What's New in NGX: Connectra

The NGX platform delivers hundreds of important new features, improvements, and enhancements to over twenty Check Point products, offering stronger security enforcement, VPN, and management capabilities - addressing your most challenging security problems.

Learn more about the specific features and benefits of upgrading your Check Point products to the NGX platform below and start planning your upgrade today.

See what's new by product

Connectra
Unified Security Management NGX Integration: This release of Connectra includes integration with the NGX architecture. As such, Connectra release naming now follows the NGX release nomenclature and becomes Connectra NGX. SmartCenter NGX Management: Customers with SmartCenter NGX can use a single repository of definitions for users and groups, network objects, access rights, and security policies. In addition, the new SmartCenter Connectra Plug-in enhances Connectra deployments through more granular LDAP configuration, authentication policy definition, intrusion prevention configuration, and endpoint policy definition. Customers can now easily drop in a Connectra gateway within SmartDashboard and fully utilize object sharing capabilities. A Connectra Tab is now available in SmartDashboard where all Connectra related configurations can be performed. Use Connectra-specific SmartDefense profiles for all Connectra related configurations. Central management for IPSec clients, mobile clients, and browser-based remote access. SmartDirectory support for enhanced Connectra LDAP configuration. Customers can view Connectra logs in SmartView Tracker, including user activities (file share access, web application access, Web Intelligence security events, etc.). SmartUpdate allows users to centrally manage Connectra licensing as well as apply software updates to Connectra Gateways. SmartView Monitor now includes the ability to view Connectra status.
Enhanced Application Support Native Citrix Support: Connectra NGX R60 delivers native support for Citrix environments. This includes access to an existing Citrix nFuse server as well as support for Citrix ICA Windows and Java “thin” clients. Connectra performs SSL termination, ticketing, authentication, authorization, and logging. Previous releases required the use of SSL Network Extender to support Citrix. Native Lotus iNotes Support: Connectra NGX R60 delivers native support for Lotus iNotes environments. This includes secure web-based access to email and calendaring through Connectra. Web Single Sign-on: For web applications requiring HTTP authentication, Connectra can handle authentication requests on behalf of the user. This minimizes the number of authentication requests when users logon to applications and resources through the Connectra Web portal. On-Demand Applications: In addition to the core clientless application access (email, File Shares, Web Applications, Citrix, Outlook Web Access, etc.), the latest version of Connectra enables end users to download applets for specific applications On-Demand without requiring the installation of local software. The new supported applications include: Telnet, SSH, TN3270, TN5250, Terminal (Putty), FTP, Remote Desktop (RDP), Jabber IM Extensible On-Demand Application Support: In addition to the new On-Demand applications offered by Connectra, customers can configure and enable On-Demand application delivery through Connectra for their own applets and network client applications. Connectra handles the security controls, authentication and authorization, and facilitates the delivery of these applications during an SSL VPN session. Macintosh Support for Client/server Applications: Macintosh, including the latest 10.4 (Tiger), is now supported for SSL Network Extender to tunnel client/server applications over SSL VPN from Macintosh clients. This is in addition the currently supported Windows and Linux platforms. New HTML File Share Access: Previous versions of Connectra provided users a native Windows interface for File Shares, providing great usability but required the exclusive use of Internet Explorer. This version of Connectra enables native Browser (HTML) interface for File Shares to allow access from non-IE browsers. New User Monitoring Tool: The new command line based User Monitor enables real-time tracking of the number and identity of users currently logged in to Connectra, enabling you to monitor the load and use of your SSL VPN gateway. Improved Support for Far East Languages: This release adds enhancements to support file shares in all UTF-8 encoded languages, including Far Eastern language characters. This enables both Far East based companies, as well as enterprises with remote branches in the Far East, to use Connectra File Shares features. LDAP Authentication Improvements: Previous versions of Connectra provided some limitations on usernames and passwords when using LDAP. This version allows full support of UTF-8 usernames and passwords, therefore allowing full integration with LDAP servers containing non-western characters. Link Translation Improvements: Check Point is constantly working to improve Web applications support by improving Connectra link translation technology. In this release Connectra link translation engine has enhanced JavaScript and ActiveX support, and support for Check Point SmartPortal. In addition, new troubleshooting tools have been added to this release.
