Call a Specialist Today! 888-785-4407

Check Point IPS Software Blade
Delivers complete and proactive intrusion prevention

Check Point IPS Software Blade

The Check Point Intrusion Prevention System (IPS) Software Blade combines industry-leading IPS protection with breakthrough performance at a lower cost than traditional, stand-alone IPS solutions. The IPS Software Blade delivers complete and proactive intrusion prevention—all with the deployment and management advantages of a unified and extensible next-generation firewall solution.


Check Point Check Point Security Gateway Blades
Check Point Security Gateway Blades, 1 Year
Check Point IPS Blade for low-end gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-1Y
List Price: $1,500.00
Our Price: $1,208.00
Check Point IPS Blade for mid range gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-1Y
List Price: $3,300.00
Our Price: $2,657.00
Check Point IPS Blade for high-end gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-1Y
List Price: $5,000.00
Our Price: $4,025.00
Check Point IPS Blade for ultra high-end gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-1Y
List Price: $6,000.00
Our Price: $4,830.00

Click here to jump to more pricing!

Benefits:

Next-generation security prevention, protection and performance

  • Industry-leading IPS and firewall—as tested NSS Labs—delivers 1,000s of signature, behavioral and preemptive protections
  • Check Point is ranked #1 in Microsoft and Adobe threat coverage
  • Combines with best-of-breed firewall, application control, URL filtering, DLP and more on the most comprehensive, network-class next gen firewall

Unrivaled, multi-Gigabit performance in an integrated IPS

  • Up to 15 Gbps of IPS and 30 Gbps of firewall throughput
  • Stateful Inspection and SecureXL technology deliver multi-tier IPS inspection and accelerated IPS throughput
  • CoreXL technology provides the most efficient and high-performance use of multi-core technologies

Lowest TCO and fastest ROI of any enterprise-class firewall solution

  • One-click activation of IPS and firewall protection on any Check Point gateway
  • Delivers unmatched extensibility and flexibility—all without adding CapEx
  • Integrated into Check Point Software Blade Architecture for on-demand security

Features:

Complete Intrusion Prevention System (IPS) Functionality

The IPS Software Blade complements firewall protection, further securing your network without degrading gateway performance. 

Full-featured IPS

The IPS Software Blade provides a complete IPS security solution, providing comprehensive network protection against malicious and unwanted network traffic, including:

  • Malware attacks
  • Dos and DDoS attacks
  • Application and server vulnerabilities
  • Insider threats
  • Unwanted application traffic, including IM and P2P

Geo-protections

Geo-protections enforce or monitor traffic based on the source or destination country. Create a geo-protection policy with exceptions to allow legitimate traffic through while blocking or monitoring traffic from unknown and untrusted sources. Monitor activity with the SmartEvent Software Blade.

IPS Geo Protections

Trusted Security

  • Real-Time protections - The IPS Software Blade is constantly updated with new defenses against emerging threats. Many of the IPS protections are pre-emptive, providing defenses before vulnerabilities are discovered or exploits are even created.
  • Microsoft vulnerability coverage - Check Point is ranked #1 in Microsoft threat coverage, including preemptive protections against emerging vulnerabilities and exploits.

Integrated IPS

The IPS Software Blade, with integrated IPS, provides total security at a lower acquisition cost (up to 50% less) than multiple standalone solutions, all with up to 10x better price/performance than existing integrated IPS solutions.

Integrated IPS has many advantages that are making it a new standard in security, including:

  • Reducing costs by consolidating multiple independent solutions
    By integrating an IPS Software Blade into your existing firewall, you save on:
    • Equipment purchase
    • Hardware footprint
    • Training and ongoing management
    • Rack space
    • Cabling
    • Cooling
    • Power
  • Facilitating reduced latency 
    • By inspecting the traffic only once for both firewall and IPS protection, integrated IPS causes less bottlenecking.
  • Providing cohesive security policy 
    • An integrated solution drives a single, cohesive security policy.
  • Offering common management and training
    • Reduces management and training expenses
    • Reduces errors and oversights
    • Better match with IT organizational structures
    • Increased operational effectiveness and efficiency
  • Making IPS deployment easier 
    • Add IPS protection to your gateway with the check of one box

Multi-gigabit integrated IPS performance

Delivers up to 15 Gbps of IPS throughput with the default IPS profile. The IPS Software Blade incorporates a high-speed pattern matching engine that does multi-layered, 2-tier inspection for maximum performance with thousands of protections enabled.

