/documentation/integrations/overview).
</Note>