Home > Rex Global Solutions > Check Point Solutions > Check Point VPN-1 Pro

 

Check Point VPN-1 PRO

 

Integrated Security


Check Point VPN-1 Pro integrates access control, authentication, and encryption to guarantee the security of network connections, the authenticity of local and remote users, and the privacy and integrity of data communications. VPN-1 Pro supports both site-to-site and, along with VPN-1 SecuRemote/SecureClient, remote access VPN solutions.

  • FireWall-1 Integration

  • Flexible Authentication

  • Strong Encryption

  • OpenPKI Support

FireWall-1 Integration


For effective enterprise security and efficient administration, VPNs must include integrated firewall capabilities. To this end, VPN-1 Pro includes the market-leading FireWall-1 to secure all popular Internet services with Check Point's patented Stateful Inspection technology. VPN-1 Pro supports more than 150 pre-defined applications, services, and protocols out of the box, as well as important business applications such as Oracle SQL, multimedia applications such as RealAudio, and multimedia services such as H.323.
 


Flexible Authentication


For maximum security and flexibility, VPN-1 Pro provides integrated support for multiple user authentication methods. Mobile VPN users can be authenticated using smart cards, token-based products like SecurID, LDAP-stored passwords, RADIUS or TACACS+ servers, pre-shared secrets, X.509 digital certificates, or even advanced biometric techniques.

With Check Point's unique Hybrid Mode Authentication, VPN-1 Pro provides additional flexibility by enabling organizations to utilize any FireWall-1 supported authentication method in conjunction with IPSec VPN deployments.

 


Strong Encryption


Beyond ensuring that network access is secure, a VPN solution must protect the privacy of the data being transmitted. By adhering to the IPSec standard, VPN-1 Pro automatically negotiates the strongest possible encryption and data authentication algorithms available between communicating parties. This includes the new Advanced Encryption Standard (AES) Rijndael and Triple DES algorithms for data encryption.


 

Encryption Algorithm

Key Length

Rijndael (Advanced Encryption Standard - AES) *

128- and 256-bit

Triple DES*

168-bit

DES

56-bit

DES-40*

40-bit

CAST-40*

40-bit

User Authentication

X.509 Digital Certificates

Pre-shared Secret

Hybrid Mode IKE *

RADIUS

TACACS/TACACS+

Token-based (two-factor)

Operating System Password

FireWall-1 Password

S/Key

Public Key Algorithms

Key Length

RSA

512- to 1536-bit*

Diffie-Hellman

512- to 1536-bit*

Key Management

IKE (ISAKMP/Oakley)


 


OpenPKI Support


Public Key Infrastructures provide the necessary management infrastructure for large IPSec VPN deployments by enabling the use and management of keys and digital certificates. VPN-1's OpenPKI support allows customers to choose the PKI solution that best fits their needs. OpenPKI ensures that VPN-1 products are compatible with leading PKI solutions from vendors such as Entrust, Verisign, Baltimore Technologies, and iPlanet, which are certified as part of Check Point's OPSEC (Open Platform for Security) Alliance. VPN-1 solutions also support industry standards such as X.509, PKCS #11 and PKCS #12, to ensure the highest levels of security and interoperability as organizations expand their networks through remote access and extranet VPNs.


 

 

 

RGC Check Point Solutions

 

Check Point VPN-1 Home

 

VPN-1 Pro - Details

© 1996-2010 REX GLOBAL CORPORATION

All Rights Reserved