Guide for provisioning SandBlast Mobile dashboards€¦ · (GDM is a multi-tenant access for MSSP...

©2017 Check Point Software Technologies Ltd. All rights reserved | P. 1

Guide for provisioning SandBlast Mobile dashboards

The following guide was created for Check Point Partners and Resellers to help in the self-

provisioning process for SandBlast Mobile Evaluation and Production for the customers. See

below processes for the scenarios:

1. PoC Evaluation dashboard creation.......................................................................... 1

2. Production dashboard creation ................................................................................. 9

3. Dashboard Move from Evaluation Production .................................................... 13

4. Dashboard license extension Prod/Eval ................................................................. 17

1. PoC Evaluation Dashboard Creation

When obtaining a SandBlast Mobile dashboard for PoC you should note the following:

The Sales representative (CheckPoint/Partner) who will support the POC will activate

the SandBlast Mobile PoC dashboard and hand it over to the customer as part of the

PoC kick-off

There will be a 30 days EVAL (evaluation) license for 50 devices that will be requested

using the Check Point User Center (UC)

The Sales representative will need to add himself as a contact in the UC Account of the

customer/partner for which the POC will be conducted. Alternatively he can ask the

customer to add him as a Licenser in the Customer’s UC Account

Follow the process below:

1. Access to customer UC Account - if you already have access to your customer UC

Account you can skip this step, Otherwise you have the following 3 options:

1.1. Option 1 - ask your customer to add your UC user as a ‘Licenser’ in the Customer’s

UC Account.

1.2. Option 2 - Open a new UC Account in the Customer name – Also relevant for a brand

new Check Point customer.


1.2.1. Log into User Center account at https://usercenter.checkpoint.com/usercenter/index.jsp

1.2.2. Under My Check Point -> My Accounts -> Accounts.

1.2.3. Select “New Customer” and fill in the UC Account details, Click Submit

1.2.4. Now you are the Administrator of that new UC Account

1.3. Option 3 - Some Partners & Check Point Sales reps have access to the ‘Customer

Center’ and can add their UC user to the UC Account of the customer to allow them to

request an evaluation license under their name. Alternatively you can skip this step and

1.3.1. Log into User Center account at https://usercenter.checkpoint.com/usercenter/index.jsp

1.3.2. Under My Check Point -> My Accounts -> Customer Center.

1.3.3. You can search by the Customer name or just enter the User Center Account ID

(AID) and click on the company name when it appears below.

https://usercenter.checkpoint.com/usercenter/index.jsp

https://usercenter.checkpoint.com/usercenter/index.jsp


1.3.4. Under UC Accounts click on the AID you used to see the UC Account Contacts

options.

1.3.5. Click on Add User to enter the new persons email address along with their

approved authority and click save to complete. The sales person / Overlay /

Partner add himself as Licenser to the User Center Account ID:


2. Obtain the SandBlast Mobile PoC EVAL license for the customer.

2.1. Sign in inside the User Center (https://usercenter.checkpoint.com/)

2.2. Go to Learn -> product evaluation:

2.3. Go to “Other evaluation option” -> select a product -> Cloud -> Check Point Mobile

Threat Prevention EVAL -> Next

https://usercenter.checkpoint.com/


2.4. Provide the evaluation info – Select the customer’s UC Account (This is possible

because you added your user on this UC Account as described in #1 above),

Requestor email address Customer Name & Country, Select Purpose -> Click “Get

Evaluation”

2.5. This will generate an EVAL license for a new Sandblast Mobile Dashboard -> the

license will be used to activate the Dashboard


2.6. Log on to the new activation form - GDM (Global Dashboard Management) Form - and

log in with your UC account

IMPORTANT: if the solution is managed & processed via MSSP/Telco carrier that is

managing their own set of dashboards in GDM please contact that relevant GDM

Admin from the MSSP.

(GDM is a multi-tenant access for MSSP that manage SBM dashboards for their customers)

2.7. Enter your User Center credentials -> Click sign in

3. Fill in the form to create the Sandblast Mobile Evaluation Dashboard for the first time and

setup the first Administrator on the dashboard:

3.1. License details: Select from the drop-down the EVAL license you just created and you

will see all the Account details automatically filled it.

3.1.1. Key in the Check Point Opportunity Number (Optional) – For Partners: this is the

number you received after registering the opportunity. For Check Point Employees

this is obtained from Sales rep/account manager.

3.2. Dashboard Details: name the dashboard – typically use the customer name. The

default region should be “US” (USA) unless the customer specifically requested the

Dashboard is hosted in European soil (EU).

3.2.1. IPA – This is the file type that the dashboard will be setup with for iOS device

deployment. Selecting “Enterprise” (default) will push the Check Point enterprise

signed app, selecting “App store” will push direct iOS users to install the SBM

Protect app from the official app store.

https://portal.locsec.net/usercenter/login


3.3. Administrator Details: Enter your email and Mobile cellphone number for the first

Administrator for this Dashboard. The Admin will receive an email to activate his user

and create a personal password. Then they will log into the SBM dashboard to start the

initial Dashboard configuration + Handover walkthrough session with the end customer

to kick-off the POC.

3.4. Click “Create”

3.5. Get a confirmation email with the URL to your Sandblast Mobile dashboard -> click on

“Activate your account”

3.6. Activate the dashboard (enter your new password)

3.7. Login to the dashboard


3.8. Handover the Dashboard to the customer as part of the Dashboard walkthrough / PoC

kick-off.

