Check Point Smart-1 Cloud Security Management Datasheet

SMART-1 CLOUD SECURITY MANAGEMENT DELIVERED FROM THE CLOUD

Check Point Security Management sets the standard for reliability and ease-of-use in security management. From policies and operations to people and technology, consolidate all aspects of your security environment seamlessly so you can deploy the strongest protections across your organization effectively and efficiently - without impeding business innovation.

SECURITY MANAGEMENT CLOUD PLATFORM

Always Up to Date

Check Point Smart-1 Cloud is Check Point security management delivered as a cloud service. Smart-1 Cloud provides security policy management of on-premises and laaS security gateways, security event analytics and reporting from a single user-friendly web-based SmartConsole. Because it’s delivered as a Software-as-a-Service (SaaS), ramp-up time changes from hours to minutes when compared with on-premises deployments. Check Point provides the infrastructure and the software so installation, deployment and maintenance times are eliminated — and you get the latest software from Check Point.

With security management delivered as a cloud service, businesses benefit from the elasticity and scalability available in cloud services. Smart-1 Cloud includes ample disk space for you to store your logs in the cloud for as long as you need them. As you grow and add additional managed security gateways, extend your security events log storage space as needed.

On-demand Expansion

Check Point provides the infrastructure and the software and provides secure multi-factor authentication access to the service. You own your security policy and security event data. Logs and networking data of the connected security gateways will be shared with Check Point Smart-1 Cloud and processed in accordance with Check Point's Privacy Policy.

Zero Maintenance

Lower the complexity of managing your security

When it comes to security management, Check Point has a solution. From zero-touch gateway provisioning to security policy management to threat visibility and analytics to compliance and reporting to large scale multi-domain management to central deployment of software updates to codifying security management using RESTful APIs – Check Point has you covered.

With one console, security teams can manage all aspects of security from policy to threat prevention – across the entire organization – on both physical and virtual environments. Consolidated management means increased operational efficiency.

One Console to Manage Them All

Unified Policy

In addition to a unified console, a unified access control policy for users, applications, data and networks simplifies policy management.

Check Point’s next generation policy makes it extremely easy to segment policy into manageable sections with inline shared policies. Create rules in sub-policies aligned to specific business functions like control of safe Internet use. Then share it across teams, ensuring consistency.

Work without conflict. Check Point’s security management software is recognized for superior access control and policy organized in layers and sub-layers. Session-based object locking enables multiple administrators to work simultaneously on the same rule base. Smart-1 Cloud provides two access or permission levels: administrator and read-only.

Collaboration

Work without conflict. Check Point’s security management software is recognized for superior access control and policy organized.

With too much work and too little staff, security teams need to work smarter. Leverage security management APIs to automate routine and repetitive tasks.

Threat Management

Threat Management is fully integrated, with logging, monitoring, event correlation and reporting in one place. Visual dashboards provide full visibility into security across the network, helping you monitor the status of your enforcement points and stay alert to potential threats.

Zero-touch Deployment

An intuitive web-based user interface enables large enterprises to provision security efficiently. Apply a template describing device configuration settings to your inventory of new security gateways. When powered on, Check Point gateways get their configuration from the cloud and are ready for a security policy.


Lower your Startup Time, Costs, Maintenance….

Smart-1 Cloud answers the evolving needs of enterprise security management today. Businesses are up to date with the latest security and are able to manage the latest threats across devices and workloads via a single management console. Security management delivered from the cloud scales as environments grow without having to worry about limited physical storage space or log storage capacity. With Smart-1 Cloud, organizations save time on startup, infrastructure and maintenance costs.

In minutes, have the latest Security Management release with the full functionality running as a service and have all your gateways connected. Connecting a gateway is easy. Create an HTTPS tunnel from the gateway to the service using a unique authentication key. Once the gateway object is created, all that is left is to initiate the Secure Internal Communication (SIC). Then focus on managing your organization's security and analyzing the logs and events.

Always the Latest Security Management

Security is a process. As threats evolve, so do the security processes and technologies designed to address these threats. This includes security and threat management. New releases include new capabilities and new tools like threat analytics for improved threat visibility. With cloud delivered security management, organizations don’t have to worry about finding a change window to update the security management server to the latest new software release.

Like other Software-as-a-Service models, Smart-1 Cloud is available for a yearly subscription. Start with management for 5 gateways with 200 GB of log storage to store up to 5 GB of logs per day. As your business grows and you add additional gateways, you get 50 GB of additional log storage to store up to 1 GB of logs per day. Easily expand on-demand, adding more gateways and storage as you see fit.

Zero Maintenance

Check Point maintains the infrastructure and software, eliminating the need to plot your windows of maintenance, run testing, and then roll out an upgrade campaign to all selected candidates to get them up to date. Today, with Smart-1 Cloud, this is automatically updated for you. In addition, we perform daily backups and monitor systems and disk space for any issues.


SMART-1 CLOUD USE CASES

Smart-1 Cloud On-boarding, the Fastest On-ramp to Check Point Security Management

Smart-1 Cloud is an ideal platform for anyone interested in quickly provisioning a Check Point security management server. When compared with an on-premises or CloudGuard IaaS deployment, the ramp-up process is simpler and the ramp-up time is much quicker. Smart-1 Cloud deployments do not require expertise in specifying a hardware platform meeting the recommended system requirements. Likewise, users do not need to have the cloud expertise to provision one of Check Point’s public or private cloud CloudGuard IaaS offerings.

