Mobile Access Software Blade

The Check Point Mobile Access Software Blade uses SSL VPN and IPsec technologies to secure encrypted communication from unmanaged smartphones, tablets, PCs and laptops to your corporate IT infrastructure.

The  Mobile Access Software Blade offers multiple end-user connection options, including:

• Check Point Mobile and Check Point Mobile VPN apps
• SSL VPN portal through a browser
• SSL Network Extender (SNX) with light-weight, dissolvable client

 The Mobile Access Software Blade offers:

• Secure SSL VPN access
• Two-factor authentication
• Device/end-user paring
• Mobile business portal
• Provisioning of security features and email profile

Works cooperatively with additional gateway Software Blades, including the Check Point Intrusion Prevention System (IPS), Antivirus and Anti-malware and Firewall Software Blades.  

Check Point Mobile VPN is the safe and simple way to connect to your corporate resources from any application on your Apple iPhone and iPad devices. This enterprise-grade VPN application provides secure access to your corporate resources via an SSL or IPsec tunnel. Currently in Early Availability.

As one of the multiple end-user connection options, the Check Point Mobile client is best for simple and secure connectivity to corporate resources from smartphones and PCs and provides:

• One-touch access to your business web applications 
• Secure sync of your e-mail, calendar and contacts
• Always-on security
• Easy setup with downloadable app 
• Secure business portal customized for each user ensuring access to only authorized corporate resources
• Single sign-on to reduce login errors into corporate web applications

As one of the multiple end-user connection options, the SSL VPN portal is best for connecting securely to corporate resources through a portal from a web browser.

Secure Web-based Connectivity
Through an integrated Web portal, users can access web applications, web-based resources, shared files, and email. Administrators can customize the design of the web portal, including support for multiple languages.

 Endpoint Security On Demand - optional endpoint compliance and malware scanner

• Ensures that connecting endpoints are compliant with corporate policy
• Out-of-compliance users are offered links to self-remediation resources

Check Point Secure Workspace
End-users can utilize the Check Point virtual desktop that enables data protection during user sessions and enables cache wiping after the sessions have ended. Secure Workspace protects all session-specific data accumulated on the client side, and:

• Creates a secure virtual environment, insulated from the host
• Encrypts and deletes browser and application caches, files, etc., when session ends

DynamicID Direct SMS Authentication
The Mobile Access Software Blade can be configured to send a One-Time Password (OTP) to an end-user communication device (such as a mobile phone) via an SMS message. SMS two-factor authentication provides an extra level of security while eliminating the difficulties associated with managing hardware tokens.

Integrated Intrusion Prevention

• Provides protection against malicious code transferred in Web-related applications
• Blocks worms, various attacks such as buffer overflows, SQL and command injections, cross-site scripting, customizable HTTP worm catcher, directory traversal, header rejection, malicious HTTP code 

The SSL Network Extender (SNX) is used for remote users who need access to network (non-Web-based) applications. The SSL Network Extender offers a browser plug-in that provides remote access, while delivering full network connectivity for IP-based applications. It enables an on-demand SSL VPN Layer-3 tunnel to connect to your corporate resources. It supports any IP-based application, including ICMP, TCP and UDP, without requiring complex configuration to support each application. SSL Network Extender works on remote PCs without requiring administrator privileges.

SSL Network Extender is downloaded automatically from the SSL VPN portal to the endpoint machines, so that VPN client software does not have to be pre-installed and configured on users' PCs and laptops. SSL Network Extender tunnels application traffic using a secure, encrypted and authenticated SSL tunnel to the SSL VPN gateway.

The Mobile Access Software Blade is integrated into the Software Blade Architecture. It can be easily and rapidly activated on existing Check Point Security Gateways saving time and reducing costs by leveraging existing security infrastructure.