Inspect SSL Encrypted Traffic

Scan and secure SSL encrypted traffic passing through the gateway.  When traffic is passed through, the gateway decrypts the traffic with the sender’s public key, inspects and protects, then re-encrypts, sending the newly encrypted content to the receiver.

Granularly define exceptions for SSL inspection to protect user privacy and comply with corporate policy.  Some encrypted content passing through the gateway should not be inspected, and therefore can be bypassed with a simple administrator policy definition.

Dynamic Threat Management

With the IPS Software Blade and the SmartEvent Software Blade you gain a new, dynamic management paradigm for today's high volume, real-time and evolving threat environment.

Check Point threat management workflows allow you to handle constant change quickly and efficiently, reducing your management overhead and allowing you to confidently and promptly deploy protections.

The IPS Software Blade offers:

  • New protections sandbox - Build confidence in a 'sandbox' environment with no impact on your network.
  • Automatic protection activation - Activation of new protections, based on configurable parameters (performance impact, confidence index, threat severity). The difficulties of constant, individual management of thousands of protections are eliminated.

IPS Protection Details

 
  • Unified Management - The IPS blade is configured and managed through a common Check Point management interface—the same one used to manage other security gateway Software Blades and Check Point dedicated IPS.
  • Configurable, actionable monitoring - Track events through detailed reports and logs of what is most important. The new Security Management Software Blade for IPS and Security Provisioning Software Blade simplify threat analysis and reduce operational overhead.
    • Business-level views - Customizable reports provide easy monitoring of critical security events associated with your business-critical systems.
    • Multi-dimensional sorting - Drag-and-drop columns of event data and the information will be automatically re-ordered.
    • Actionable event logs - Edit the associated protection, create an exception or view packet data directly from log entries.

IPS Event Logs

Painless Deployment

  • Deployed on your existing firewall - Reduces deployment time and costs by leveraging existing security infrastructure.
  • Granular protection control - Easy-to-use protection profiles allow administrators to define signature and protection activation rules that match the security needs of your network assets.
  • Predefined default and recommended profiles - Allows for immediate and easy out-of-the-box use with profiles tuned to optimize security or performance.
  • Optional detect-only mode - Sets all your existing protections to only detect, but not block, traffic to allow you to evaluate your profile without risking disruption.

Preemptive Security Updates

Patching is an incomplete security measure, which can leave your network open for attack. By taking a more comprehensive approach, which combines robust IPS functionality with a concerted patching strategy, network administrators can better equip themselves to handle 'Patch Tuesdays' and secure the network between upgrades and patches. Find out how to leverage Check Point IPS offerings to make Patch Tuesday just another day.

Integrated into Check Point Software Blade Architecture

The IPS Software Blade is integrated into the Software Blade Architecture. It can be easily and rapidly activated on existing Check Point Security Gateways saving time and reducing costs by leveraging existing security infrastructure.

Specifications:

Performance
Integrated IPS Performance Up to 15 Gbps
Gateway Load Threshold Protect firewall performance under load through a configurable software bypass
Security
Multi-Method Detection Engine 

Vulnerability and exploit signatures
Protocol validation 
Anomaly detection
Behavior-based detection
Multi-element correlation

Microsoft Vulnerability Coverage #1 for Microsoft protections
Patch Process Reinforcement Protect your network from attack while vendor patches are being applied
Real-Time Protection

Protection updates for:

  • Client and server vulnerabilities
  • Exploits
  • Protocol misuse
  • Outbound malware communications
  • Tunneling attempts
  • Application control
  • Generic attack types without predefined signatures 
  • Preemptive security functions
Application Intelligence  Application protections and controls including Instant Message and Peer-to-Peer
Open Signatures  Create your own signatures with an open signature language
DoS Mitigation Engine  Expanded protections against denial-of-service attacks
Deployment
Profiles   Save administrative overhead by assigning the same protections to groups of assets
Predefined Profiles   Out-of-the-box protection profiles optimized for security or performance
Detect-Only Mode   Set your existing protections to detect, but not block malicious traffic
Sandbox New Protections  Provide a 'sandbox' environment to try out new protections without impacting your network
Management
Activation Rules

