# Check Point Harmony Email & Collaboration

The Dropzone AI platform integrates with Check Point Harmony Email & Collaboration APIs. This document describes how to set up OAuth credentials in the Check Point Infinity Portal and install them into the Dropzone platform.

The integration automatically ingests the following email security alert types from Check Point Harmony:

* `phishing` - Phishing email alerts
* `malware` - Malware email alerts
* `suspicious_phishing` - Suspicious phishing email alerts
* `suspicious_malware` - Suspicious malware email alerts
* `anomaly` - Admin-blacklisted emails and other anomalies

## Create Oath credentials

Check Point Harmony requires an Account API Key to enable. To create an Account API Key, do the following:

* In your Check Point Infinity Portal, navigate to ⚙️ > API Keys

<figure><img src="/files/f3sCtqESRb6bxYqSUSjA" alt=""><figcaption></figcaption></figure>

* Navigate to New > New account API key

<figure><img src="/files/gJDQLvN3bN9l4nQNbhjB" alt=""><figcaption><p>Click "New Account API Key"</p></figcaption></figure>

* Under "Service," select Email & Collaboration
* In the Expiration field, select an expiration date and time for the API Key

* In the Description field, enter a memorable description for the API Key, such as "Dropzone AI"
* Click "Create"

<figure><img src="/files/37GiDvcncKytpwNOJBL4" alt=""><figcaption><p>Create the API Key</p></figcaption></figure>

* Copy the Client ID, Secret Key, and Authentication URL shown for use later in the Dropzone UI where they are called "Client ID," "Secret Key," and "Authentication URL (API Endpoint)" respectively

* Click "Close"

<figure><img src="/files/bOblJYR2cYwWRykgejeV" alt=""><figcaption><p>Copy the API Key details</p></figcaption></figure>

For additional information, see the [Check Point Infinity Portal API Keys Documentation](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/Content/Topics-Infinity-Portal/API-Keys.htm).

## Enable Check Point Harmony

The Alert source integration allows Dropzone AI to pull alerts from Check Point Harmony Email & Collaboration for investigation.

You'll need the following information:

| Dropzone Field                    | Source                                            |
| --------------------------------- | ------------------------------------------------- |
| Client ID                         | The "Client ID" value you copied earlier          |
| Secret Key                        | The "Secret Key" value you copied earlier         |
| Authentication URL (API Endpoint) | The "Authentication URL" value you copied earlier |

To enable the Alert Source integration, do the following:

* Navigate to your Dropzone AI tenant home page e.g. https://*mycompany*.dropzone.app
* In the bottom left hand corner, navigate to Settings > Integrations

<figure><img src="/files/zN02u3HObDaemUY8E1kD" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="/files/brI7n2Ux40Tk0jTwBCVh" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search Check Point, then click "Configure"

<figure><img src="/files/rRRGNdeyEcgaVZJ45Vgd" alt=""><figcaption><p>The Check Point Tile</p></figcaption></figure>

* Input the Client ID, Secret Key, and Authentication URL

<figure><img src="/files/EpghG4k2SY4ha2dqFHIn" alt=""><figcaption><p>The Check Point Harmony Alert Source Configuration (pt 1)</p></figcaption></figure>

* Under "Enabled Severities," select which severity levels to ingest from Check Point Harmony
* Under "Enabled States," select which [event states](https://sc1.checkpoint.com/documents/Harmony_Email_and_Collaboration/Topics-Harmony-Email-Collaboration-Admin-Guide/Managing-Security-Events/Events-Page.htm) to ingest from Check Point Harmony

<figure><img src="/files/4BhgC2uyN1YbbNrTkkdo" alt=""><figcaption><p>The Check Point Harmony Alert Source Configuration (pt 2)</p></figcaption></figure>

* Input your desired poll interval and lookback

<figure><img src="/files/EbxJMIbYnSnzbZd7V2Da" alt=""><figcaption><p>The Check Point Harmony Alert Source Configuration (pt 3)</p></figcaption></figure>

* If you wish to further filter alerts using the Python [CEL](https://python-common-expression-language.readthedocs.io/en/stable/tutorials/cel-language-basics/) package, check the box labeled "Use advanced filtering"
* Input your CEL expression, then select whether to include or exclude alerts matching that filter. Add each filter individually using the "Add Item" button
* Contact your Dropzone AI support representative for more information about this feature

<figure><img src="/files/infLIQONnAkvK8XGXOi4" alt=""><figcaption><p>The Check Point Harmony Alert Source Configuration (pt 4)</p></figcaption></figure>

* Click "Test & Save" to finish

You should begin ingesting alerts immediately.

If you have any errors engage your Dropzone AI support representative.