Additionally, with the web-based SmartConsole in Smart-1 Cloud, there’s no need for an additional Windows host to run the SmartConsole GUI client.

Simply register at the Check Point Infinity Portal, the portal to all of Check Point’s SaaS offerings, and you have 30 days to trial Smart-1 Cloud. The free trial includes the full Smart-1 Cloud feature set. When ready, purchase a 30 day or yearly Starter Pack.

Startups and Small Enterprises

In companies where employees wear many hats, Smart-1 Cloud is an option. IT staff at these companies may not have the time to acquire and provision new hardware or software. Smart-1 Cloud, with its fast ramp-up time, no maintenance, always up to date security and scalability may be the ideal solution. If the company is geographically distributed and doesn’t require sharing objects and rules, admins at the different locations can have their own tenant or domain. Customers can have multiple environments on the same Infinity Portal account and registered under the same email address.

If you started your Check Point journey with one NGFW with security management and are now adding additional gateways to better segment your network or protect additional remote offices or virtual gateways, then Smart-1 Cloud is an option. In the distributed deployment model, security management runs on its own separate system, freeing the standalone gateway to handle more traffic and additional security features. Additionally, central management of more than one gateway results in linear OPEX savings for each additional gateway added.

Refreshing an Existing Security Management Server or Adding HA Management

Maybe you have an existing management server and it’s time to consider adding more capacity or you want to add an additional HA (Highly Available) management server to reduce your risk. Smart-1 Cloud is an option. When you’re ready to migrate to Smart-1 Cloud, we offer a Migration Tool to save time and facilitate the migration process. Run the export tool on your existing management server and then import the configuration into Smart-1 Cloud.

The Managed Security Service Provider (MSSP) Solution

Smart-1 Cloud is highly available. You may be familiar with the existing Check Point management HA functionality which syncs objects and policy to a backup server so that backup server is ready if and when the primary server goes offline. Smart-1 cloud does not offer full HA functionality, but with an SLA of three nines (99.9%) is highly available. In addition, Smart-1 Cloud is backed up every 12 hours. If you need to revert to a backup, this is available by contacting our support staff.


ORDERING SMART-1 CLOUD

Manage One Enterprise Gateway or 5 SMB (Gaia Embedded) Gateways

Management Management with SmartEvent Smart-1 Cloud Plus
One Year SKU CPSM-CLOUD-GW-1Y CPSM-CLOUD-GW-SME-1Y CPSM-CLOUD-GW-SME-COMP-1Y
One Month SKU CPSM-CLOUD-GW-1M CPSM-CLOUD-GW-SME-1M CPSM-CLOUD-GW-SME-COMP-1M
5 SMB (Gaia Embedded) Gateway SKU CPSM-CLOUD-5-SMB-GW-1Y CPSM-CLOUD-5-SMB-GW-SME-1Y CPSM-CLOUD-5-SMB-GW-SME-COMP-1Y
Number of Managed Gateways 1 enterprise or 5 SMB (Gaia Embedded) 1 enterprise or 5 SMB (Gaia Embedded) 1 enterprise or 5 SMB (Gaia Embedded)
Log Retention 3 Months 3 Months 3 Months
Daily Logs up to 1 GB up to 3 GB up to 3 GB
Compliance, SmartEvent Options - SmartEvent SmartEvent and Compliance

Note: 2 and 3 year SKUs are available in the online product catalog. Manage up to 400 enterprise or SMB (Gaia Embedded) gateways in a single Smart-1 Cloud environment. Add more environments as needed.

Manage 5 Enterprise Gateways

Management Management with SmartEvent Smart-1 Cloud Plus
One Year SKU CPSM-CLOUD-5-GW-1Y CPSM-CLOUD-5-GW-SME-1Y CPSM-CLOUD-5-GW-SME-COMP-1Y
One Month SKU CPSM-CLOUD-5-GW-1M CPSM-CLOUD-5-GW-SME-1M CPSM-CLOUD-5-GW-SME-COMP-1M
Number of Managed Gateways 5 enterprise 5 enterprise 5 enterprise
Log Retention 3 Months 3 Months 3 Months
Daily Logs up to 5 GB up to 15 GB up to 15 GB
Compliance, SmartEvent Options - SmartEvent SmartEvent and Compliance

Note: 2 and 3 year SKUs are available in the online product catalog. In the 3Y SKUs, SmartEvent and Compliance are included for the 1st year. Manage up to 400 gateways in a single Smart-1 Cloud environment. Add more environments as needed.

Extending Smart-1 Cloud

Additional Storage SKU
Cloud Events Retention Extension of 10GB to 6 months. Priced per year. Base package needs to match total extension ingestion. Extending the retention from 90 days to 6 months. Each retention pack is valid for 10 GB/day CPSM-EVENTS-EXT-RET6M-1Y
Cloud Events Retention Extension of 10GB to 12m. Priced per year. Base package required and needs to match total extension ingestion. Extending the retention from 90 days to 1 year. Each retention pack provides 10 GB/day. CPSM-EVENTS-EXT-RET12M-1Y
Performance Events with 500GB daily quota with 3 months retention, priced per year CPSM-EVENTS-PERFORMANCE-RET3M-1Y
Premium Events with 50GB daily quota with 3 months retention, priced per year CPSM-EVENTS-PREMIUM-RET3M-1Y
Essential Events with 10GB daily quota with 3 months retention, priced per year CPSM-EVENTS-ESSENTIAL-RET3M-1Y

Log Exporter - 1GB per Day for 1 Year.

Note: 1 Month, 2 and 3 year SKUs are available in the online product catalog.