Check Point Announces Next Generation VPN Client Security 

Industry's Only VPN Client with Integrated Centrally Managed Personal Firewall Ensures End-to-end Security 

REDWOOD CITY, Calif., May 1, 2001 - Check Point Software Technologies Ltd. (NASDAQ:CHKP), the worldwide leader in securing the Internet, today announced its revolutionary VPN-1T SecureClientT Next Generation software, with new features that extend the corporate network to secure mobile workers -- including those connecting over 'always-on' broadband. The revolutionary VPN-1 SecureClient Next Generation is the only VPN client on the market with an integrated personal firewall and centralized management capabilities, ensuring client systems are securely configured for true end-to-end security. This announcement further solidifies Check Point's dominance in the VPN and client security arena. 

Additionally, VPN-1 SecureClient Next Generation delivers powerful new management and policy-based security capabilities designed to make enterprise VPN implementations easy to deploy and maintain.

"As 'always on' broadband services such as DSL and cable modems gain in popularity among remote access users, the ability to enforce security on client systems becomes essential," said Gil Shwed, chief executive officer and founder of Check Point Software Technologies. "VPN-1 SecureClient Next Generation makes it extremely easy to enforce security across large VPN deployments, ensuring that a remote system doesn't become the weak link into the corporate network."

Check Point's Next Generation client features end-to-end VPN security, simplified administration and management, and scalability.

End-to-end VPN Security

• Granular Security Policies - provides powerful, flexible rule-based security policies for enforcing corporate security on the client. With this feature, corporations can assign security policies and access privileges on an individual or group level, such as executives, sales or IT staff.

• Secure Configuration Verification (SCV) - allows for pre-configured and custom security checks on client systems to eliminate potential security breaches by ensuring only securely configured client systems are granted VPN connectivity. For instance, an SCV check might verify that the latest version of anti-virus software is installed or other communication ports are closed, before allowing a VPN connection.

• Client Security Logging and Alerts - strengthens security through tracking and notification of client security events, enabling the security administrator to quickly address attempted breaches or policy violations of a client.

Simplified Administration and Management

• Packaging Tool - enables security administrators to easily create customized, self-extracting installation packages for client systems, greatly simplifying the installation experience for the remote user and dramatically reducing maintenance and support costs.
  
• Automatic Software Updates - automatically and transparently checks and updates the software version installed on clients, ensuring the systems are always up-to-date and the security of the enterprise is continuously maintained.

With VPN-1 SecureClient Next Generation, the security policy on the remote system is managed from a central location and is completely transparent to the client. This unique centralized management capability ensures that the remote system is always enforcing proper security and cannot be used as a back door into the corporate network.

"The VPN client has emerged as the critical link for corporate security," Shwed continued. "Our Next Generation clients set a new standard for client security and VPN management."

Product Availability and Pricing
Check Point VPN-1 SecureClient and VPN-1 SecuRemote Next Generation are included in the next major release of Check Point's integrated VPN-1/FireWall-1 product family, scheduled to be available in the second quarter 2001. Check Point VPN-1 SecureClient pricing ranges from $40 to $92 per client in the U.S., depending on quantity.

About Check Point Software Technologies 
Check Point Software Technologies is the worldwide leader in securing the Internet. The company's Secure Virtual Network (SVN) architecture provides the infrastructure that enables secure and reliable Internet communications. SVN secures business-to-business (B2B) communications between networks, systems, applications and users across the Internet, intranets and extranets. Check Point's Open Platform for Security (OPSEC) provides the framework for integration and interoperability with "best-of-breed" solutions from over 270 leading industry partners. For more information, please call us at (800) 429-4391 or (650) 628-2000 or visit us on the Web at http://www.checkpoint.com. 

###