Check Point Introduces New Active Defense Security Category

Check Point Experience - ANAHEIM, Calif., - April 25, 2002 - Check Point Software Technologies Ltd. (NASDAQ: CHKP), the worldwide leader in securing the Internet, today introduced a new category in Internet security products that combines attack detection and response, real-time information and on-line updates in a powerful centralized solution for defeating known and unknown network attacks. This and other company announcements are being made at the Check Point Experience, the company's annual customer and partner conference currently being held in Anaheim, Calif.

SmartDefense builds upon the powerful capabilities of Check Point's Stateful Inspection security engine to provide advanced security for greater control and management against the following categories of attacks:

• IP Attacks - including, IP spoofing and IP fragmentation
• Denial of Service (DoS) Attacks - including SYN flood and LANd
• Web & Application Vulnerabilities - including trojan horses, DNS attacks and worms such as Nimda and Code Red
• Network Probing - including port scanning and service scanning

SmartDefense complements intrusion detection systems and anti-virus solutions by providing an added layer of advanced security protection.

"With Internet threats growing increasingly more sophisticated, Check Point is taking additional steps to advance our market-leading security technology," said Gil Shwed, chairman and chief executive officer of Check Point Software Technologies. "Check Point SmartDefense sets a new standard for Internet security by providing administrators with an intelligent, active system that detects and protects network resources and offers complete defense against cyberthreats."

Active Defense Security
The first in a category of Active Defense products, Check Point's SmartDefense advances security with real-time, active protection to identify and immediately block attacks. Administrators are provided with intelligence on attack types and forensic details captured in the course of blocking attacks. From a single, central management console, SmartDefense controls how attacks are defeated at network gateways or on critical internal servers, as well as provides attack logging, auditing and alerting.

Additionally, Check Point's software architecture enables SmartDefense to quickly incorporate intelligence and protection against new and emerging attacks -- providing a level of flexibility that cannot be achieved with alternative hardware or ASIC-based architectures.

Highlights of SmartDefense include:

• Comprehensive intelligence and online security updates on attacks to help administrators control malicious activity
• Enhanced detection of suspicious activities, to respond to possible threats in real-time
• Flexible, simplified management with an intuitive GUI for increased protection against known and unknown attacks
• Type-based attack identification, for better protection against emerging and unknown attacks

"SmartDefense is another example of Check Point's commitment to bringing innovative solutions into the marketplace that solve real customer problems," Mr. Shwed continued. "SmartDefense creates a new category of Active Defense security products and provides administrators with the highest levels of security and intelligent network protection against all types of network attacks."

Availability
SmartDefense is available worldwide in Q3 2002. It will be incorporated into all Check Point security products at no added cost. Additionally, Check Point will offer a subscription service to provide real-time vulnerability information and online updates.

About Check Point Software Technologies
Check Point Software Technologies is the worldwide leader in securing the Internet. It is the confirmed market leader of both the worldwide VPN and firewall markets. The company's Secure Virtual Network (SVN) architecture provides the VPN and security infrastructure that uniquely enables secure and reliable Internet communications. SVN solutions, as delivered in the company's Next Generation product family, secure business communications and resources for corporate networks, remote employees, branch offices and partner extranets. Extending the power of SVN is Check Point's Open Platform for Security (OPSEC), the industry's framework and alliance for integration and interoperability with "best-of-breed" solutions from over 300 leading companies. Check Point solutions are sold, integrated and serviced by a network of 2,500 certified partners in 203 countries.

###

2002 Check Point Software Technologies Ltd. All rights reserved.
Check Point, the Check Point logo, FireWall-1, FireWall-1 SecureServer, FireWall-1 SmallOffice, FloodGate-1, INSPECT, IQ Engine, Meta IP, MultiGate, Open Security Extension, OPSEC, Provider-1, SecureKnowledge, SecureUpdate, SiteManager-1, SVN, UAM, User-to-Address Mapping, UserAuthority, Visual Policy Editor, VPN-1, VPN-1 Accelerator Card, VPN-1 Gateway, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 SmallOffice, and ConnectControl are trademarks, service marks, or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks or registered trademarks of their respective owners.