Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

Firewall Software Blade

Firewall Software Blade

Overview

Check Point’s Firewall Software Blade is the world’s most proven firewall solution that’s trusted to secure 100% of the Fortune 100. The Firewall Software Blade provides the highest level of security, with access control, application security, authentication and Network Address Translation (NAT) available to block unauthorized network users and protect enterprise users and data. The Firewall Software Blade leverages the Security Management Software Blades, enabling remote intelligent management with maximum efficiency.

Check Point pioneered and patented Stateful Inspections. U.S. Patent # 5,606,668, issued on February 25, 1997, covers, among other things, Check Point Software's implementation of "Stateful Inspection" technology for controlling network traffic, which includes a flexible, easily-alterable network security method for examining the information flow into and out of a network and making security decisions based on previously stored results.

Application Awareness and Control
The Check Point Application Library enables application scanning and detection of more than 4,500 distinct applications and over 50,000 social networking widgets - regardless of port, protocol, or evasive technique used to traverse the network. To meet the dynamic nature of internet applications the Application Library is continuously updated.

The integration of the Application Library into Check Point Security Gateways allows customers to leverage the convenience of Web 2.0 technologies safely and securely.

Click here for the press release.

Key Benefits

  • The Check Point Firewall Software Blade protects 100% of the Fortune 100
  • Comprehensive network and application firewall with access control, attack protection, application security, authentication and Network Address Translation (NAT)
  • Comprehensive network and application firewall
  • Industry-leading and tight integration with Check Point Security Management Software Blades and Check Point Security Gateway Software Blades
  • High performance
  • Multi-platform support

Features

Access Control
Network administrators need the means to securely control access to resources such as networks, hosts, network services and protocols. Determining what resources can be accessed, and how, is the responsibility of Access Control.

Authentication
Authentication confirms the identity of valid users authorized to access your company network. Staff from different departments are assigned access permissions based on their level of responsibility and role within the organization. Authentication ensures that all users trying to access the system are valid users, but does not define their access rights.

Network Address Translation (NAT)
Whether computers have routable or non-routable addresses, the administrator may want to conceal their real addresses for security reasons, for example, to ensure that addresses cannot be seen from outside the organization or from other parts of the same organization. A network’s internal address contains the topology of the network and therefore hiding this information greatly enhances security.

Bridge Mode
A security gateway in bridge mode operates as a regular firewall, inspecting traffic and dropping or blocking unauthorized or unsafe traffic. A security gateway in bridge mode is invisible to all Layer-3 traffic. When authorized traffic arrives at the gateway, it is passed from one interface to another through a procedure known as bridging. Bridging creates a Layer-2 relationship between two or more interfaces, whereby any traffic that enters one interface always exits the other. This way, the firewall can inspect and forward traffic without interfering with the original IP routing.

Specifications

Feature Details
Protocol/Application support
Secures more than 200 applications and protocols
VoIP Protection
SIP, H.323, MGCP, and SIP with NAT support
Network Address Translation
Static/hide NAT support with manual or automatic rules
DHCP gateways
Security gateways can have dynamic IP addresses
VLAN
Up to 256 VLANs
Link aggregation
802.3ad passive and 802.3ad active
Bridge Mode / Transparent Mode
Supported under SecurePlatform in interface pairs
Extensive set of policy objects
Individual nodes, networks, groups, dynamic objects
IP Versions
IPv4 and IPv6
Fail-Safe Protections
Default Filter provides protection during boot time and prior to initial policy
Secure Internal Communications (SIC)
Certificate-based secure communications channel among all Check Point distributed components belonging to a single management domain
Authentication
Multiple authentication methods
User authentication, client authentication, session authentication
Local users
Local database user store included
RADIUS and RADIUS Groups
Multiple servers and MS-CHAPv2, MS-PAP methods
LDAP and LDAP Groups
Microsoft Active Directory, Novell Directory Server, Red Hat Directory Server, OPSEC certified LDAP server
TACACS+
Supported
RSA SecurID
Supported
X.509 certificates
Supported using the included Certificate Authority or third party CAs
Customizable Authentication messages
Supported

Support

Threats to networks are constantly evolving and becoming more sophisticated. To maintain continuity and productivity, defenses must advance as quickly to deliver the technology and features that protect the business. Check Point Services protect against emerging threats with critical hot software fixes, service packs, and major software upgrades.

Benefits

  • Ensure continuous security with access to critical hot fixes and service packs
  • Maximize ROI and investment with access to major upgrades and enhancements
  • Increase security with the latest applications, features, and technologies

More information

Next Steps

Resources







Software Blades

Security Gateway Software Blades

>