Check Point and Algosec Solution Brief
CHECK POINT + ALGOSEC
BUSINESS DRIVEN SECURITY MANAGEMENT
Today’s business environment is continuously changing as business needs rapidly evolve across various organizational functions of companies. In this dynamic environment, IT often struggles to gain adequate visibility and control, while ensuring security policies are in compliance with regulatory guidelines. Effective security policy management that accommodates the dynamic nature of today’s organizations is a key challenge for many IT departments.
BENEFITS
- A broad, automated and integrated Security Protection
- A single pane of glass view across next generation and traditional firewalls – on premises and in the cloud
- Policy change management – avoiding guesswork and misconfigurations
- Easily customize policy change workflow to align with business needs
- Translate business requirements into network connectivity needs
- Policy changes are automatically implemented on the required device
- Out-of-the-box regulatory compliance reports reduce preparation time and costs by up to 80%
SOLUTION
AlgoSec and Check Point have partnered to provide joint customers with simplified, automated and controlled security policy management for Check Point physical, virtual and cloud devices. AlgoSec seamlessly integrates with Check Point devices to support the entire security policy management lifecycle — from the discovery of application connectivity to ongoing maintenance and compliance. AlgoSec enables enterprises to reduce complexity, risks, costs and time spent on manual operations while ensuring continuous security and agility.
The Check Point and AlgoSec integration provides:
- Support for R80.x, including policy analysis, migration and change management.
- Support for hybrid environments that include on premises firewalls and CloudGuard public and private cloud firewalls.
- Automated firewall change management, including zero-touch policy push to Check Point security gateways.
- Out-of-the-box regulatory compliance reports (PCI DSS, SOX, HIPAA, and many more).
- Risk assessment and optimization of Check Point policies.
- Full support for Data Center objects.
UNIFIED MANAGEMENT FOR THE HYBRID ENVIRONMENT
Check Point cloud security protects assets in the cloud from sophisticated threats with dynamic scalability, intelligent provisioning and consistent control across physical and virtual networks. Check Point’s management layer supports delegated authority and multiple, simultaneous user sessions with full administration auditing. AlgoSec seamlessly integrates with Check Point APIs, providing change management, network visualization and traffic simulations, policy optimization and risk analysis, auditing, and compliance reporting for Check Point devices deployed in enterprises as well as in public and private clouds.
APPLICATION CONNECTIVITY MANAGEMENT
AlgoSec automatically discovers and maps application connectivity requirements to the underlying network infrastructure and translates vague requests for connectivity changes into networking terms that security and operations teams can understand, approve and implement. With AlgoSec, organizations can accelerate application delivery, minimize outages, and enforce security and compliance across the data center.
SECURITY POLICY CHANGE MANAGEMENT
Using intelligent, highly customizable workflows, AlgoSec automates the entire security policy change process — from planning and design through submission, proactive risk analysis, implementation, validation and auditing. With AlgoSec, you can avoid guesswork and manual errors, reduce risk, and enforce compliance.
| History | No. | Name | Layer Type | Layer Name | Global | Status | Source | Destination | VPN | Services & Applications | Action | Track |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Network - Pre (Ordered Layer # 1) | ||||||||||||
| 1 | Ordered | Network | Pre | Enabled | gHost1 | gHost2 | Any | sshssh_version_2 | Drop | None | ||
| 2 | Parent rule for Domain's policy | Ordered | Network | Pre | Enabled | Any | Any | Any | Any | VSXBorscht_VSX Network | None | |
| VSXBorscht_VSX Network - Domain (Ordered Layer # 1) | ||||||||||||
| Section Header Test#1 (2.1-2.4) | ||||||||||||
| 2.1 | e70a7294-346d-4144-9354-705849649e4a | Ordered | VSXBorscht_VSX Network | Domain | Enabled | afa1_64LNet10_20LNet192_168 | Any | Any | Any | Accept | Log | |
| 2.2 | Ordered | VSXBorscht_VSX Network | Domain | Enabled | Any | gHost2 | All_GwToGw | Any | Drop | Log | ||
| 2.3 | Test1210 | Ordered | VSXBorscht_VSX Network | Domain | Enabled | Any | VSXBorscht | Any | snmp | Accept | None | |
| 2.4 | Ordered | VSXBorscht_VSX Network | Domain | Enabled | Any | VSXBorscht | Any | ssh | Accept | None | ||
| Section Header Test#2 (2.5-2.7) | ||||||||||||
| 2.5 | Ordered | VSXBorscht_VSX Network | Domain | Enabled | Any | VSXBorscht | Any | echo-request | Accept | None | ||
| 2.6 | Ordered | VSXBorscht_VSX Network | Domain | Enabled | Any | VSXBorscht | Any | echo-request6 | Accept | None | ||
| 2.7 | Ordered | VSXBorscht_VSX Network | Domain | Enabled | Any | VSXBorscht | Any | https | Accept | None | ||
| Network - Post (Ordered Layer # 1) | ||||||||||||
| 3 | Cleanup rule | Ordered | Network | Post | Enabled | Any | Any | Any | Any | Drop | Log | |
| G_Appl - Pre (Ordered Layer # 2) | ||||||||||||
| 1 | Ordered | G_Appl | Pre | Enabled | Any | Any | Any | Any | FacebookFacebook Apps | Drop | Log | |
| 2 | Ordered | G_Appl | Pre | Enabled | Any | Any | Any | Any | Webkinz | Drop | Log |
FIREWALL POLICY OPTIMIZATION
Check Point makes policy management easy. Policy rule hit counts and logs show how your policy is used. SmartConsole Object Explorer shows unused objects and makes object replacement easy. Extend these policy optimization features with AlgoSec actionable recommendations to help you clean up and reduce risk across your environment. AlgoSec also uncovers unused or duplicate rules across heterogeneous networks, initiates a recertification process for expired rules, provides recommendations on how to consolidate or reorder rules for better performance, and tightens overly permissive "ANY" rules — without impacting business requirements.
IN SUMMARY
Check Point threat prevention technologies, such as application control, URL filtering, IPS, antivirus, anti-bot and sandboxing, secure organizations from unknown and Zero-day threats. Check Point unified security and event management for network, cloud, endpoint and mobile devices gives visibility into threats attacking your infrastructure. AlgoSec extends this network visibility to cover your entire security estate with proactive risk analysis, ties cyber-attacks to business processes, and intelligently automates network security changes with zero touch provisioning. By leveraging Check Point’s top-of-class security protection and AlgoSec’s business-driven security management solutions, joint customers are more agile, secure and compliant.
ABOUT CHECK POINT
Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber-attacks with an industry leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and mobile device held information, plus the most comprehensive and intuitive one point of control security management system. Check Point protects over 100,000 organizations of all sizes.
ABOUT ALGOSEC
AlgoSec enables the world’s largest and most complex organizations to manage security based on what matters most – the applications that power their business. Over 1,800 of the world’s leading organizations, including 20 of the Fortune 50, have relied on AlgoSec to automate and orchestrate network security policy management across cloud and on premises networks, to drive business agility, security and compliance. Learn more at www.algosec.com.