Check Point VPN-1 Integrated Appliance Solution

Check Point VPN-1 Integrated Appliance Solution Overview:

Check Point Integrated Appliance Solutions enable IT departments to design a total security solution tailored to meet specific needs, by combining proven Check Point security software solutions with high performance hardware based on IBM System xSeries servers and BladeCenter platforms. Integrated and supported by Check Point, these solutions fit an organization’s every need and compliment other Check Point appliances, such as UTM-1™ and Power-1™ and enables the development of an enterprise-wide security infrastructure. Integrated Appliance Solutions also work seamlessly with solutions from Check Point appliance partners and certified open servers to deliver ultimate flexibility in architecting security throughout the enterprise.

Features & Benefits:

• Designed to meet an organization’s specific needs
• Delivers high performance platform for security
• Reduces hardware and operational costs
• Provides a single point of contact for hardware, software, and support

Custom-Designed to Meet Your Needs:

Check Point can help you design specific security systems that match your architectural and security policy vision. By matching the appropriate Check Point software with the appropriate platform, Check Point can provide you with the flexibility to create customized security solutions designed to meet your specific security needs—ranging from remote offices to large data centers or telecom central offices.

Each Integrated Appliance represents a customer’s vision for meeting the organization’s security needs.

The foundation of the Integrated Appliance Solutions is the M series of pre-defined platforms. Choose from Check Point software such as VPN-1® UTM, VPN-1 Power, and the VPN-1 Power VSX™ virtualized security services platform, as well as Connectra® SSL VPN, SmartCenter™ management, and Provider-1® for management of large deployments with separate security domains. You can also modify the default hardware specifications of the M series to build a fully customized platform. Check Point then integrates the software and hardware into a single, certified solution for simple, effective deployment within your network.

Standardization for Lower Security Total Cost of Ownership:

With the Integrated Appliance Solutions, you can take advantage of the benefits of customization and standardization. You work with Check Point to tailor Check Point applications and hardware components, and then finalize them into a standard corporate security platform. Then create a single support and procurement methodology that significantly simplifies management overhead. This allows your customer engineering teams the ability to save certification time and work on new projects, procurement to build economies of scale that reduce costs, and management to develop standard operating procedures that improve service quality and compliance.

High Security, High Performance:

Because the Integrated Appliance Solutions are built around the latest hardware innovations such as multi-core processors, you can deploy to a higher level of security. Organizations can activate strict intrusion prevention policies with SmartDefense™ with multi-gigabit performance levels. And as Check Point updates its software, expect to see performance improve without requiring hardware upgrades.

The Simplicity You Want:

Check Point provides total support for the Integrated Appliance Solutions, including three levels of global advance replacement determined by support level and location. SmartDefense Services, an optional subscription, provides the latest updates for SmartDefense integrated intrusion prevention capabilities, delivering always up-to-date threat mitigation.

Specifications:

Integrated Appliance Solution M Series Security Specifications:

Protection Details:		M2	M6	M8
Firewall:
Protocol/application support	200-plus total
VoIP protection	Sip, H.323, MGCP, and SIP with NAT support
Instant messaging control	MSN, Yahoo, ICQ, and Skype (including over HTTP and SSL)
Peer-to-peer blocking	Kazaa, GNUTella, BitTorrent, eMule, IRC (including over HTTP)
Network Address Translation	Static/hide NAT support with manual or automatic rules
IPSec VPN:
Encryption support	AES 128-256 bit, 3DES 56-168 bit
Authentication methods	Password, RADIUS, TACACS, X.509, SecurID
Certificate authority	Integrated X.509 certificate authority
VPN communities	Automatically sets up site-to-site connections as objects are created
Topology support	Star and mesh
Route-based VPN	Utilizes Virtual Tunnel Interfaces, numbered/ unnumbered interfaces
VPN client	Check Point Endpoint Security™, VPN-1® SecureClient™, VPN-1 SecuRemote
SSL VPN:
SSL-based remote access	Fully integrated SSL VPN gateway provides on-demand SSL-based access	Optional	Optional	Optional
SSL-based endpoint scanning	Scans endpoint for compliance/malware prior to admission to the network	Optional	Optional	Optional
Intrusion prevention:
Network-layer protection	Blocks attacks such as DoS, Port Scanning, IP/ICMP/TCP-related
Application-layer protection	Blocks attacks such as DNS cache poisoning, FTP bounce, improper commands, and more
Detection methods	Signature-based and protocol anomaly
UTM functionality:
Antivirus protection	Protects HTTP, FTP, POP3, and SMTP protocols		Optional	Optional
Anti-spyware blocks	Pattern-based spyware blocks at the gateway		Optional	Optional
Web filtering	20 million-plus URLs covering three billion-plus Web pages and more than 70 languages		Optional	Optional
Pattern-based and IP reputation checking anti-spam	Detects spam based on dynamic database of signatures		Optional	Optional
Updates	Centralized, daily updates		Optional	Optional
Networking:
Dynamic routing support	OSPF, BGP, RIP v1/2, Multicast
DHCP support	SecurePlatform™ DHCP server and Relay
Layer-2 bridge support	Transparently integrates into existing network
ISP redundancy	Protocol-based, source/destination, and port route decisions
ISSL VPN:
High availability	Active/passive and active/active
Load balancing	Integrated ClusterXL® Smart Load Balancing
Quality of Service (QoS)	FloodGate-1® for granular QoS
ISP redundancy	Automatically reroutes traffic to second interface
Traffic acceleration	SecureXL™ accelerates security decisions	Optional
Multi-core acceleration	CoreXL™ balances security decisions across multiple cores	Optional

Integrated Appliance Solution M Series Security Specifications:

Documentation:

Download the Check Point VPN-1 Integrated Appliance Solution Datasheet (PDF).