Safe@Office Appliances

Overview

Safe@Office UTM appliances deliver proven and integrated security, networking and connectivity features right out-of-the-box. Safe@Office offers a simple, affordable and reliable solution to keep small business networks protected and connected.

Key Benefits

• Delivers an affordable, easy-to-use, all-in-one security solution for small businesses
• Provides the same proven security technologies trusted by Fortune 100 companies
• Addresses industry-specific network security regulations
• Maximizes employee productivity
• Streamlines ongoing security policy administration
• Ensures around-the-clock business continuity

Features

UNMATCHED PROTECTION

• Industry’s Most Proven Firewall
• Streaming Gateway Antivirus
• Comprehensive Messaging Security with Anti-Spam
• Web Filtering

Industry’s Most Proven Firewall
Based on the same Check Point technologies that secure the Fortune 100, Safe@Office appliances include the industry’s most proven firewall, supporting hundreds of applications, protocols and services out-of-the-box. Broad application and protocol support provides comprehensive access control across a small business network, including the ability to block non-business related applications such as Instant Messaging (IM) and Peer-to-Peer (P2P) applications. Safe@Office appliances also include Check Point SmartDefense intrusion prevention technology to ensure small business networks are protected from known and unknown attacks. SmartDefense protects networks, applications and users from threats such as Denial-of-Service, post scans, and buffer overflows and ensures proper usage of Internet resources, such as FTP, instant messaging, Peer-to-Peer (P2P) file sharing and more.

Streaming Gateway Antivirus
UTM-1 Edge appliances come equipped with integrated gateway antivirus to provide an extra layer of protection by blocking worms and viruses before they can enter the network. This provides the ability to scan email (POP3, IMAP, and SMTP), FTP and Web (HTTP) traffic, along with other protocols for possible threats. There is no limitation on the file size being scanned and it supports on-the-fly file decompression.

Comprehensive Messaging Security with Anti-Spam
Messaging Security from Check Point provides comprehensive protection for small business messaging systems. The multi-dimensional approach protects email servers, provides highly accurate spam protection and defends against a wide variety of virus and malware threats within email.

IP reputation anti-spam	Blocks spam and malware at the connection level by checking the sender's reputation against a dynamic database of known malicious IP addresses.
Content-based anti-spam	Protects against known forms of spam by comparing a “fingerprint” of each incoming mail message to a dynamic database with millions of known spam.
Block/allow list anti-spam	Utilizes block or allow lists to deny obvious email offenders and allow trusted senders, including blocking entire domains or marking entire domains as safe.
Mail antivirus	Blocks worms and viruses before they can enter the network. Supports standard email protocols (POP3, IMAP, and SMTP), including Web-based email.
SmartDefense email server protection	Protects against a broad range of threats, including DDos attacks that target the messaging infrastructure itself.

The antivirus policy setup provides a quick and simple way to define the traffic types that should be scanned. Gateway streaming antivirus can be used in combination with Check Point Endpoint Security or ZoneAlarm® Small Business Edition at the desktop to protect against zero-hour virus outbreaks, providing an additional security layer against viruses in the wild.

Web Filtering
Inappropriate Web surfing can introduce security threats, increase legal liability and decrease employee productivity. Safe@Office appliances integrate best-of-breed Web filtering using an extensive database of categories and associated URLs. Administrators can define an acceptable Web access policy for the organization and protect it from threats such as spyware and viruses and new risks from inappropriate web content. Custom web rules can also be defined to block or allow access to specific websites and URLs.

SECURE NETWORK ACCESS –ANYTIME, ANYPLACE

• VPN and Remote Access
• Network Access Control
• Secure Wireless Connectivity
• Secure Hot Spot Support
• Wireless Roaming
• Extensive Networking and Traffic Management Capabilities
• Integrated ADSL Modem

VPN and Remote Access
Safe@Office integrates VPN and remote desktop capabilities, allowing secure remote access to the network to increase productivity and ensure business continuity without compromising IT resources. Safe@Office appliances authenticate remote user identities to ensure that only authorized users have network access, encrypting communications to ensure complete confidentiality. Teleworkers and road-warriors can use the bundled VPN-1® SecuRemote™ VPN client or L2TP IPSec VPN client on their laptops, PDAs and even iPhones to securely access resources. With the Remote Desktop capability you can also remotely control computers in the network directly from a web browser. Safe@Office site-to-site VPN ensures business offices are interconnected with permanent, highly-secure tunnels.

