Check Point UTM-1 Edge X Series Appliances

Check Point Safe@Office 500 Wireless Overview:

Safe@Office UTM appliances deliver proven, integrated security and networking features right out-of-the-box. Safe@Office offers a simple, affordable and reliable solution to keep small business networks protected anytime, anywhere.

Your Challenge:

In today’s business environment, maintaining customer confidence and protecting your business means securing your broadband connection and network. Taking steps to safeguard critical data is vital to your success and often mandated by industry-specific regulations. Internet threats, such as viruses, worms, hackers and zero-hour attacks, require a host of different solutions that are difficult to integrate and costly to manage. You need a solution designed to meet the complex needs of today’s small business.

Check Point Solution:

Designed specifically to meet the needs of small businesses, Check Point Safe@Office® 500 Unified Threat Management appliances deliver proven Internet security by incorporating the same patented technology used by 98% of the Fortune 500. A single Safe@Office appliance can protect a network of up to 100 users from a multitude of Internet threats, creating a solid line of defense against hacking attempts, denial of service attacks, phishing and viruses. Also available with an integrated secure wireless access point and with an advanced ADSL/ADSL2+ modem, Safe@Office meets small businesses’ needs for connectivity and network security.

Features & Benefits:

Product Features:

• Industry’s most proven and trusted Firewall
• Robust IPSec VPN (site-to-site and remote access)
• Intrusion Prevention, Antivirus and Web Filtering capabilities
• Easy-to-use, wizard-based management with preset security rules and automatic updates
• Integrated, high-performance networking capabilities
• Wireless LAN, ADSL2+ modem and support for 3G cellular connectivity

Product Benefits:

• Delivers an affordable, easy-to-use, all-in-one security solution for small businesses
• Provides small businesses with the same proven security technologies trusted by 98% of the Fortune 500
• Addresses industry specific network security regulations
• Maximizes employee productivity through secure Wireless LAN, web-filtering and VPN connectivity
• Streamlines ongoing security policy administration
• Ensures around-the-clock business continuity

Unmatched Protection:

Safe@Office appliances integrate Check Point’s industry leading INSPECT Stateful Inspection firewall technology and SmartDefense Intrusion Prevention, capable of examining hundreds of predefined applications, protocols and services. Check Point Application Intelligence™ technology blocks denial of service (DoS) attacks, detects protocol anomalies and limits an application’s ability to spread malicious data, and controls application-layer operations. These mechanisms aid proper usage of applications such as instant messaging, peer-to-peer (P2P) file sharing and File Transfer Protocol (FTP), allowing you to block questionable traffic and ensuring your bandwidth is used in the most efficient and secure manner.

You can define port-based and tag-based VLANs, allowing you to set-up multiple isolated network zones. For added security, you can enable 802.1x port-based security, requiring both LAN and WLAN users to securely sign-on before gaining physical access to the network. Unauthenticated users can be automatically moved to a “quarantine” area, providing a restricted “guest user” access level.

Gateway Antivirus:

• Stop viruses before they reach your network - Stateful inspection antivirus blocks viruses before they enter the network, providing preemptive protection. The antivirus policy setup provides a simple and quick way to define precisely which type of traffic should be scanned. By using the gateway streaming antivirus in parallel with desktop antivirus solutions, you can protect against zero-hour virus outbreaks, providing an additional security layer against new viruses in the wild.

Web-Filtering:

Inappropriate Web surfing can introduce security threats, increase legal liability and decrease employee productivity. Safe@Office appliances integrate best-of-breed Web filtering using an extensive database of threat categories and associated URLs. You can define an acceptable web-access policy for your organization and protect it from threats such as spyware and viruses, as well as new risks from inappropriate web content. Additionally, you can define custom web-rules to block or allow access to specific websites and URLs.

