Home > Rex Global Solutions > Check Point Solutions > Check Point Express

Check Point Express for Mid-sized Business

Check Point Express is designed to provide superior security to businesses with up to 500 employees and multiple sites. It is the industry's most comprehensive solution designed to deliver the highest levels of access control, integrated network and application level attack protection, site-to-site and remote access VPN, high-availability and a single intuitive, graphical user interface.
 

Overview

 
YOUR CHALLENGE

As a business with up to 500 users, you need to provide a flexible, secure network infrastructure that connects all your locations and users. The Internet provides a flexible and cost-effective networking environment. However, to make it secure and reliable, you need a solution that:

• Provides the highest level of security against increasingly sophisticated Internet-based attacks while being simple to implement

• Securely connects all business communications and resources at all times

• Streamlines management and maintenance without adding administrative overhead

OUR SOLUTION

Check Point Express™ delivers superior security to businesses with up to 500 users. It is the industry’s most comprehensive solution designed to deliver “worry-free” security to businesses that have limited security resources. By including the highest levels of access control, integrated attack protection, VPN connectivity, and powerful centralized management, you get end-to-end security in a single solution. In addition, Check Point Express is HA-ready, which makes security deployments more resilient, ensuring round-the clock business continuity. You can extend Check Point Express to secure additional sites and users, resulting in a security solution that scales with the network while providing superior investment protection.

 

INTEGRATED SECURITY FOR MAXIMUM PROTECTION

Highest Level of Access Control

Check Point Express includes market-leading FireWall-1® to secure all popular Internet services with Check Point’s patented Stateful Inspection. FireWall-1 supports more than 150 pre-defined applications, services, and protocols out of the box, including Web applications, instant messaging, peer-to-peer applications, VoIP, Oracle SQL, RealAudio, and multimedia services such as H.323. Built-in Active Defense Against Attacks SmartDefense™, as part of Check Point Express, actively protects organizations from known and unknown network and application-level attacks, using Stateful Inspection and Application Intelligence™. It integrates with Check Point’s SMART management and reporting infrastructure to provide a single, centralized console for real-time monitoring of attacks as well as attack detection, blocking, logging, auditing, and alerting. Attack protection capabilities integrated into the security solution minimize the need for a company to make capital investments in additional traffic monitoring products. Out-of-the-box Strong Authentication Organizations that want to implement strong authentication “out of the box” can use Check Point One-Click Certificates.

With an Internal Certificate Authority included with the Check Point Express, X.509 digital certificates can be issued to VPN-1® Express gateway and remote access users. One-Click Certificates provide industry-standard, two-factor authentication without the complexity and expense of PKI systems.


QUICK VPN DEPLOYMENT

Simple VPN Creation

With One-Click VPNs, VPNs can be created with a single operation. By defining VPN communities, organizations can set the security parameters for an entire VPN, including site-to-site and remote access—in one step. By simply defining all Check Point Express end points in a community, VPNs are automatically enabled among all gateways or between a gateway and a remote user. As new sites are added to the community, they automatically inherit the appropriate properties and can immediately establish secure IPSec sessions with the rest of the VPN community.
 

Strongest Levels of Encryption

Beyond ensuring that network access is secure, a security solution must protect the privacy of the data being transmitted. By adhering to the IPSec standard, Check Point Express automatically negotiates the strongest possible encryption and data authentication algorithms available between communicating parties. This includes 128-256 bit Advanced Encryption Standard (AES) and 56-168 bit Triple DES algorithms for data encryption.


ROUND-THE-CLOCK BUSINESS CONTINUITY

Check Point Express is “high-availability ready” to ensure that access to company resources is reliable. Multiple gateways may be deployed in a cluster to guarantee round-the-clock network availability. If the designated primary gateway becomes unreachable, all connections are seamlessly redirected to the remaining cluster members. Also, near-linear performance gains are achieved when additional gateways are added to the cluster.

In addition, high interface availability enables traffic to be routed to a secondary interface or ISP link if the primary interface becomes unavailable. Ongoing connections are maintained during failover. Support for VPN Quality of Service (QoS) Check Point’s FloodGate-1®, an optional module, shapes VPN traffic by assigning priority to business critical applications and users. It delivers optimized performance, enabling customers to migrate business traffic from expensive leased lines to Internet VPNs. Support for VPN Quality of Service (QoS) Check Point’s FloodGate-1, an optional module, shapes VPN traffic by assigning priority to business critical applications and users. It delivers optimized performance, enabling customers to migrate business traffic from expensive leased lines to Internet VPNs.


RANGE OF REMOTE ACCESS OPTIONS

Check Point provides multiple remote access solutions to enable off-site employees to securely connect to company resources.
 

VPN-1 SecuRemote
VPN-1 SecuRemote™, included with Check Point Express, encrypts and authenticates data to protect against eavesdropping and data tampering.

VPN-1 SecureClient
VPN-1 SecureClient™ extends VPN-1 SecuRemote features with a centrally managed personal firewall and advanced management capabilities.

SSL Network Extender
SSL Network Extender™ is an optional add-on for VPN-1 that allows full network-level access over the Web through enhanced SSL VPN capabilities. SSL Network Extender tunnels any IP-based application using a browser Web plug-in.

Microsoft L2TP VPN Clients
For Microsoft users, a VPN-1 gateway can provide secure remote accessing using a Microsoft Windows L2TP VPN client.


 

SIMPLE, CENTRALIZED SMART MANAGEMENT

SmartCenter Express is part of Check Point’s SMART (Security Management Architecture) portfolio of solutions and manages VPN-1 Express gateways. It centrally stores and distributes the security policy to the entire security infrastructure. Maintaining the security policy in a centralized location eliminates the need to maintain each VPN-1 Express gateway individually, thereby reducing administrative burden and errors. Administrators use SmartDashboard™, the simple user interface for SmartCenter Express, to define and manage multiple elements of a security policy: firewall security, VPNs, network address translation, QoS, and VPN client security.


SUPERIOR PERFORMANCE

Check Point supports a range of deployment options to deliver a solution that best fits the performance needs for networks of any size.

• “Secured by Check Point” appliances come with pre-installed Check Point software.

• SecurePlatform, included on the Check Point solution CD, installs a customized, hardened operating system and Check Point software in less than 10 minutes.

• Available on Intel-compatible Windows and Linux servers as well as Sun Solaris servers

See the list of recommended platforms.


Solution Highlights

• Comprehensive security for company resources with market-leading FireWall-1

• Network and application level attack protection with integrated SmartDefense

• HA-ready for better business continuity

• Range of remote access options with VPN-1 SecuRemote, VPN-1 SecureClient, and SSL Network Extender Streamlined, centralized management with SmartCenter

• SMART management for maximum efficiency

• Available on a range of platforms for superior performance

• Application Intelligence and Stateful Inspection, based on INSPECT, the most adaptive and intelligent inspection technology, thwarts application-level attacks

Rex Global Check Point Solutions

Check Point Express for

Mid-sized Business