Check Point SecureClient Mobile

Check Point SecureClient Mobile Overview:

SecureClient™ Mobile delivers firewall protection and secure, uninterrupted remote access for mobile devices that connect to VPN-1® and Connectra™ for continuous protection and productivity.

Your Challenge:

Devices such as Windows Mobile-powered PDAs and smartphones are becoming valuable tools for organizations like yours. With more powerful features and access to multiple cellular and WiFi networks, your mobile workers can access email, essential business applications, and corporate resources from anywhere just as easily as if they were in the office.

As your workers become more mobile, protection from malware and hackers that can compromise devices and confidential data becomes more critical. Reliable and secure remote access presents unique challenges for mobile workers as they try to connect from unknown networks. VPN sessions can easily be interrupted as mobile workers roam across networks and move in and out of connectivity, requiring them to reauthenticate to keep from losing their work.

You need a trusted security solution that will protect your mobile workers and your networks so your business can stay connected and competitive. A solution designed for mobility that can deliver reliable, uninterrupted secure remote access to email, business applications, and critical resources is essential to enabling your users to roam while staying connected and productive, just as if they were in the office.

0ur Solution:

SecureClient™ Mobile delivers secure, uninterrupted remote access to enterprise email, critical business applications, and resources protected by Check Point VPN-1® and Connectra™ gateways.

Combining a personal firewall, which protects your mobile devices and networks from malware and hackers, with an SSL-based VPN client (for easily traversing firewalls, proxies, and NAT devices) enables your mobile workers to securely connect from anywhere. As they roam across cellular and WiFi networks or connections are interrupted, mobility features like session continuation and credential caching eliminate the need to reauthenticate, delivering uninterrupted VPN connectivity transparent to the user. With an intuitive user interface and minimal effect on device resources, SecureClient Mobile delivers secure, uninterrupted remote access to enterprise networks for Windows Mobile devices.

Centralized management and policy control from SmartCenter™ and Provider-1®, the same NGX unified management platform used for perimeter, internal, Web, and endpoint protection, enables you to define and enforce a unified remote access policy that extends to road warriors, remote offices, business partners, and mobile users.

Features & Benefits:

Product Features

• VPN client for secure remote access from mobile devices
• Session continuation across interrupted connections
• Personal firewall, interface control, and data protection
• Centralized management through SmartCenter™ and Provider-1
• Small footprint and intuitive client GUI
• Interoperable with Pointsec Mobile device encryption

Product Benefits

• Protects mobile devices from hackers and malware
• Securely connects mobile-device users to critical applications and resources
• Maintains VPN sessions when roaming across networks or connections
• Reduces and simplifies deployment, administration, and costs
• Minimizes effect on device resources and user experience

Secure, uninterrupted remote access for mobile devices
SecureClient Mobile delivers secure, uninterrupted remote access to enterprise email, critical business applications, and resources protected by Check Point VPN-1 and Connectra gateways. With centralized management, silent updates, and automatic policy enforcement, SecureClient Mobile protects your mobile workers and networks so your business can stay connected and competitive.

Greater protection and security enforcement
The SecureClient Mobile personal firewall protects your mobile devices from hackers, malware, and other threats and enforces your predefined security policies—automatically. Choose to allow/disallow encrypted data when connected or force all traffic through the gateway for complete control and inspection. You can even control granular device settings like ActiveSync connections to PCs, so devices and data stay confidential and follow corporate guidelines for meeting regulatory compliance.

Reliable, secure remote access from anywhere
Unknown networks, firewalls, proxies, and NAT traversal can all create problems for your mobile workers, preventing them from connecting to critical applications and resources. That is why SecureClient Mobile uses a robust and flexible SSL-based VPN client to more easily traverse firewalls, NAT devices, and proxies, so your mobile workers can reliably connect to email, business applications, and critical resources—regardless of their locations.

Transparent, uninterrupted VPN connectivity
Maintaining continuous VPN sessions can be difficult as your mobile workers roam across multiple cellular and WiFi networks and move in and out of connectivity. Requiring new sessions or authentication every time the connection changes quickly becomes disruptive and unusable, resulting in lost data and productivity. SecureClient Mobile solves these problems by using session continuation and credential caching to preserve the VPN session without reauthenticating— even while roaming across networks or changes in connectivity—to deliver continuous and transparent VPN connectivity to your mobile workers.

Reduced administration and simplified deployment
Centralized management from Check Point SmartCenter or Provider-1 reduces your administration and costs by leveraging the same NGX unified management platform used for perimeter, internal, Web, and endpoint security.Your administrators can create custom MSI or CAB installation packages with preconfigured security settings, simplifying and speeding deployment while immediately enforcing your corporate policies. Once installed, your security policies can be silently updated and broadcast to your mobile devices over the air to ensure automatic protection and enforcement, transparent to your end users.

Designed with mobility in mind
SecureClient Mobile was designed and built from the ground up for the specific needs of mobile devices. Its small footprint preserves valuable device resources while a simple and intuitive GUI minimizes user interruptions, silently protecting and keeping your mobile workers productive. Advanced mobile networking features enable applications to push data directly to mobile devices, such as Microsoft’s Direct Push technology, for sending email, calendar, contacts, and tasks as soon as items arrive/change on the server and with the same familiarity as their desktop experience.

Open platform for interoperability
The Check Point open API enables OPSEC™ (Open Platform for Security) partners to easily integrate their solutions with SecureClient Mobile, providing extended security features such as antivirus, device encryption, and more. For a complete list of tested and verified solutions, see the OPSEC Web site at http://www.opsec.com.

Designed specifically for mobile devices, SecureClient Mobile preserves device resources and worker productivity with a configurable GUI that minimizes disruptions.

SecureClient Mobile protects Windows Mobile devices and enforces corporate security using centralized management and policy control.

Specifications:

 

SecureClient Mobile Specifications:
Connectivity:
SSL-based VPN client connects to Check Point VPN-1 and Connectra gateways Office Mode (assign IP address from the gateway) Visitor Mode (tunnel all traffic through SSL Port 443) Hub Mode (route all device traffic through gateway) Credential caching Multiple and alternate gateway support Secure Configuration Verification (SCV) and Endpoint Security On Demand Scanner (ICS) Connection status profiles Always connected Automatic disconnect Initiate dialup
Security:
Firewall protection ActiveSync control Allow unencrypted traffic when physically connected Encryption protocols: SSL 3DES, RC4 Data integrity protocols: MD5, SHA-1 Negotiation through SSL PKI server certificates with optional user authentication, including: Client certificates (X.509, SmartCards, PKCS #12, etc.) One-time password (RSA SecurID, SoftID, etc.) User/password combinations and multi-challenge response LDAP, AD RADIUS, TACCAS, and others Secure Authentication (SAA) OPSEC interface allows third party-extensions such as three-factor or biometric authentication
Management:
Centralized management and policy control through SmartCenter or Provider-1 Customized installation CAB files or MSI packages with preconfigured settings Automatic policy update upon connection or schedule Version updates broadcast over the air Advanced troubleshooting access
Platform:
Small installation footprint Simple and intuitive client GUI  Configurable startup, user control, and GUI notifications
Operating systems:
Windows Mobile 6.0 Pocket PC Windows Mobile 6.0 Smartphone Windows Mobile 5.0 Pocket PC Windows Mobile 5.0 Smartphone Windows Mobile 2003, Pocket PC
Hardware:
Intel ARMv4, StrongARM, XScale, PXA Series processor Texas Instruments OMAP processor 64MB memory

Documentation:

Download the Check Point SecureClient Mobile Datasheet (PDF).