us state agency case study.pdf

The state agency is comprised of five divisions and serves all boards and agencies of its state government.

Customer Profile

The agency belongs to one of the largest states in the US with a population of more than 25 million.

Industry

Check Point Solutions

QUICK FACTS

• Check Point Endpoint Security
  • Full Disk Encryption
  • Media Encryption
  • Anti-Malware & Program Control
  • Firewall & Compliance Check
• Check Point Endpoint Security Management

“With Check Point we can proactively determine the update status of everything that’s connected to the server, we know exactly which versions a particular machine is running, whether an individual is behind or not, and automatically restrict them when they get too far out of date—this provides significant savings in terms of time and effort and lets us utilize our resources in other places.”
– Agency spokesperson

“A major value with Check Point is centralized control; it gives us a much higher degree of confidence knowing that our entire endpoint is more secure than it’s ever been.”
– Agency spokesperson

CUSTOMER CHALLENGE

As a state entity, the agency must abide by strict compliance and privacy laws. To ensure optimal data protection, the agency looked to Check Point for the following:

• Consolidation of technologies including encryption, firewall, and anti-malware
• Simplified central management and reporting
• Reduced costs associated with a multi-vendor deployment
• Increased protection through user education

SELECTION PROCESS

Selection Criteria

1. Comprehensive coverage
2. Enhanced support
3. Common management console with a single interface
4. Policy-based controls
5. Small footprint
6. Cost-effective

“We chose Check Point for three reasons, it’s simple to manage, gives us more functionality than competing products, and it’s a real cost-effective solution.”
– Agency spokesperson

THE CHECK POINT SOLUTION Check Point Endpoint Security provides comprehensive coverage with simplified and intuitive management.

Endpoint Security Software Blades Ensures Data Security and Protection from Malware

To safeguard against the loss of intellectual property, comply with HIPPA regulations, and ensure the protection of personally identifiable information, the agency leverages Check Point’s data protection technologies including Full Disk Encryption (FDE) and Media Encryption (ME). “Being able to control removable media as well as lock down all endpoint hard drives has increased our security posture dramatically.” Together, with Anti-Malware & Program Control, Firewall & Compliance Check, and WebCheck, the agency has a complete unified solution that provides better control and increased security protection in a single consolidated package.

3D Security Vision Increases Protection through User Awareness

The Check Point Endpoint security solution enables the agency to identify, set customized messages for various conditions, and drive users to take corrective actions should they be out of compliance, violating agency policy, or a number of other conditions that might arise. “With our previous product many users weren’t even aware they were out of compliance or violating agency policies. With Check Point we’re able to give a very explicit set of customized instructions for security updates, data handling procedures, and compliance policies and block or restrict access based on individual users, groups, or machines.” Check Point’s 3D security vision combines policies, people, and enforcement for stronger protection across all layers of security. This enables the agency to go beyond policies and enforcement and educate its employees on proper security policies and procedures.

Centralized management increases visibility and simplifies reporting

Secure • Reliable • Simple reporting

Leveraging the Check Point Endpoint Security Management console enables the agency to get a clear picture of all its endpoint security functions and deploy consistent policies across nearly 5000 endpoint devices. Using the SmartTracker Software Blade, the agency is able to create custom compliance reports to show virus exposures and how they have been remediated. “Our virus exposure numbers are extremely low at this point. Compared with our previous solution, we’ve been able to cut the number of infected machines by at least by half, mostly due to the reliability and distribution of definitions and the fact that Compliance Check ensures all OS and AV updates are installed and set up correctly.”

CHECK POINT BENEFITS

Security

• Comprehensive solution maintains ability to comply with government privacy and security requirements
• Delivers multi-tiered endpoint threat protection in an integrated package
• Efficiently detects and removes malware from endpoints with a single scan
• FDE ensures that all hard disks are encrypted, keeping all stored data secure and protected

Ease of Management

• Centralized security management enables the agency to set and monitor policies for multiple security needs while conserving resources
• Single management console simplifies administration

Reliability

• “Endpoint software for most users is just plumbing, they don’t want to be aware of it; they just want it to work. Check Point does what it’s supposed to do by significantly lessening the possibility of major work disruption, so most users are never aware of it.”

SUMMARY

Secure • Reliable • Simple

• Check Point Endpoint Security provides a complete unified set of tools to ensure a strong security posture
• Superior protection ensures compliance with government and privacy policies
• Centralized management reduces complexity and ensures optimal configuration and protection against malware

Total Value—Cost Effective Solution

• Simple management ensures distribution of virus definitions and reduces maintenance time
• Superior protection safeguards customer data and instills confidence
• Comprehensive solution offers extensible add-ons resulting in overall investment protection.