NETWORK SECURITY

CHECK POINT NETWORK SECURITY

CHECK POINT INFINITY ARCHITECTURE

NEXT GENERATION THREAT PREVENTION

SECURITY GATEWAYS

SOLUTION

Check Point Infinity is the only fully consolidated cyber security architecture that protects your business and IT infrastructure against Gen VI mega cyberattacks across all networks, endpoint, cloud and mobile.

The architecture is designed to resolve the complexities of growing connectivity and inefficient security. It provides complete threat prevention which seals security gaps, enables automatic, immediate threat intelligence sharing across all security environments, and a unified security management for an utmost efficient security operation. Check Point Infinity delivers unprecedented protection against current and potential attacks — today and in the future.

COMPREHENSIVE THREAT PREVENTION

The rapid growth of malware, growing attacker sophistication and the rise of new unknown zero-day threats requires a different approach to keep enterprise networks and data secure. Check Point delivers fully integrated, comprehensive Threat Prevention to combat these emerging threats while reducing complexities and increasing operational efficiencies. The Check Point Threat Prevention solution includes powerful security features such as firewall, IPS, Anti-Bot, Antivirus, Application Control, and URL Filtering to combat known cyber-attacks and threats — enhanced with the award-winning SandBlast™ Threat Emulation (sandboxing) and Threat Extraction (Content Disarm & Reconstruction) for complete protection against the most sophisticated threats and zero-day vulnerabilities.

PREVENT KNOWN AND ZERO-DAY THREATS

As part of the Check Point SandBlast Zero-Day Protection solution, the cloud-based Threat Emulation engine detects malware at the exploit phase, even before hackers can apply evasion techniques attempting to bypass the sandbox. Files are quickly quarantined and inspected, running in a virtual sandbox to discover malicious behavior before it enters your network. This innovative solution combines cloud-based CPU-level inspection and OS-level sandboxing to prevent infection from the most dangerous exploits, and zero-day and targeted attacks.

Furthermore, SandBlast Threat Extraction removes exploitable content in email and web, including active content and embedded objects, reconstructs files to eliminate potential threats, and promptly delivers sanitized content to users to maintain business flow.

SECURITY GATEWAYS

Check Point provides customers of all sizes with the latest data and network security protection in an integrated next-generation threat prevention platform, reducing complexity and lowering the total cost of ownership. Whether you need next-generation security for your data center, enterprise, small business or home office, Check Point has a solution for you.

QUANTUM MAESTRO

HYPERSCALE SECURITY ORCHESTRATION

OVERVIEW

Check Point Maestro brings scale, agility and elasticity of the cloud on premise with efficient N+1 clustering based on Check Point HyperSync technology, maximizing the capabilities of your existing security gateways. Create your own virtualized private cloud on premise by stacking multiple Check Point security gateways together. Group them by security feature set, policy or the assets they protect and further virtualize them with virtual systems technology.

With the Maestro Hyperscale Orchestrator, businesses of all sizes can have cloud-level security on premise. Add compute to meet your needs using the Maestro Web UI – all while minimizing the risk of downtime and maximizing your cost efficiency.

COST-EFFICIENT N+1 DEPLOYMENT THAT SCALES

Efficient N+1 clustering is now available under one unified system with Check Point Maestro. When a gateway is added to the system, it’s configuration, policy and software version are updated and aligned with the existing deployment. Within 6 minutes the new gateway is an active member, increasing your overall system capacity.

In an example deployment using our 28600HS model, you can start with one gateway that delivers 30 Gbps of threat prevention throughput. Then easily add existing AND new gateways to create a security solution that delivers up to 1 Tbps of threat prevention throughput, simply by using Check Point Maestro. Achieve up to 3 Tbps of firewall with the Lightspeed MLS models.

QUANTUM LIGHTSPEED

OVERVIEW

Enterprises need data center security to perform at the speed of the network to enable the transfer of hundreds of terabytes of data in minutes instead of hours and provide low latency for high frequency financial transactions while scaling on demand to support high growth businesses like online commerce. Check Point Quantum Lightspeed firewalls are custom designed to meet and exceed these requirements at a very competitive price-performance.

Quantum Lightspeed sets the standard in data center firewall security, delivering 20x better security price performance than competing solutions. Quantum Lightspeed hyper-fast firewalls deliver 5 times the security throughput, scale up to 3 Tbps per system in a Maestro Hyperscale solution, and deliver 3 microseconds of ultra-low latency. They also speed processing of 100G elephant flows which are characterized by a large, continuous flow that stays open and occupy a disproportionate share of the total bandwidth of a network link for a long duration.

QUANTUM 28000, 26000

OVERVIEW

Check Point Quantum 26000 and 28000 Security Gateways combine the most comprehensive protections with data center-grade security and hardware to maximize uptime and deliver up to 30 Gbps of threat prevention performance for securing data centers.

