Check Point SSL Network Extender

Check Point SSL Network Extender Overview:

SSL Network Extender™ for VPN-1® and UTM-1™ delivers SSL VPN remote access via the Web so that employees and partners can easily access enterprise resources. It delivers spyware disablement, ensures session confidentiality, and enforces network access policy.

Your Challenge:

Network applications like email, enterprise resource planning software, and homegrown programs are used daily by many organizations. With today’s increasingly mobile environment, employees need to access these applications from many locations and networking environments. These diverse requirements need to be supported while minimizing the complexity of deploying and supporting remote application access. Most important, the solution has to ensure the security of the network for all types of remote access scenarios.

0ur Solution:

SSL Network Extender™ for VPN-1 and UTM-1 delivers simplified, secure remote access via a Web browser plug-in, allowing employees and business partners to easily and securely connect to a corporate network over SSL VPN. It simplifies remote access by providing both the connectivity of a VPN client and ease-of-use of a Web interface. SSL Network Extender also provides an option for endpoint security that delivers spyware disablement, ensures session confidentiality, and enforces network access policy. As an integrated option for VPN-1 and UTM-1, SSL Network Extender provides a secure, highly manageable, and cost-effective solution for any type of remote access scenario.

Features & Benefits:

Product Features

• Network-level connectivity over SSL VPN
• Support for all IP-based applications n IPSec and SSL VPN deployment flexibility
• Integrated endpoint security
• Integrated with VPN-1® and UTM-1™ security gateways

Product Benefits

• Reduces remote access costs and simplifies deployment
• Supports an extensive range of enterprise applications
• Eliminates the need to deploy separate solutions for IPSec and SSL VPN
• Enables secure remote access with integrated endpoint and application security

Network-level connectivity over SSL VPN
SSL Network Extender enables full network-level access over SSL, the same protocol used in online banking and e-commerce. Users can access the network through their browsers by downloading a browser plug-in from a VPN-1 or UTM-1 security gateway, allowing remote users to run their native clients locally while SSL Network Extender transparently tunnels application traffic over the Web.

Supports all IP-based applications
Any application that runs over Internet Protocol (IP) can be used with SSL Network Extender. Remote users can run any IP-based application as if they were inside your network. SSL Network Extender supports ICMP, TCP, and UDP, as well as dynamic applications like FTP. It also supports extensive networking features, including Office Mode (using internal IP addresses), split-tunnel, or route-all-traffic modes.

IPSec and SSL VPN deployment flexibility
Because SSL Network Extender is integrated with VPN-1 and UTM-1, organizations can support both IPSec and SSL VPN remote access with a single solution. Whether adding SSL to an existing VPN-1 or UTM-1 deployment or creating a new, mixed SSL and IPSec environment, organizations can leverage a unified management infrastructure to deploy both types of remote access and reduce overall remote access costs.

SSL Network Extender can be downloaded and run from a standard Web browser.

Integrated endpoint security
With the integration of a clientless version of Check Point Integrity™, the industry’s most trusted endpoint security solution, SSL Network Extender secures network resources from remote PCs—regardless if they are used and/or owned by employees or partners, customers, or other network guests. This solution enforces security policy for SSL VPN connections to the network and session confidentiality— keeping the organization secure.

Scans for spyware before remote connection
To ensure that malicious processes, keystroke loggers, or Trojan horses are not installed on the remote endpoint, SSL Network Extender provides an option to scan for these and other spyware through the remote user’s browser before allowing remote connections. By disabling spyware and enforcing baseline security requirements before it grants SSL VPN access, SSL Network Extender stops identity and password theft and prevents data loss.

Integrated with VPN-1 and UTM-1
All the security features offered by Check Point protect twork Extender, including patented Stateful Inspection, Application Intelligence™, and SmartDefense™ technologies. With all the security assurance offered by Check Point products, you can safely deploy the ease of SSL-based access in your organization.

Specifications:

 

SSL Network Extender Specifications:
Web connectivity:
Supported applications: Any IP-based applications: ICMP, FTP, TCP, and UDP Authentication: LDAP, RADIUS, SecurID, Active Directory, client certificates, internal database Connectivity features: DNS, Office Mode (assigned internal IP address), and WINS passing Supported browser encryption: 3DES, RC4 Supported browsers: Internet Explorer 5.0 and higher, Firefox (requires Administrator Privileges) Installation: ActiveX and Java plug-ins, MSI package for Microsoft SMS Supported gateways: VPN-1 Power, VPN-1 UTM, UTM-1 Supported operating systems: Windows 2000/XP/Vista, Mac OS X version 10.4 (PowerPC and Intel based), Linux
Comprehensive endpoint security (optional add-on):
Integrity Clientless Security Delivers total endpoint inspection Detects and remediates spyware: keystroke loggers, Trojan horses, worms, adware, browser applets, dialers, third-party cookies, other hacker tools, and undesirable software Checks for installed and updated antivirus software, PC firewalls, and other administrator-defined criteria before log in Provides complete session confidentiality: Uses secured disk space and encryption to protect files created during browser sessions. Session cache cleaning mechanism erases encrypted file storage space after sessions Enterprise access policy enforcement: List unmet conditions by end user, offers customizable remediation resources, provide guidance and links to resources that enable out-of-

Documentation:

Download the Check Point SSL Network Extender Datasheet (PDF).