Access Your Office Network–Anytime, Anyplace:

Safe@Office integrates VPN and remote desktop capabilities, allowing secure remote access to your network, so you can increase productivity and ensure business continuity without compromising your IT resources. Safe@Office appliances authenticate remote user identities to ensure that only authorized users have network access, encrypting communications to ensure complete confidentiality. Teleworkers and road-warriors can use the bundled VPN-1® SecuRemote™ VPN client or L2TP IPSec VPN client on their laptops or PDAs to securely access email and other resources. In addition, with the Remote Desktop capability you can remotely control computers in your network directly from your web browser. Safe@Office site-to-site VPN ensures your business offices can be interconnected with permanent, highly secure tunnels.

• Wi-Fi Networking: Safe@Office 500W integrates a wireless LAN access point supporting the Super-G standard, enabling wireless network speeds of up to 108 Mbps. It is backward compatible with 802.11b and 802.11g technologies. With Extended Range (XR) enabled clients, you achieve up to three times the range of a standard access point.
• Wireless Security and Hot-Spots: With Safe@Office appliances you can segment your wireless network into multiple virtual access points, each with a different security policy and encryption settings. The appliance authenticates remote user identities using a variety of authentication standards including the latest WPA2. Safe@Office also supports IPSec VPN technology to encrypt wireless communication, preventing data from being viewed or corrupted during transmission. In addition, you can easily set up wireless hot-spots for your guests and control access with a customizable Web-based access portal and user authentication.
• Wireless Roaming: By using the Wireless Distribution System (WDS) capability, you can extend your network even further by interconnecting two or more Safe@Office appliances. This allows wireless clients (e.g. laptops, PDAs) to connect seamlessly to your wireless network, without the need to change your IP address.
• Secure Integrated Connectivity: Safe@Office 500/500W ADSL appliances have an integrated ADSL2/2+ modem. Supporting download speeds of up to 24Mbps, these appliances provide a complete connectivity and security solution for small businesses, eliminating the need for an external ADSL modem.

Around the Clock Business Continuity:

Keeping your network up and running 24x7 is critical. Safe@Office appliances include high-availability, connectivity redundancy and Quality of Service (QoS) features in-order to minimize down-time. Safe@Office appliances allow WAN redundancy and load balancing to ensure persistent connectivity and service availability. Out-of-bound dial-in is also supported, allowing access to the appliance even if the Internet connection fails.

Automatic failover across multiple appliances (high-availability) guarantees around-the-clock availability. A wide variety of 3G cellular modems, dialup backup, PSTN and ISDN modems are also supported, to be used as either the primary or secondary Internet connection.

Quick Setup and Management:

The Safe@Office appliance’s simple Web-based management interface enables you to secure your business in minutes. You can use the setup wizard to select one of three preset firewall policies (high, medium or low), or create your own custom security policy. Security rules are as flexible as your business needs dictate and can be modified at any time through a variety of remote management options.

• Intuitive Security and Network Monitoring: The Safe@Office appliance logs information on attempted attacks and displays it in an easy-to-follow, color-coded report. This enables you to see the IP address from which an THE TECHNOLOGY INSIDE Safe@Office is based on Embedded NGX™ with Application Intelligence technology, which incorporates Check Point’s market-leading Firewall-1® and VPN-1® software, optimized for embedded platforms. Embedded NGX™ is developed by SofaWare Technologies, a Check Point company.
• Extensive Networking and Traffic Management Capabilities: More than just a security appliance, Safe@Office is a fullfledged network router that includes a four port LAN switch, a dedicated DMZ and a WAN port (Ethernet or ADSL). Static and dynamic routing options are available for complete interoperability with even the most complex networks. Safe@ Office supports QoS capabilities and can act as a transparent bridge.
• Up-to-date Security – without any Hassle: For effective protection against new and evolving threats, your network’s security must be kept up to date. Optional subscription based services allow you to automatically receive software and antivirus updates, along with webfiltering services, periodic security reports (providing in-depth information on traffic, firewall activity, antivirus activity and more) and dynamic DNS services. Subscription based services are provided Check Point or by its Small- Business MSSP Partners.