New Security Features On-Demand Integrity Secure Workspace: Connectra NGX R61 enables remote users to access an organization’s information on an un-managed and/or un-trusted PC without worrying about information being left on the computers for others to view. The new On-Demand Secure Workspace is opened when a user enters the Connectra Portal and encrypts all information accessed. In addition, the Integrity Secure Workspace controls the applications that are allowed to access this information, monitors the application, and ensures that these applications cannot move this information to a non-secured area. Updated Application Intelligence and Web Intelligence: The latest version of Connectra adds the most recent features for Check Point security protections, including protections for LDAP injection, Header rejection, customizable HTTP Worm Catcher, SYN Attack Protection, and customizable Microsoft Networks worm protections.
Enhanced Networking and Platforms SecureClient Mobile Support: Connectra can now be used as a terminating and management gateway for the new Check Point SecureClient Mobile remote access client for PDAs and SmartPhones. Check Point SecureClient Mobile delivers a unique combination of market-leading stateful firewall protection and secure, continuous access for mobile devices to resources protected by Check Point Connectra gateways in a single solution. The SSL-based VPN client easily traverses firewalls and NAT devices so mobile workers can access critical resources regardless of their location. Roaming capabilities eliminate the need for users to re-authenticate when moving between networks or connections, maintaining sessions and access to important assets. SecureClient Mobile client software can be found on the Connectra Media Kit. Expanded Browser Support: This release extends the use of SSL Network Extender to non-IE browsers via Java support. Expanded OS Support: SSL Network Extender is now available for the Linux OS. Expanded User Environments: Previous versions of SSL Network Extender required a user to have Administrative Privileges on the remote PC (now called “network” mode). This release extends SSL Network Extender to non-Admin PCs for TCP-based applications via “Application” mode. Connectra can auto-detect which agent to use when a user logs on, or an Administrator can enforce which mode to use. SSL Network Extender Support for Intel Based Mac: Connectra NGX R61 adds support for the new Intel based Mac. This is in addition to PowerPC based Mac platforms supported in previous releases. Improved Client-Side Compatibility: The latest version of Connectra adds additional ActiveX and Java support for various On-Demand applets providing greater access ubiquity across different browsers while maximizing usability. SSL Network Extender Auto-Minimize: The SSL Network Extender (SNX) window can now be set to automatically minimize on launch, enabling you to provide a more transparent browsing experience to end-users. Supported for Internet Explorer, this enhances usability options for Windows platforms.
New Performance Enhancements ClusterXL support for High Availability and Load Sharing: Relied upon for over 5 years by thousands of VPN-1 customers, the latest version of Connectra extends the same ClusterXL support used in VPN-1 to add high availability and load sharing to Connectra. This advanced technology delivers fully transparent failover and deployment for customers, delivering stateful failover without requiring the use of an external load balancer. Hardware Acceleration: Connectra NGX R62 supports the use of the Connectra Accelerator Card (CPVH-CAC-I). This PCI-X card speeds up the SSL/TLS public key exchange, and reduces CPU utilization by allowing the offloading of intensive calculations to dedicated hardware. SSL Network Extender Performance Improvements: This release of Connectra includes several performance enhancements for SSL Network Extender. Based on experience with large installations, these enhancements dramatically improve performance for applications running over SSL Network Extender.