The Check Point Quantum 26000 and 28000 Security Gateways are ideal for data center networks that require high performance and flexible I/O options. These are 3U appliances with eight I/O expansion slots for high port capacity, redundant AC power supplies, a 2x 1TB HDD or 2x 480GB SSD RAID1 disk array, and Lights-out Management (LOM) for remote management.

QUANTUM 16000

OVERVIEW

Check Point Quantum 16200 Security Gateways combine the most comprehensive protections with data center-grade security and hardware to maximize uptime and deliver up to 15 Gbps of threat prevention performance for securing large enterprises.

The Check Point Quantum 16200 Security Gateways are ideal for large enterprise networks that require high performance and flexible I/O options. These are 2U appliances with four I/O expansion slots for high port capacity, redundant AC power supplies, a 2x 480GB SSD RAID1 disk array, and Lights-out Management (LOM) for remote management.

QUANTUM 7000

OVERVIEW

Large enterprises have uncompromising needs for performance, uptime and scalability. The 7000 Security Gateways combine the most comprehensive security protections with purpose-built hardware. These powerful security appliances are optimized to deliver threat prevention throughput of up to 9.5 Gbps to secure your most critical assets.

The Check Point 7000 Security Gateways are ideal for enterprise networks that require high performance and flexible I/O options. These are 2U appliances with two I/O expansion slots for high port capacity, redundant AC or DC power supplies, a 2x 480GB SSD RAID1 disk array, and Lights-out Management (LOM) for remote management.

QUANTUM 6000

OVERVIEW

Security decisions no longer have to be a choice between features and performance. The purpose-built Check Point Quantum 6000 Security Gateways provide the advanced threat prevention security without compromise for small to mid-size enterprise networks.

The Quantum 6000 Security Gateways come standard with 10x 1 Gigabit Ethernet ports and support redundant power supplies and Lights-out Management (LOM) in a compact 1U rack mountable form-factor. Supporting up to 17 Gbps of Next Generation Firewall throughput and 7.4 Gbps of threat prevention throughput, these appliances offer best-in-class performance.

QUANTUM 3000

OVERVIEW

Seamless security requires consistent protections across all locations, not just at the main corporate network. The same level of protection is required for remote and branch offices—to form a unified and total defense against potential threats. The Check Point Quantum 3600 and 3800 Security Gateways are an ideal solution for delivering security to small and branch offices.

The Quantum 3600 and 3800 Security Gateways offer enterprise-grade security without compromise in a compact desktop form factor. Multi-core technology, six 1 Gigabit Ethernet ports and advanced threat prevention capabilities easily extends robust security to remote branch locations and small offices. Despite the small form factor, these powerful Gateways provide up to 3 Gbps of Next Generation Firewall throughput and up to 1.5 Gbps of threat prevention throughput.

QUANTUM SPARK 1600, 1800

OVERVIEW

Enforcing consistent network security is challenging for small to mid-size businesses where there are few users with little to no IT expertise. Small to mid-size business offices require the same level of protection from sophisticated cyber-attacks and zero-day threats that is available in larger enterprise offices.

The Check Point Quantum Spark 1600 and 1800 security gateways deliver enterprise-grade security in simple, affordable, all-in-one security solutions in a 1 Rack Unit (RU) form factor to protect small to mid-size business employees, networks and data from cyber-theft. High threat prevention throughput and high port capacity with 2.5 and 10 GbE network interfaces in the 1800 make these NGFWs ideal for larger branch and SMB networks.

QUANTUM SPARK 1500 PRO

OVERVIEW

Enforcing consistent network security throughout an enterprise is challenging when the enterprise border extends to remote and branch offices where there are a few users with little to no IT expertise. Remote and branch offices require the same level of protection from sophisticated cyber-attacks and zero-day threats as main corporate offices. The Check Point Quantum Spark 1500 Pro security gateways are a simple, affordable and easy to deploy all-in-one solution for delivering industry leading security to protect the weakest link in your enterprise network — the remote branch offices.

The Quantum Spark 1500 Pro firewalls are ideal for small offices. For local management and support in a small office environment, an easy and intuitive web-based local management interface is available. Enterprises who want to manage security from a central office can leverage on-premises or cloud-hosted security management to remotely manage and apply a consistent security policy to thousands of devices across the field offices.

QUANTUM RUGGED

OVERVIEW

Protecting critical infrastructure from cyberattacks poses unique challenges. The environments can be harsh, and systems often use specialized protocols. Check Point’s ICS/SCADA cyber security solutions provide advanced threat prevention paired with ruggedized appliance options and comprehensive protocol support to ensure vital assets such as power generation facilities, traffic control systems, water treatment systems and factories are never compromised.

The Quantum Rugged 1570R security gateway complements our extensive appliance family to support a diverse range of deployment environments and meet specialized requirements. For instance, the 1570R complies with industrial specifications such as IEEE 1613 and IEC 61850-3 for heat, vibration and immunity to electromagnetic interference (EMI). In extreme temperatures from -40°C to 75°C where other security gateways would fail, this appliance keeps you secure.

