The Industry's Most Proven Perimeter Security

FireWall-1, the industry's leading firewall, delivers comprehensive and highly-scalable attack protection and network security. Using INSPECT, the most adaptive and intelligent inspection technology, FireWall-1 integrates both network-level and application-level protection to provide the highest level of security, with access control, attack defenses, content security, authentication, and integrated Network Address Translation (NAT). FireWall-1 is integrated into the VPN-1 family of products and managed by Check Point's leading SMART management architecture.

 

Discover the Check Point Difference
Application Intelligence Protection Stateful Inspection Access Control Industry Leading Management Integrated into Check Point VPN-1

 

YOUR CHALLENGE

Internet technology has led many companies to redefine the way they communicate with customers, work with partners and sell products. As your company embraces the Internet to forge new business models, Internet security and network reliability becomes increasingly important. To maintain the trust of partners and customers, you must ensure that critical data, applications, servers and networks are secure from increasingly sophisticated Internet-based attacks.
 

OUR SOLUTION

Check Point FireWall-1® is the only security gateway solution that delivers comprehensive attack protection and network security. Using INSPECT, the most adaptive and intelligent inspection technology, FireWall-1 integrates both network-level and application-level protection. As the industry’s leading Internet security solution, Check Point FireWall-1 provides the highest level of security, with access control, attack protection, content security, authentication, and integrated Network Address Translation (NAT). FireWall-1 leverages SMART Management, enabling you to intelligently manage security infrastructure with maximum efficiency.

In addition, complementary Open Platform for Security (OPSEC™) certified products provide an unparalleled breadth of options for extending protection with best-of-breed third-party applications.


 

[click for larger image]
 

 

UNPARALLELED PROTECTION

FireWall-1 secures 93% of the global Fortune 100 and over 91% of global Fortune 500 financial institutions. Only Check Point, which invented Stateful Inspection, provides true Stateful Inspection that can track the state and context of all communications, for truly complete network protection.
 

Broad Application Support

With support for over 150 pre-defined applications and protocols out-of-the-box, FireWall-1 provides the broadest application support in the industry. Examples:

• Microsoft CIFS

• SMTP, FTP, HTTP, DNS and telnet traffic

• SOAP/XML

• Instant Messaging and Peer-to-Peer Applications

• Windows Media, RealVideo and Session Initiation Protocol (SIP)

• H.323-based services, including Voice over IP (VoIP) and NetMeeting

• Oracle SQL and ERP

FireWall-1 continues to lead the industry by evolving to support new business needs. As the first firewall to support Microsoft CIFS, FireWall-1 provides granular access control to file and print servers, enabling you to secure them from unauthorized usage. With FireWall-1, you can restrict who can browse or publish documents to a specific server. The first enterprise firewall to inspect SOAP/XML, and capable of terminating SSL connections, FireWall-1 eliminates the requirement to deploy a separate infrastructure to secure Web Services.

Continuous innovation means FireWall-1 delivers the highest level of security to your organization. FireWall-1, inspects Web applications such as Instant Messaging and peer-to-peer applications even when they are running on commonly used ports. Truly the basis for a security infrastructure, you can extend Web application and CIFS security to include single sign-on with an optional UserAuthority Module.
 

Protection Against Network and Application Threats

In today’s environment, centralized protection from known and new threats is increasingly important. FireWall-1 includes SmartDefense™ and Application Intelligence capabilities to protect your company against all types of network and application-level attacks. For example, SmartDefense automatically blocks and logs oversized packets, SYN floods and fragmentation attacks. It also defends against such well-known attacks as Nimda, Code Red and Cross Site Scripting. Real-time attack information and protection updates through the online Check Point SmartDefense attack center are optionally available.
 

Granular Content Security

With Application Intelligence, FireWall-1 enables you to control access to specific HTTP, SMTP or FTP resources based on source, destination, user privilege and time of day. FireWall-1 SmartDefense technology provides application-level inspection to protect data and application servers from malicious Java and ActiveX applets. You can add anti-virus screening, URL filtering and Java security from a broad selection of OPSEC Certified products.
 

Flexible Authentication

Before granting access to sensitive network resources, organizations must validate user identity. With FireWall-1, numerous authentication solutions can be integrated into a security policy, including FireWall-1 and LDAP-stored passwords, token-based products, RADIUS, TACACS+ and X.509 digital certificates.
 

Integrated Network Address Translation

FireWall-1 provides NAT to conceal internal network addresses. Integrated with Stateful Inspection technology, FireWall-1 automatically generates static and dynamic NAT rules based on network topology information.


SMART MANAGEMENT

Check Point Security Management Architecture (SMART) solutions enable you to centrally manage and deploy a single firewall policy to an unlimited number of FireWall-1 gateways. Once a policy is created or modified, it is automatically distributed to all locations.
 

SMART User Interface

SmartDashboard™, included with centralized SMART management solutions, simplifies management by providing a single user interface for creating and deploying policies for multiple Check Point products. This enables you to manage FireWall-1 and NAT policies as part of an overall security policy that includes VPNs, client security and QoS management. All object definitions, including those for users, hosts, networks and services, are shared among all applications for efficient policy creation and security management.
 

SMART Status & Auditing

SmartView Status™ and SmartView Tracker™ are included with centralized SMART management solutions. SmartView Status enables monitoring system status of FireWall-1 as well as other Check Point and select OPSEC products.

SmartView Tracker provides real-time graphical tracking, monitoring and accounting information for all connections logged by FireWall-1 gateways. It also logs administrator actions for quick troubleshooting of configuration errors. In addition, administrators can use SmartView Tracker to search or filter logs to quickly locate or track events.


WIRE-SPEED SECURITY

FireWall-1 delivers market-leading price/performance to offices of all sizes with patented SecureXL technology. SecureXL-enabled solutions are available in a variety of form factors to meet your deployment needs, including SecureXL-enabled appliances, optional firewall and VPN acceleration cards and an optional Performance Pack software module. In addition, for environments where congestion on the Internet link is a possibility, an optional FloodGate-1® module provides flexible quality of service management. FloodGate-1, which can run on the FireWall-1 gateway, ensures optimal performance for business critical traffic, such as VPN, database and Web services traffic. FloodGate-1 also provides low latency queuing for additional control of VoIP and multimedia traffic.
 

SECUREVPN

FireWall-1 is included with Check Point’s industry-leading Virtual Private Network solution, VPN-1® Pro™. With Check Point VPN-1/FireWall-1, security rules are applied to VPN traffic to guarantee complete integrity of network security. FireWall-1 installations can easily be upgraded to VPN-1.

 

[click for larger image]

SmartDashboard simplifies security by making all

necessary information readily accessible.

 

SmartDashboard simplifies security by making all necessary information readily accessible. Optional SmartMap module provides a detailed, graphical map of the security deployment Objects list provides easy access to the most commonly used objects Rule base manages Firewall, NAT, QoS, Desktop Security and Web Access policies Objects tree contains all objects — for users, hosts, networks and more.


SECURECHOICE

Corporations can deploy FireWall-1 on Internet and internal network gateways, or deploy FireWall-1 SecureServer™ on a single host to protect a critical application server. FireWall-1 is supported on a broad range of deployment platforms — meeting the price/performance requirements of any size organization:

• Turnkey “Secured by Check Point” appliances with pre-installed Check Point software

• Windows, Solaris and Linux servers

• SecurePlatform™, included on the standard Check Point product CD, installs a customized, hardened operating system and FireWall-1 on open servers in under 10 minutes