Self-hosted Check Point governance

Delegate firewall changes. Keep control.

Let teams browse and edit Check Point rules within the access you define. Your firewall administrators keep approval and policy-install control.

Naradox rule change approval comparing the original and proposed firewall rule side by side. — **See every change before approval.** Compare the original rule with the proposed change, with an audit trail for later review.

See how it works

One rule change. Four controlled steps.

Follow an example with Approval enabled and policy installation reserved for the firewall administrator.

Illustrated workflow · fictional data · no live firewall connection

Step 1 of 4

A team requests one permitted change.

The Monitoring team can edit services on this rule. Source, destination, and the rule action stay outside its edit permission.

Example rule: Payment API monitoring · Production / Network

Change requestExample

Requested by: Alex · Monitoring team
Source: Monitoring collectors
Destination: Payment API
Existing service: HTTPS
Add allowed service: TCP 8443

Reason: allow the monitoring probes to reach the alternate TLS port.

Beyond approvals

Work with Check Point rulebases—without giving away full control.

Browse and edit day-to-day policy, follow how it changed, and define precisely who may see, change, or monitor each part.

Browse and edit policy with its object context.

Work with Check Point rules and the network, service, application, content, and other objects behind them.

Give each team a bounded workspace.

Limit teams to configured instances, packages, layers, rules, fields, and log access. Choose which existing objects a grant may use and who may create, edit, or delete supported object types.

See how your rulebase changed.

Compare saved rulebase versions, investigate changes published through Naradox, SmartConsole, or another API client, and propose an earlier field value through the normal editor.

Keep important assets under watch.

Track URLs, applications, and IP addresses through Check Point logs, view their usage, and open the matching logs.

Runs in your environment

Keep Naradox and your rollout decisions under your control.

The customer portal provides downloads, licenses, and support.

Run day-to-day governance in your environment.

Naradox keeps working without a continuous connection to the customer portal.

Activate Naradox with a signed license.

Download a license file or copy a license code from the portal, then import it into Naradox.

Verify what you deploy.

Use the portal release record for bundles, checksums, release notes, and published signatures or SBOMs.

Review the deployment path

Plan your rollout

Explore Naradox for your environment.

Explore the features, deployment requirements, and pricing.