4. Extending the Evaluation period or number of seats:

4.1. If the POC period extends you can extend the dashboard license to extra 30 days by

requesting another 30 days EVAL licenses as described above. Please make sure you

issue the new license close to the end of the current 30 days period. Number of

extensions will be limited as well since the goal here is to drive for POC closure and

go/no-go purchase decision.

4.2. As an exception you can request in advance a special EVAL for more licenses and/or

for a longer time period (up to 1yr) – please contact the relevant Sales representative

from Check Point to submit an internal request (“Business Ordering” ticket).


2. Production Dashboard Creation

The process below is not relevant for the case where there was already a SandBlast Mobile dashboard in testing (PoC) that needs to be converted to Production mode. For this process go to item #3

1. The customer sends Check Point a PO – in the PO we will have the Product line item

(SKU), contact name to deliver the license to and the customer UC Account.

2. CP Order Entry team Deliver licenses to the relevant UC Account of the customer. Based

on the PO/SO we will have the customer user center account ID to deliver to (– contact

email) once this was delivered an email is sent, if you didn’t get the email the customer

probably did.

3. The following step can be also accomplished via the email received from the licenses

delivery. Customer will open “Check Point User Center” https://usercenter.checkpoint.com/

3.1. Sign in to the User Center



3.2. Go to the licenses area in the Product Center under My Check Point -> Accounts

3.3. Find the new License in the Services tab

3.4. Activation from the link in the Screen below “…activation from here”

4. Click the link in the email/ license Screen and log-in to the Dashboard creation form (in

GDM) using your Check Point User Center credentials


IMPORTANT: if the solution is sold via MSSP/Telco carrier that is managing their

own dashboards in GDM please contact that relevant GDM Admin from the MSSP.

(GDM is a multi-tenant access for MSSP that manage SBM dashboards for their customers)

5. Fill in the form to create the SandBlast Mobile Production Dashboard for the first time and

setup the first Admin:

5.1. License details: Select the Production license from the drop-down

5.2. Dashboard Details: name the dashboard – typically use customer name. The default

region should be USA “US” unless the customer needs the dashboard to be hosted in

Europe “EU”


5.3. Administrator Details: Enter the email and Mobile cell Number for the first Administrator

for this Dashboard. The Admin will receive an email to activate his user and create a

personal password. Then they will log into the MTP dashboard and start using the

system in full production

4.3. Click “Create”

4.4. Get a confirmation email with the URL to your Sandblast Mobile dashboard -> click on

“Activate your account”

4.5. Activate the dashboard (enter your new password)

4.6. Login to the dashboard

4.7. Start Production deployment


3. Dashboard move from Evaluation Production

The following process starts when the customer purchased SandBlast Mobile licenses for

production usage after a successful PoC Evaluation period.

Follow the process below to apply the new Production License purchased on the existing PoC

Dashboard. Customers select this option, if they don’t want to start over the deployment (e.g.

keep the same devices used in testing, keep the same configurations) or if they want to keep

the existing Dashboard URL:

1. Check Point Order Entry team Deliver licenses to the relevant UC Account of the customer.

Based on the PO/SO we will have the customer user center account ID to deliver to

(contact email) once this was delivered an email is sent, if you didn’t get the email the

customer probably did.

2. To see the license in “Check Point User Center” https://usercenter.checkpoint.com/

2.1. Sign in to the User Center

2.2. Go to the licenses area in the Product Center under My Check Point -> Accounts



2.3. Find the new License in the Services tab

2.4. IMPORTANT: DO NOT activate from the link in the license (where it say “…activation

from here”). This is only relevant for a new brand new Dashboard and you do not need

to activate a new dashboard if the customer wants to keep the current one used for

evaluation. In the next step you will attach the production license from the dashboard

itself.


3. Apply the new production license

3.1. Login to the Evaluation Dashboard used during the PoC:

3.2. Go to Settings tab --> License Management

3.3. Click “Apply New” and login using the user center credentials


3.4. Select the new Production License received

Please note that the user used for login in previous step should be linked to the UC

Account of the customer where the license was delivered to. Otherwise you will not find

the license.

3.5. Validate that the license details are correct and click “Apply”

4. Start using the Dashboard in Production.


4. Dashboard license extension Production / Evaluation When the SandBlast Mobile Dashboard license expires a notification warning is shown on the

main screen:

An Admin Event alert is also logged:

To obtain a new license:

For Production Dashboards the customer will renew the existing amount of license or

just purchase more licenses (e.g. via new PO)

For Evaluation Dashboards one can just issue another evaluation license as described

above (See Obtain the SandBlast Mobile PoC EVAL license for the customer.)

Follow these steps to extend the license:

1. Apply the new license onto the SandBlast Mobile Dashboard

1.1. Login to the Dashboard and Go to Settings tab --> License Management


1.2. Click “Apply New” and login using the user center credentials

1.3. Select the new License received

Please note that the user used for login in previous step should be linked to the UC

Account of the customer where the license was delivered to, otherwise you will not find

the license.

1.4. Validate that the license details are correct and click “Apply”

2. Continue using the Dashboard and confirm the License warning is gone.

Guide for provisioning SandBlast Mobile dashboards€¦ · (GDM is a multi-tenant access for MSSP...

Documents

Transcript of Guide for provisioning SandBlast Mobile dashboards€¦ · (GDM is a multi-tenant access for MSSP...