Branch Office Virtual Security Gateway (Quantum Edge)

---

---

---

---

---

---

Virtual Firewall

Quantum Edge is a lightweight virtual image of the Check Point Branch Office Security Gateway. It’s a small footprint, requiring only 1 GB of memory, 1 GB of disk storage and 1 CPU core. Power on the virtual security gateway and within a minute, your branch office is protected.

Check Point Advanced Threat Prevention

Check Point provides organizations of all sizes with integrated, advanced threat prevention, reducing complexity and lowering the total cost of ownership. Check Point security products protects SaaS, IaaS and now branch office assets from sophisticated threats with dynamic scalability, intelligent provisioning and consistent control across physical and virtual networks.

Unlike other solutions that only detect threats, Check Point prevents threats. Check Point SandBlast Zero-Day Protection is a cloud-hosted sandboxing technology where files are quickly quarantined and inspected, running in a virtual sandbox to discover malicious behavior before it enters your network. Malware is detected during the exploit phase, even before hackers can apply evasion techniques attempting to bypass the sandbox.

This innovative solution combines cloud-hosted CPU-level inspection and OS-level sandboxing to prevent infection from the most dangerous exploits, and zero-day and targeted attacks.

The Check Point solution also includes Application Control and URL Filtering to enforce safe web use. IPS, Anti-Bot and Antivirus protect from known threats. HTTPS inspection safeguards from threats trying to hide inside encrypted HTTPS channels. Furthermore, Check Point is a fully consolidated and connected cyber security architecture protecting on premises, cloud and branch networks as well as endpoint and mobile devices from advanced persistent threats. Threats identified on one device can be automatically propagated as an IoC (Indicator of Compromise) to protect your branch, mobile and cloud-hosted assets from the same zero-day threat.

Central Management

Customers also have two central management options; cloud-hosted Security Management Portal (SMP) and R80 Security Management. Cloud-hosted Security Management Portal (SMP) streamlines provisioning, maintenance and security policy and event management of tens of thousands of devices. Automating firmware updates and backups and setting security policy plans for common groups of Quantum Edge virtual security gateways greatly simplifies security management. Quantum Edge sends security logs to the SMP’s central log repository. With the pre-defined central reports customers can easily see Infected Hosts, Prevented Attacks, Detected Attacks and Attack Trends.

The other management option is the Check Point enterprise R80 Security Management product, the same product that manages Check Point integrated Next-Generation Threat Prevention security gateways on-premises at headquarters and in public and private clouds. This option leverages existing security management infrastructure and provides more granular security policy control. Bringing Quantum Edge security logs into Check Point SmartEvent along with security events from other Check Point security gateways, endpoint and mobile devices greatly simplifies threat management. The pre-defined views and reporting highlight the most important events, reducing response times.

Integration with SD-WAN

Quantum Edge security gateways are deployed through the SD-WAN management console. This tight integration reduces deployment time, effort, and costs. When Quantum Edge is deployed on SD-WAN or uCPE equipment, the Quantum Edge virtual security gateway is configured, automatically connected and ready to be centrally managed and monitored by the customer’s domain in cloud-hosted SMP or the headquarters R80 Security Management.

Optimize WAN Security

Quantum Edge has been fully tested and integrates with leading SD-WAN and uCPE equipment vendors as well as cloudhosted services offered by carriers and Managed Security Service Providers. Application security policies are defined once and programmed to all sites in contrast to the branch firewall security model requiring device-by-device management. Centralized management not only reduces the time to deploy and IT resource costs but also provides more consistent policies, reducing risk across the enterprise.