Activate protections according to:

  • Threat severity
  • Performance impact 
  • Protection confidence level
Packet Capture  Gather traffic data for deep forensic analysis
Follow-up  Flag protections for later analysis
Timeline View  Easily configure custom views of only what's important to you (e.g., security events associated with your critical network assets)
System Overview  IPS system status at-a-glance
Unified Management  Manage integrated and dedicated IPS from one interface
Network Exceptions  Make exceptions to protections
More Protection Information

Give detailed information on each protection, including:

  • Vulnerability and threat descriptions
  • Threat severity
  • Performance impact
  • Confidence level

Pricing Notes:

Check Point Security Gateway Blades, 1 Year
Check Point IPS Blade for low-end gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-1Y
List Price: $1,500.00
Our Price: $1,208.00
Check Point IPS Blade for mid range gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-1Y
List Price: $3,300.00
Our Price: $2,657.00
Check Point IPS Blade for high-end gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-1Y
List Price: $5,000.00
Our Price: $4,025.00
Check Point IPS Blade for ultra high-end gateways, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-1Y
List Price: $6,000.00
Our Price: $4,830.00
Check Point Security Gateway Blades, 2 Years
Check Point IPS Blade for low-end gateways, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-2Y
List Price: $2,850.00
Our Price: $2,294.00
Check Point IPS Blade for mid range gateways, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-2Y
List Price: $6,270.00
Our Price: $5,047.00
Check Point IPS Blade for high-end gateways, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-2Y
List Price: $9,500.00
Our Price: $7,648.00
Check Point IPS Blade for ultra high-end gateways, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-2Y
List Price: $11,400.00
Our Price: $9,177.00
Check Point Security Gateway Blades, 3 Years
Check Point IPS Blade for low-end gateways, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-3Y
List Price: $4,050.00
Our Price: $3,260.00
Check Point IPS Blade for mid range gateways, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-3Y
List Price: $8,910.00
Our Price: $7,173.00
Check Point IPS Blade for high-end gateways, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-3Y
List Price: $13,500.00
Our Price: $10,868.00
Check Point IPS Blade for ultra high-end gateways, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-3Y
List Price: $16,200.00
Our Price: $13,041.00
Check Point Security Gateway Blades for High Availability, 1 Year
Check Point IPS Blade for low-end gateways for High Availability, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-1Y-HA
List Price: $1,200.00
Our Price: $966.00
Check Point IPS Blade for mid range gateways for High Availability, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-1Y-HA
List Price: $2,640.00
Our Price: $2,125.00
Check Point IPS Blade for high-end gateways for High Availability, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-1Y-HA
List Price: $4,000.00
Our Price: $3,220.00
Check Point IPS Blade for ultra high-end gateways for High Availability, 1 Year
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-1Y-HA
List Price: $4,800.00
Our Price: $3,864.00
Check Point Security Gateway Blades for High Availability, 2 Years
Check Point IPS Blade for low-end gateways for High Availability, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-2Y-HA
List Price: $2,280.00
Our Price: $1,835.00
Check Point IPS Blade for mid range gateways for High Availability, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-2Y-HA
List Price: $5,016.00
Our Price: $4,038.00
Check Point IPS Blade for high-end gateways for High Availability, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-2Y-HA
List Price: $7,600.00
Our Price: $6,118.00
Check Point IPS Blade for ultra high-end gateways for High Availability, 2 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-2Y-HA
List Price: $9,120.00
Our Price: $7,342.00
Check Point Security Gateway Blades for High Availability, 3 Years
Check Point IPS Blade for low-end gateways for High Availability, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-S-3Y-HA
List Price: $3,240.00
Our Price: $2,608.00
Check Point IPS Blade for mid range gateways for High Availability, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-M-3Y-HA
List Price: $7,128.00
Our Price: $5,738.00
Check Point IPS Blade for high-end gateways for High Availability, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-L-3Y-HA
List Price: $10,800.00
Our Price: $8,694.00
Check Point IPS Blade for ultra high-end gateways for High Availability, 3 Years
*The purchase of a Security Gateway container is required per user
#CPSB-IPS-XL-3Y-HA
List Price: $12,960.00
Our Price: $10,433.00