Check Point and Algosec Solution Brief

CHECK POINT + ALGOSEC

BUSINESS DRIVEN SECURITY MANAGEMENT

Today’s business environment is continuously changing as business needs rapidly evolve across various organizational functions of companies. In this dynamic environment, IT often struggles to gain adequate visibility and control, while ensuring security policies are in compliance with regulatory guidelines. Effective security policy management that accommodates the dynamic nature of today’s organizations is a key challenge for many IT departments.

BENEFITS

SOLUTION

AlgoSec and Check Point have partnered to provide joint customers with simplified, automated and controlled security policy management for Check Point physical, virtual and cloud devices. AlgoSec seamlessly integrates with Check Point devices to support the entire security policy management lifecycle — from the discovery of application connectivity to ongoing maintenance and compliance. AlgoSec enables enterprises to reduce complexity, risks, costs and time spent on manual operations while ensuring continuous security and agility.

The Check Point and AlgoSec integration provides:

UNIFIED MANAGEMENT FOR THE HYBRID ENVIRONMENT

Check Point cloud security protects assets in the cloud from sophisticated threats with dynamic scalability, intelligent provisioning and consistent control across physical and virtual networks. Check Point’s management layer supports delegated authority and multiple, simultaneous user sessions with full administration auditing. AlgoSec seamlessly integrates with Check Point APIs, providing change management, network visualization and traffic simulations, policy optimization and risk analysis, auditing, and compliance reporting for Check Point devices deployed in enterprises as well as in public and private clouds.

APPLICATION CONNECTIVITY MANAGEMENT

AlgoSec automatically discovers and maps application connectivity requirements to the underlying network infrastructure and translates vague requests for connectivity changes into networking terms that security and operations teams can understand, approve and implement. With AlgoSec, organizations can accelerate application delivery, minimize outages, and enforce security and compliance across the data center.

SECURITY POLICY CHANGE MANAGEMENT

Using intelligent, highly customizable workflows, AlgoSec automates the entire security policy change process — from planning and design through submission, proactive risk analysis, implementation, validation and auditing. With AlgoSec, you can avoid guesswork and manual errors, reduce risk, and enforce compliance.

History No. Name Layer Type Layer Name Global Status Source Destination VPN Services & Applications Action Track
Network - Pre (Ordered Layer # 1)
1 Ordered Network Pre Enabled gHost1 gHost2 Any sshssh_version_2 Drop None
2 Parent rule for Domain's policy Ordered Network Pre Enabled Any Any Any Any VSXBorscht_VSX Network None
VSXBorscht_VSX Network - Domain (Ordered Layer # 1)
Section Header Test#1 (2.1-2.4)
2.1 e70a7294-346d-4144-9354-705849649e4a Ordered VSXBorscht_VSX Network Domain Enabled afa1_64LNet10_20LNet192_168 Any Any Any Accept Log
2.2 Ordered VSXBorscht_VSX Network Domain Enabled Any gHost2 All_GwToGw Any Drop Log
2.3 Test1210 Ordered VSXBorscht_VSX Network Domain Enabled Any VSXBorscht Any snmp Accept None
2.4 Ordered VSXBorscht_VSX Network Domain Enabled Any VSXBorscht Any ssh Accept None
Section Header Test#2 (2.5-2.7)
2.5 Ordered VSXBorscht_VSX Network Domain Enabled Any VSXBorscht Any echo-request Accept None
2.6 Ordered VSXBorscht_VSX Network Domain Enabled Any VSXBorscht Any echo-request6 Accept None
2.7 Ordered VSXBorscht_VSX Network Domain Enabled Any VSXBorscht Any https Accept None
Network - Post (Ordered Layer # 1)
3 Cleanup rule Ordered Network Post Enabled Any Any Any Any Drop Log
G_Appl - Pre (Ordered Layer # 2)
1 Ordered G_Appl Pre Enabled Any Any Any Any FacebookFacebook Apps Drop Log
2 Ordered G_Appl Pre Enabled Any Any Any Any Webkinz Drop Log

FIREWALL POLICY OPTIMIZATION

Check Point makes policy management easy. Policy rule hit counts and logs show how your policy is used. SmartConsole Object Explorer shows unused objects and makes object replacement easy. Extend these policy optimization features with AlgoSec actionable recommendations to help you clean up and reduce risk across your environment. AlgoSec also uncovers unused or duplicate rules across heterogeneous networks, initiates a recertification process for expired rules, provides recommendations on how to consolidate or reorder rules for better performance, and tightens overly permissive "ANY" rules — without impacting business requirements.

IN SUMMARY

Check Point threat prevention technologies, such as application control, URL filtering, IPS, antivirus, anti-bot and sandboxing, secure organizations from unknown and Zero-day threats. Check Point unified security and event management for network, cloud, endpoint and mobile devices gives visibility into threats attacking your infrastructure. AlgoSec extends this network visibility to cover your entire security estate with proactive risk analysis, ties cyber-attacks to business processes, and intelligently automates network security changes with zero touch provisioning. By leveraging Check Point’s top-of-class security protection and AlgoSec’s business-driven security management solutions, joint customers are more agile, secure and compliant.

ABOUT CHECK POINT

Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber-attacks with an industry leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and mobile device held information, plus the most comprehensive and intuitive one point of control security management system. Check Point protects over 100,000 organizations of all sizes.

ABOUT ALGOSEC

AlgoSec enables the world’s largest and most complex organizations to manage security based on what matters most – the applications that power their business. Over 1,800 of the world’s leading organizations, including 20 of the Fortune 50, have relied on AlgoSec to automate and orchestrate network security policy management across cloud and on premises networks, to drive business agility, security and compliance. Learn more at www.algosec.com.