Check Point Enables Secure Business Over the Internet with FireWall-1 2.0

San Francisco, CA —

Check Point Software Technologies, Inc. today introduced FireWall-1 2.0, a new version of its market-leading Internet security software solution. FireWall-1 2.0 gives companies all the key tools necessary to securely conduct business over the Internet in one comprehensive, cost-effective package.

Significant new features of FireWall-1 2.0 include:

Integrated encryption for securing private communications over public networks (virtual private networks).
Client authentication to provide nomadic users and branch sites with secure remote access to enterprise networks.
Address translation capabilities that allow corporations to overcome the limitations of IP addressing on their internal networks.
Support for Hewlett Packard's HP-UX operating system, adding to existing support for the Solaris and SunOS operating environments.

FireWall-1 2.0 provides an easy-to-manage, integrated solution that meets the full spectrum of enterprise-wide network security needs and makes business on the Internet a reality, said Dr. Deborah Triant, chief executive officer and president of Check Point Software Technologies, Inc. FireWall-1 2.0 is the only solution available to provide connectivity to all business applications while providing unsurpassed security for network access control, authentication and encryption.

Encryption for Virtual Private Networks
In an effort to expand electronic commerce and reduce wide area networking costs, corporations are utilizing virtual private networks to create secure business environments. Check Point FireWall-1 2.0 provides integrated encryption technology that establishes fully confidential communication channels over public Internet lines. The encryption technology in FireWall-1 2.0 is tightly integrated with other network security features, so administrators no longer need to create piecemeal solutions by combining a variety of individual products.

FireWall-1 2.0 allows corporations to integrate the encryption methods of their choice and to encrypt communications selectively. Multiple encryption schemes are available and can be deployed simultaneously, including DES, the recognized standard encryption technology, and FWZ1, Check Point's proprietary encryption algorithm that can be exported outside the U.S. Encryption keys are seamlessly generated using the advanced Diffie-Hellman method. Certificate authority keys for authenticating the encryption keys use the industry-standard RSA digital signature scheme. The Diffie-Hellman and RSA technologies will be provided under a Check Point licensing agreement with RSA Data Security, Inc. (see separate release).

Client Authentication for Remote Access
Client authentication enables secure communication between an enterprise local network and corporate branch offices, business partners and nomadic users. Using a one-time authentication scheme, FireWall-1 provides transparent and comprehensive remote connectivity for all TCP, UDP and RPC applications, supporting standard smart cards or soft key solutions including Security Dynamics SecureID, S/Key and others. Once a user has been authenticated, a very efficient connection is established for the duration of the session, regardless of which services and applications are used. This differs from traditional solutions in which users must authenticate themselves to each application every time they initiate a new transaction. The integration of client authentication technology into FireWall-1 2.0 provides network managers with a single source for managing their entire security policy, without the need for separate login programs or dial-up remote access.

Address Translation for Overcoming IP Address Limitations
For enterprises with a limited number of Internet addresses or running unregistered addresses on their internal networks, Check Point FireWall-1 2.0 includes IP address translation. FireWall-1 provides an efficient and seamless solution for overcoming IP address limitations by dynamically assigning IP addresses, allowing organizations to leverage a small number of registered IP addresses into multiple connections with the outside world. Address translation also brings another line of defense against break-ins to FireWall-1 users by presenting one address for the company's entire network to the Internet. This provides additional security by concealing internal addresses from users on the Internet.

Pricing and Availability
Check Point FireWall-1 2.0 will be available by October 31, 1995. The base system price is U.S. $4,990 for small networks (up to 50 nodes), U.S. $9,990 for mid-size networks (50 to 250 nodes) and U.S. $18,900 for larger networks.The FireWall-1 2.0 encryption capability is sold as a separate module and is priced at U.S. $2,990. For the first 90 days after the product ships, the FireWall-1 2.0 encryption module will be available free of charge to new customers. Check Point FireWall-1 2.0 Network Security Center, which adds router security management capabilities to FireWall-1, sells for U.S. $39,900. Large volume customers may purchase additional inspection modules for internal compartmentalization security at percentage discounts.

FireWall-1 is available worldwide through a wide range of resellers and distributors including CompuServe, Forval Creative, I-Net, Internet Security Corporation (ISC), The Qualix Group and many others. FireWall-1 is also available through an OEM partnership with SunSoft, Inc. and is resold through SunSoft's extensive distribution channels including Sun Microsystems Computer Corporation (SMCC), Access Graphics, Merisel, Pacific Bell, and hundreds of others. FireWall-1 2.0 supports SunOS 4.1.3 and Solaris 2.4 for SPARC and Intel 80x86 and Pentium-based systems, and HP-9000 workstations and servers running HP-UX versions 9.X and 10.X. The optional FireWall-1 router management capabilities support Bay Networks'Wellfleet version 8 and Cisco version 9 and 10.

About Check Point FireWall-1
Check Point FireWall-1 protects an organization's internal network security while enabling full, transparent access to the Internet's vast resources. The solution, based on patent-pending stateful multi-layer inspection technology, eliminates the trade-off between connectivity and security that obsolete firewall solutions such as application gateways impose. This unique, protocol-independent technology ensures security for all current and future Internet protocols, services and applications with full transparency and bandwidth. With FireWall-1, an entire enterprise's network security policy can be created, monitored and maintained from a single workstation.

About Check Point Software
Check Point Software Technologies, Inc. is the world's leading vendor of Internet security software solutions. With more than 2,000 installations in small to Fortune 100-sized companies worldwide, the award-winning Check Point FireWall-1 has emerged as the standard for enterprise-wide network security.

Check Point's products are sold and supported through distributors, resellers and Internet service providers worldwide. With U.S. headquarters in the Silicon Valley and international headquarters in Ramat-Gan, Israel, the company is prvately-held and also has offices in Lexington, Mass. and San Francisco, Calif. For more information call (800) 429-4391, e-mail info@checkpoint.com or visit Check Point on the WWW at http://www.checkpoint.com.

1995 Check Point Software Technologies, Ltd. Check Point FireWall-1 is a trademark of Check Point Software Technologies, Ltd. SunOS and Solaris are registered trademarks of Sun Microsystems, Inc. HP-UX is a registered trademark of Hewlett-Packard Company. All other product names mentioned herein are trademarks of their respective owners.

Virtual Private Network
Virtual private network refers to the use of public network infrastructures, such as the Internet, to create the equivalent of a WAN. Traditionally, companies use expensive T-1 or leased-lines to create their WAN, costing several thousand dollars per month. The use of public networks vastly reduces the cost of setting up and administrating a WAN.

###