CLOUD SECURITY

The wide adoption of cloud architectures—whether public, private or hybrid—is being driven by the desire to transform businesses for greater efficiency, speed, agility and cost controls. While the cloud offers many advantages over traditional infrastructure it also exposes your company to whole new set of security challenges. Check Point offers a complete public and private cloud security portfolio that seamlessly extends security protections to any cloud environment, so you can feel as confident about the cloud as you do about your physical environment.

PUBLIC CLOUD NETWORK SECURITY

When you move computing resources and data to the public cloud, security responsibilities become shared between you and your cloud service provider. The loss of control in moving applications and data out of the enterprise to a cloud provider —such as Amazon Web Services or Microsoft Azure—and the resulting challenges in monitoring and governing those resources, create a variety of security concerns. This is especially true because of the anonymous, multi-tenant nature of the public cloud. Many companies use hybrid clouds to maintain control of their private cloud infrastructure and protect confidential assets while outsourcing other aspects to public clouds. With the hybrid cloud the new challenge is to protect data as it moves back and forth from the enterprise to a public cloud.

Check Point CloudGuard delivers automated and elastic security to keep assets and data protected while staying aligned to the dynamic needs of public cloud environments.

PRIVATE CLOUD NETWORK SECURITY

As enterprises adopt Software-defined networking and private cloud environments, the increased agility and efficiency has been a boon to the business but has led to dramatic increases in network traffic going east -west within the data center. This shift in traffic patterns introduces new security challenges. With few controls to secure east-west traffic, threats can travel unimpeded once inside the data center.

Check Point CloudGuard delivers dynamic security within virtual datacenters to prevent the lateral spread of threats while consolidating visibility and management across physical and virtual networks.

QUANTUM SMART-1

SECURITY MANAGEMENT IN THE ERA OF BIG DATA

OVERVIEW

Growing networks, disruptive technologies, and the proliferation of interconnected devices demand a new approach to managing security. Check Point Infinity architecture consolidates management of multiple security layers, providing superior policy efficiency and enabling you to manage security through a single pane of glass. The single management centrally correlates all types of events across all network environments, cloud services and mobile infrastructures.

In order to manage the security environment efficiently and effectively, organizations need security management solutions to also be efficient, effective and to process more data faster than ever before. Check Point Quantum Smart-1 Appliances consolidate security management, including logging, event management, and reporting into a single dedicated management appliance. Organizations can now efficiently manage their data and event management requirements across networks, cloud and mobile, gaining centralized visibility into billions of logs, visual indication of risks, and the ability to quickly investigate potential threats.

DDOS PROTECTOR

OVERVIEW

Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are increasing in number, speed and complexity in recent years. These attacks are relatively easy to carry out and can cause serious damage to companies who rely on web services to operate. Many DDoS protection solutions are deployed by an Internet Service Provider, offering generic protections against network layer attacks. However, today’s DDoS attacks have become more sophisticated, launching multiple attacks at network and application layers. Successful DDoS solutions will offer companies the ability to customize their protections to meet changing security needs, fast response time during an attack, and a choice of deployment options.

DDoS Protector Appliances offer flexible deployment options to easily protect any size business, and integrated security management for real-time traffic analysis and threat management intelligence for advanced protection against DDoS attacks.

SANDBLAST APPLIANCES

OVERVIEW

With the increase in sophistication of cyber threats, many targeted attacks begin with exploiting software vulnerabilities in downloaded files and email attachments. These threats include new exploits, or even variants of known exploits unleashed almost daily with no existing signatures and therefore no standard solutions to detect those variants. New and undiscovered threats require new solutions that go beyond signatures of known threats.

Check Point SandBlast Zero-Day Protection, with evasion-resistant malware detection, provides comprehensive protection from even the most dangerous attacks while ensuring quick delivery of safe content to your users. At the core of our solution are two unique capabilities – Threat Emulation and Threat Extraction that take threat defense to the next level.

RECOGNIZED LEADER

When you purchase a Check Point product, rest assured that you are buying a product from a leader in the security industry and a product recognized by leading test and analyst firms.

FIREWALL COMPANY OF THE YEAR AWARD (2023) FROM FROST & SULLIVAN

Check Point received the 2023 Firewall Company of the Year award from Frost & Sullivan, its top honor for Best-in-Class network security. This report and award recognizes Check Point for “visionary innovation, market-leading performance and unmatched customer experience”. Frost & Sullivan states “With Check Point’s sophisticated AI engines, customers can shift from a reactive to a proactive security approach, utilizing a combination of threat intelligence, sandboxing, and automation capabilities to mitigate zero-day exploits.”

HIGHEST SECURITY RANKING IN MIERCOM NGFW TESTING (2023 REPORT)

Miercom, a leading independent network and security testing organization, put the industry’s top four firewalls through a series of intense malware and phishing prevention tests to rate the security efficacy of each product. Check Point Quantum Cyber Security Platform achieved a near perfect score with a 99.7% malware block rate and 99.9% phishing prevention rate in Miercom’s Next Generation Firewall (NGFW) Security Benchmark 2023 report. The average malware block rate for tested competitors was 54.1%.