Connectra

Unified Security Management

NGX Integration: This release of Connectra includes integration with the NGX architecture. As such, Connectra release naming now follows the NGX release nomenclature and becomes Connectra NGX.
SmartCenter NGX Management: Customers with SmartCenter NGX can use a single repository of definitions for users and groups, network objects, access rights, and security policies. In addition, the new SmartCenter Connectra Plug-in enhances Connectra deployments through more granular LDAP configuration, authentication policy definition, intrusion prevention configuration, and endpoint policy definition.

Customers can now easily drop in a Connectra gateway within SmartDashboard and fully utilize object sharing capabilities.
A Connectra Tab is now available in SmartDashboard where all Connectra related configurations can be performed.
Use Connectra-specific SmartDefense profiles for all Connectra related configurations.
Central management for IPSec clients, mobile clients, and browser-based remote access.
SmartDirectory support for enhanced Connectra LDAP configuration.
Customers can view Connectra logs in SmartView Tracker, including user activities (file share access, web application access, Web Intelligence security events, etc.).
SmartUpdate allows users to centrally manage Connectra licensing as well as apply software updates to Connectra Gateways.
SmartView Monitor now includes the ability to view Connectra status.

Enhanced Application Support

Native Citrix Support: Connectra NGX R60 delivers native support for Citrix environments. This includes access to an existing Citrix nFuse server as well as support for Citrix ICA Windows and Java “thin” clients. Connectra performs SSL termination, ticketing, authentication, authorization, and logging. Previous releases required the use of SSL Network Extender to support Citrix.
Native Lotus iNotes Support: Connectra NGX R60 delivers native support for Lotus iNotes environments. This includes secure web-based access to email and calendaring through Connectra.
Web Single Sign-on: For web applications requiring HTTP authentication, Connectra can handle authentication requests on behalf of the user. This minimizes the number of authentication requests when users logon to applications and resources through the Connectra Web portal.
On-Demand Applications: In addition to the core clientless application access (email, File Shares, Web Applications, Citrix, Outlook Web Access, etc.), the latest version of Connectra enables end users to download applets for specific applications On-Demand without requiring the installation of local software. The new supported applications include: Telnet, SSH, TN3270, TN5250, Terminal (Putty), FTP, Remote Desktop (RDP), Jabber IM
Extensible On-Demand Application Support: In addition to the new On-Demand applications offered by Connectra, customers can configure and enable On-Demand application delivery through Connectra for their own applets and network client applications. Connectra handles the security controls, authentication and authorization, and facilitates the delivery of these applications during an SSL VPN session.
Macintosh Support for Client/server Applications: Macintosh, including the latest 10.4 (Tiger), is now supported for SSL Network Extender to tunnel client/server applications over SSL VPN from Macintosh clients. This is in addition the currently supported Windows and Linux platforms.
New HTML File Share Access: Previous versions of Connectra provided users a native Windows interface for File Shares, providing great usability but required the exclusive use of Internet Explorer. This version of Connectra enables native Browser (HTML) interface for File Shares to allow access from non-IE browsers.
New User Monitoring Tool: The new command line based User Monitor enables real-time tracking of the number and identity of users currently logged in to Connectra, enabling you to monitor the load and use of your SSL VPN gateway.
Improved Support for Far East Languages: This release adds enhancements to support file shares in all UTF-8 encoded languages, including Far Eastern language characters. This enables both Far East based companies, as well as enterprises with remote branches in the Far East, to use Connectra File Shares features.
LDAP Authentication Improvements: Previous versions of Connectra provided some limitations on usernames and passwords when using LDAP. This version allows full support of UTF-8 usernames and passwords, therefore allowing full integration with LDAP servers containing non-western characters.
Link Translation Improvements: Check Point is constantly working to improve Web applications support by improving Connectra link translation technology. In this release Connectra link translation engine has enhanced JavaScript and ActiveX support, and support for Check Point SmartPortal. In addition, new troubleshooting tools have been added to this release.

New Security Features

On-Demand Integrity Secure Workspace: Connectra NGX R61 enables remote users to access an organization’s information on an un-managed and/or un-trusted PC without worrying about information being left on the computers for others to view. The new On-Demand Secure Workspace is opened when a user enters the Connectra Portal and encrypts all information accessed. In addition, the Integrity Secure Workspace controls the applications that are allowed to access this information, monitors the application, and ensures that these applications cannot move this information to a non-secured area.
Updated Application Intelligence and Web Intelligence: The latest version of Connectra adds the most recent features for Check Point security protections, including protections for LDAP injection, Header rejection, customizable HTTP Worm Catcher, SYN Attack Protection, and customizable Microsoft Networks worm protections.

Enhanced Networking and Platforms

SecureClient Mobile Support: Connectra can now be used as a terminating and management gateway for the new Check Point SecureClient Mobile remote access client for PDAs and SmartPhones. Check Point SecureClient Mobile delivers a unique combination of market-leading stateful firewall protection and secure, continuous access for mobile devices to resources protected by Check Point Connectra gateways in a single solution. The SSL-based VPN client easily traverses firewalls and NAT devices so mobile workers can access critical resources regardless of their location. Roaming capabilities eliminate the need for users to re-authenticate when moving between networks or connections, maintaining sessions and access to important assets. SecureClient Mobile client software can be found on the Connectra Media Kit.
Expanded Browser Support: This release extends the use of SSL Network Extender to non-IE browsers via Java support.
Expanded OS Support: SSL Network Extender is now available for the Linux OS.
Expanded User Environments: Previous versions of SSL Network Extender required a user to have Administrative Privileges on the remote PC (now called “network” mode). This release extends SSL Network Extender to non-Admin PCs for TCP-based applications via “Application” mode. Connectra can auto-detect which agent to use when a user logs on, or an Administrator can enforce which mode to use.
SSL Network Extender Support for Intel Based Mac: Connectra NGX R61 adds support for the new Intel based Mac. This is in addition to PowerPC based Mac platforms supported in previous releases.
Improved Client-Side Compatibility: The latest version of Connectra adds additional ActiveX and Java support for various On-Demand applets providing greater access ubiquity across different browsers while maximizing usability.
SSL Network Extender Auto-Minimize: The SSL Network Extender (SNX) window can now be set to automatically minimize on launch, enabling you to provide a more transparent browsing experience to end-users. Supported for Internet Explorer, this enhances usability options for Windows platforms.

New Performance Enhancements

ClusterXL support for High Availability and Load Sharing: Relied upon for over 5 years by thousands of VPN-1 customers, the latest version of Connectra extends the same ClusterXL support used in VPN-1 to add high availability and load sharing to Connectra. This advanced technology delivers fully transparent failover and deployment for customers, delivering stateful failover without requiring the use of an external load balancer.
Hardware Acceleration: Connectra NGX R62 supports the use of the Connectra Accelerator Card (CPVH-CAC-I). This PCI-X card speeds up the SSL/TLS public key exchange, and reduces CPU utilization by allowing the offloading of intensive calculations to dedicated hardware.
SSL Network Extender Performance Improvements: This release of Connectra includes several performance enhancements for SSL Network Extender. Based on experience with large installations, these enhancements dramatically improve performance for applications running over SSL Network Extender.

Take advantage of these important new features and hundreds of others available only with the NGX platform by ordering your NGX Upgrade Kit today.