Check Point Software Enables Secure Remote Access for Telecommuters and Mobile Workers

San Francisco, CA —

Check Point Software Technologies, Ltd., the market share leader in network security software, today announced Check Point FireWall-1 SecuRemote client encryption software. The new product enables secure, private communications by mobile and remote users via dial-up connections through the Internet, either directly to a gateway or through the user's Internet service provider, extending the virtual private network (VPN) to the desktop and laptop. FireWall-1 SecuRemote software works in conjunction with Check Point FireWall-1 software for SunSoft SunOS and Solaris, Hewlett-Packard HP-UX and Microsoft Windows NT on the Internet gateway.

FireWall-1 SecuRemote software, based on technology called 'client encryption,' enables users with Microsoft Windows 95 operating system-based systems to transfer electronic mail and sensitive corporate data, such as internal memoranda, financial data, and other information which is considered mission-critical, through their dial-up connections as safely and securely as they would behind the corporate Internet firewall. Previously, these transmissions had the potential of being compromised, jeopardizing the data sent or received by the user, as well as the overall security of the network being accessed.

"The number of telecommuters, users with private Internet accounts, and traveling executives who stay in touch with the office through their laptops is increasing daily. As a result, it's vital that companies provide secure encrypted communications for every laptop and remote user," said Dr. Deborah Triant, president and CEO of Check Point Software Technologies, Inc. "FireWall-1 SecuRemote offers a complete solution for secure remote access, because it encrypts data before it leaves the laptop, providing a secure, client-to-firewall connection."

"We've been looking for a solution like FireWall-1 SecuRemote for a long time. Many of our sales and marketing staff travel or are off-site a significant portion of the time, and are conducting mission-critical business transactions every day from their laptops to our corporate server," said John Dubiel, manager of planning at Boston Edison. "With FireWall-1 SecuRemote, we can rest assured that these dial-up connections, as well as our overall network, remain secure."

Support for Direct Dial-Up and Through Internet Service Providers
Companies are increasingly using virtual private networks (VPNs) to create the equivalent of a secure WAN with their remote offices, as well as suppliers, customers and remote and mobile users. By using a public network infrastructure, such as the Internet, with secure, encrypted communications, companies can save several thousand dollars per month over traditional T-1 or leased-lines.

FireWall-1 SecuRemote software extends the VPN to the laptop and desktop by enabling secure communications from Windows 95 clients. A key feature of FireWall-1 SecuRemote software is support for dynamic IP addressing, a critical component of providing secure remote access through Internet service providers. Typically, Internet service providers dynamically allocate IP addresses for users at dial-up time, making this feature a must-have for telecommuters and remote workers using Internet service providers to access their corporate network. Secure transmission of data through dial-in sessions directly to the corporate network is also supported by FireWall-1 SecuRemote software.

FireWall-1 SecuRemote software includes strong user authentication through the support of advanced public-key technology based on the Diffie-Hellman and RSA algorithms. This means that users do not need a smart-card token in order to obtain strong user authentication. FireWall-1 SecuRemote software protects users against the illegal use of passwords resulting from the theft of their laptop or eavesdropping on communications because no valuable password data is stored on the mobile or remote system and no valuable data is retrievable the transmission. This, in turn, protects against unauthorized entry to corporate databases and networks that could result from the illegal acquisition of remote users' passwords.

How Client Encryption Technology Works
FireWall-1 SecuRemote software is completely transparent to the user, and no additional keystrokes or actions are required. The client encryption technology used within the product is based on the RSA public key technology and uses DES (US-only) and Check Point's proprietary FWZ1 encryption technology (worldwide exportable).

The following typical real-life scenario describes how an individual might use FireWall-1 SecuRemote software: An executive is traveling in Bangkok and connects via a local call to the Internet through an Internet service provider. Using FireWall-1 SecuRemote, she then creates a VPN across the Internet to her corporate headquarters' network back in Los Angeles, California. Through her modem connection and across the Internet, she begins to read e-mail and send important documents to the head of the corporate division. The problem with the scenario is that information traversing across the Internet is insecure, meaning the information she is sending and receiving (e-mail, documents, spreadsheets, etc.) may be compromised before it reaches her laptop (in the case of receiving) or before it reaches the headquarters' gateway (in the case of sending). If she is using FireWall-1 SecuRemote software, her data goes through a process of encryption before it leaves her laptop, preventing unauthorized hi-jacking of her data. When the data reaches the gateway, the FireWall-1 software on the gateway decrypts the data and sends it to its destination in the network. The same, but reverse, scenario holds true for data received from the network to her laptop.

Pricing and Availability
FireWall-1 SecuRemote software will be available before the end of second quarter of this year. Pricing will be announced at that time. The product works with FireWall-1 Internet gateway software on SunSoft SunOS and Solaris, Hewlett-Packard HP-UX and Microsoft Windows NT.

About FireWall-1
As the first shrinkwrapped firewall package, and the first to employ an easy-to-use graphical user interface, FireWall-1 is consistently recognized by trade publications and users for its usability, flexibility, extensibility and high performance together with the highest level of security. With more than 5,000 installations worldwide as of March 1996, FireWall-1 has been more widely tested in the field than any other network security solution.

Based on Check Point's unique, patent-pending "stateful inspection" architecture, the product is the most flexible, easy-to-install, configure, and maintain firewall product available. More than 100 applications, services and protocols are supported out-of-the-box, and administrators can easily customize the firewall to incorporate new and in-house applications. FireWall-1 allows the enterprise's customized security policy to be created, monitored, and maintained from a single workstation, and enables network managers to configure and manage multiple firewalls throughout the enterprise from one, centralized management station. The product is also sold by SunSoft, Inc. as Solstice FireWall-1.

About Check Point Software
Check Point Software Technologies is the leading vendor of network security software with more than 40% share of the firewall market (according to International Data Corporation). With thousands of installations in small to Fortune 100 companies worldwide, Check Point FireWall-1 has emerged as the standard for enterprise-wide network security. Check Point's products are sold through distributors, resellers and Internet service providers worldwide, including SunSoft, Inc., Hewlett-Packard Company, and UB Networks and their respective distribution channels. The company is privately-held and has U.S. headquarters in Redwood City, California and international headquarters in Ramat-Gan, Israel. For more information, please call (800) 429-4391, e-mail info@checkpoint.com or visit Check Point at http://www.checkpoint.com.

1996 Check Point Software Technologies, Ltd. Check Point, the Check Point logo, Check Point FireWall-1 and FireWall-1 SecuRemote are trademarks of Check Point Software Technologies, Inc. Windows and Windows NT are either registered trademarks or trademarks of Microsoft Cop. In the U.S. and/or other countries. All other product names mentioned herein are trademarks of their respective owners.

###