Specifications:

 

Hardware Specifications
Physical Dimensions (W x H x D)	Safe@Office 500/ Safe@Office 500 ADSL/ Safe@Office 500W ADSL: 200 x 33 x 122 mm Safe@Office 500W: 200 x 33 x 130 mm
Temperature	-5ºC ~ 80º C (Storage/Transport), 0ºC ~ 40ºC (Operation)
Weight	1.45 Kg (3.197lbs)
Regulatory Compliance	FCC Part 15 Class B, CE
Environmental Standards	RoHS, WEEE
Warranty	One Year Hardware

The Technology Inside
Safe@Office is based on Embedded NGX™ with Application Intelligence technology, which incorporates Check Point's market-leading Firewall-1® and VPN-1® software, optimized for embedded platforms. Embedded NGX is developed by SofaWare Technologies, a Check Point company.

	500	500W	500 ADSL	500W ADSL
Concurrent Users	5 /25 / Unlimited
Hardware Features
Firewall Throughput (Mbps)	190*
VPN Throughput (Mbps)	35*
Concurrent Firewall Connections	8,000
LAN Switch	4 Ports, 10/100 Mbps
WAN Port	10/100 Mbps		ADSL2+
DMZ/WAN2 Port	10/100Mbps
Console Port (Serial)
Wall Mounting Kit
Firewall & Security Features
Check Point Patented Stateful Inspection Firewall
Application Intelligence (IPS)
Instant Messenger and P2P Blocking/Monitoring
Port-based and Tag-based VLAN	**
Network Access Control (802.1x)	**
Integrated RADIUS Server	**
Secure HotSpot (Guest Access)	**
Add-on Services***
Gateway Antivirus
Antivirus Supported Protocols	HTTP, FTP, NBT, POP3, IMAP, SMTP User-defined TCP and UDP ports
On the fly decompression
Embedded Antispam
Web Filtering
VPN
Remote Access Client Software	Check Point VPN-1® SecuRemote™ (included)/L2TP IPSec VPN client
Site-to-site VPN
Remote Access VPN
VPN Tunnels	100
Remote Access VPN Profiles	5/25**
Site-to-site VPN Profiles	2/Unlimited**
IPSec Features	Hardware accelerated DES, 3DES, AES, MD5, SHA-1, Hardware Random Number Generator (RNG), Internet Key Exchange (IKE), Perfect Forward Secrecy (PFS), IPSec Compression, IPSec NAT Traversal (NAT-T)
L2TP VPN Server
Networking
Supported Standards	Static IP, DHCP, PPPoE, PPTP, Telstra		Static IP, DHCP, PPPoE, PPTP, Telstra, EoA, PPPoA
Backup ISP and Load Balancing
Dialup Backup	Serial	USB, Serial	USB, Serial	USB
Traffic Shaper (QoS)	Basic/Advanced**
Automatic Gateway Failover (HA)	**
Dynamic Routing	OSPF, BGP**
Print Server
Management
HTTP / HTTPS / SSH / SNMP / SMP / SMP On-Demand
Local Diagnostic Tools	Ping, WHOIS, Packet Sniffer, VPN Tunnel Monitor, Connection Table Monitor, Network Monitor, Active Computers Display, Local Logs, Traffic Monitor
ADSL Modem Specifications
Supported Standards	ADSL2, ADSL2+, T.1413 G.DMT (G.992.1) G.Lite (G.992.2) ANNEX A (ADSL over POTS), ANNEX B (ADSL over ISDN)
Wireless Specifications***
Wireless Protocols	802.11b (11Mbps), 802.11g (54Mbps), Super-G (108Mbps)
Wireless Security	VPN over Wireless, WEP, WPA2 (802.11i), WPA-PSK, 802.1x
Wireless Range (Standard Mode)	Up to 100 m indoors and 300 m outdoors (וnder optimal conditions)
Wireless Range (XR Mode)	Up to 300 m indoors and 1 km outdoors (וnder optimal conditions)
Wireless Distribution System (WDS)	**
Multiple Access Points	**
* As of Embedded NGX v7.5 ** Requires Power Pack upgrade *** Requires additional purchase of service **** Super-G and XR mode only available with select wireless network adapters. Actual ranges are subject to change in different environments

Documentation:

Download the Check Point Safe@Office 500 Appliance Datasheet (PDF).