Network Access Control
Safe@Office appliances provide an additional layer of network security for small businesses in the form of Network Access Control (NAC), ensuring that both LAN and WLAN users securely sign on before gaining physical access to the network. In addition, a built-in EAP (Extended Authentication Protocol) authenticator eliminates the need for an external RADIUS server by tying WPA Enterprise and 802.1x access control to an internal user database. For wired networks, 802.1x NAC normally only allows a single host to connect to each switch port but Safe@Office provides the option of allowing multiple hosts to connect to the same port, providing an affordable solution for offices without a 802.1x-enabled switch. This makes NAC so easy to use that it is now suitable even for the smallest of networks.

Secure Wireless Connectivity
The Safe@Office 500W appliance integrates a WLAN access point that supports the Super-G and Extended Range (XR) standard, enhancing the range and network speeds of the wireless access point. Additionally, wireless networks can be segmented into multiple virtual access points, each with different security policies and encryption settings. Remote users are authenticated using a variety of authentication standards including the latest WPA2. Safe@Office also supports IPSec VPN technology to encrypt wireless communication, preventing data from being viewed or corrupted during transmission.

Secure Hot Spot Support
Safe@Office appliances can be used to create guest access networks by setting up hot-spot networks. Administrators can easily require Web-based user authentication or terms-of-use approval prior to providing network access. This enables convenient, yet controlled access for guest users without compromising corporate resources.

Wireless Roaming
By using the Wireless Distribution System (WDS) capability, the network can be extended by interconnecting two or more Safe@Office appliances. This allows wireless clients (e.g. laptops, PDAs) to connect seamlessly to the wireless network without the need to change IP addresses.

Extensive Networking and Traffic Management Capabilities
More than just a security appliance, Safe@Office is a full-fledged network router that includes a four port LAN switch, a dedicated DMZ and a WAN port (Ethernet or ADSL). Static and dynamic routing options are available for complete interoperability with even the most complex networks. Safe@Office supports QoS capabilities and can act as a transparent bridge.

Integrated ADSL Modem
Safe@Office appliances can be equipped with an optional, integrated ADSL2/2+ modem, supporting download speeds of up to 24Mbps. By eliminating the need for an external ADSL modem, these appliances provide a complete connectivity and security solution, thus further simplifying the initial deployment.

QUICK SETUP AND EASY MANAGEMENT

• Quick and Easy Setup
• Intuitive Security and Network Monitoring
• Up-to-Date Security – Without Any Hassle

Quick and Easy Setup
The simple Web-based management interface enables administrators to secure their small business in minutes. The setup wizard allows the selection of a preset firewall policy, or the creation of a custom security policy. Security rules are as flexible as business needs dictate and can be easily modified with a variety of remote management options.

Intuitive Security and Network Monitoring
Safe@Office logs information on attempted attacks and displays it in an easy-to-follow, color-coded report, which includes the IP addresses from which the attacks originated. A “Who Is” utility allows administrators to identify an IP address’ owner, providing Internet “caller ID” capability. Built-in traffic monitoring and packet capture tools are also provided, allowing the monitoring and control of incoming/outgoing traffic to ensure efficient utilization of the broadband connection.

Up-to-Date Security – Without Any Hassle
For effective protection against new and evolving threats, network security must be kept up-to-date. Optional subscription-based services provide continuous software and antivirus updates, including URL filtering services, periodic security reports (providing in-depth information on traffic, firewall activity, antivirus activity and more), and anti-spam and dynamic DNS services. Subscription-based services are provided by Check Point or by its Small Business MSSP Partners.

Support & Warranty

Safe@Office support packages are provided by select service providers and SofaWare, a Check Point company. To locate a service provider near you, please use the Service Provider Locator.

SofaWare provided support plans include the Basic AV & IPS plans as well as a Web filtering plan. You can learn more about SofaWare support plans by visiting SofaWare – Security Services.

Purchase Safe@Office support from a Check Point Small Business Reseller or directly from SofaWare today.

Safe@Office appliances include a 1-year hardware warranty and 90 day software subscription. Safe@Office is developed by SofaWare Technologies, a Check Point company.