Check Point VPN-1/FireWall-1 SmallOffice

 

 

Centralized Management Options

To be secure, corporations must enforce a security policy consistently across multiple enforcement points. This requires a management solution that can define an enterprise-wide policy, distribute it, and receive logs all from a central management console. To further maximize management efficiency, the solution must also manage the entire security infrastructure, including corporate firewalls, VPNs, personal firewalls, and Quality of Service (QoS).

• SMART Centralized Management

• SmartCenter and SmartCenter Pro

• Integration with Web-based Management

 

SMART Centralized Management

SMART centralized management solutions enable you to automatically and simultaneously deploy an enterprise-wide policy to an unlimited number of enforcement points. This strengthens enterprise security by ensuring that the security policy is always up-to-date at all network enforcement points.

 

 

These SMART solutions also combine VPN, firewall, Network Address Translation (NAT), personal firewall and Quality of Service (QoS) policy editors into a single integrated application, eliminating the need for multiple management interfaces.
 

[Click for larger image]

 

SmartDashboard, included with SMART centralized management, simplifies management by providing easy access to information.

 

 

SmartCenter and SmartCenter Pro

 

SmartCenter and SmartCenter Pro deliver centralized management, with unparalleled ease of use. SmartCenter includes the following features:

• SmartDashboard for managing VPN, firewall, NAT and more through one user interface

• SmartView Status for monitoring system status of Check Point and select OPSEC products

• SmartView Tracker for viewing, searching and tracking data in log file

 

SmartCenter Pro provides all of the features of SmartCenter plus other capabilities:

• SmartLSM delivers simple management of up to 1000 dynamically addressed gateways

• SmartMap eases management and improves security by providing a graphical map of an organization's security deployment

• SmartUpdate ensures security software is up to date across your network, by automatically distributing Check Point and OPSEC certified applications and application updates

• Account Management Module integrates gateways with OPSEC Certified LDAP-compliant directory servers, to simplify process of security management

• SmartView Monitor enables analyzing VPN performance for maximizing VPN ROI, improving performance and managing network costs

• Management High Availability provides fault tolerance of all management operations

 

Integration with Web-based Management

Sometimes it is convenient for a branch office administrator to setup a security device prior to transferring policy management to a central-site administrator. This is easily achieved through the Web-based Management included with VPN-1/FireWall-1 SmallOffice Web Edition. After setting up the device with Web-based management, a branch office administrator simply slides a virtual switch to transfer security policy management. This enables SmartCenter to automatically push policies to the gateway. If the gateway has a dynamically assigned IP address, as can be the case with DSL and cable modem Internet connectivity, the gateway can be set to automatically fetch policies from SmartCenter.

 

 

 

A branch office administrator transfers policy management responsibility to a central-site systems administrator by sliding a virtual switch to "Join VPN."