UTM-1 Edge Appliances

Overview

Check Point UTM-1™ Edge appliances deliver all-inclusive, centrally managed, security solution to provide the perfect blend of simplicity and security for branch offices and remote-sites. The new Check Point appliances offer extended UTM capabilities, superb reliability and unprecedented ease of use. UTM-1™ Edge has the most flexible centralized management system and is built with the same enterprise-class technology used by 100 percent of Fortune 100 companies. UTM-1 Edge Total Security offerings enable customers to buy everything they need to secure their network in a single SKU, and to further streamline their purchasing and deployment process.

Key Benefits

• Secures an entire branch office in a single, turnkey appliance
• Protects branch office network, systems, and users from all Internet threats including email spam
• Provides flexible and reliable connectivity through multiple LAN and Internet connectivity methods
• Quick and easy provisioning of new systems
• Flexibility to manage a few or thousands of remote site devices from a single, central management console.

Features

Security Features

• Industry’s Most Proven Firewall
• Secure Site-to-Site Connectivity and Remote Access
• Streaming Gateway Antivirus
• Comprehensive Messaging Security with Anti-Spam
• Web Filtering
• Network Access Control

Industry’s Most Proven Firewall
Based on the same Check Point technologies that secure the Fortune 100, UTM-1 Edge appliances include the industry’s most proven firewall, supporting hundreds of applications, protocols, and services out-of-the-box. Broad application and protocol support provides comprehensive access control across the network, including the ability to block non-business related applications such as Instant Messaging (IM) and Peer-to-Peer (P2P) applications. UTM-1 Edge appliances also include Check Point’s SmartDefense intrusion prevention technology to ensure remote sites are protected from known and unknown attacks. SmartDefense protects networks, applications and users from threats such as Denial-of-Service, post scans, and buffer overflows and ensures proper usage of Internet resources, such as FTP, instant messaging, Peer-to-Peer (P2P) file sharing, and more.

Secure Site-to-Site Connectivity and Remote Access
UTM-1 Edge ensures communications privacy, with IPSec VPN functionality that offers strong encryption and authentication. UTM-1 Edge appliances can be easily added to existing VPN communities to enable secure, site-to-site connectivity. UTM-1 Edge appliances also provide an ideal way for employees and business partners to connect to the trusted network, by providing IPSec VPN connectivity with support for various VPN clients, including Check Point VPN-1 SecureClient, SecuRemote, as well as L2TP VPN clients.

Streaming Gateway Antivirus
UTM-1 Edge appliances come equipped with integrated gateway antivirus to provide an extra layer of protection by blocking worms and viruses before they can enter the network. This provides the ability to scan email (POP3, IMAP, and SMTP), FTP, and Web (HTTP) traffic, along with other protocols for possible threats. There is no limitation on the file size being scanned and it supports on-the-fly file decompression.

Comprehensive Messaging Security with Anti-Spam
Messaging Security from Check Point provides comprehensive protection for an organization's messaging infrastructure. The multidimensional approach protects the email infrastructure, provides highly accurate spam protection, and defends organizations from a wide variety of virus and malware threats within email.

The UTM-1 Edge anti-spam policy allows the administrator to specify with a very fine level of granularity which email traffic should be scanned and which should be considered safe.

Web Filtering
Inappropriate Web surfing can introduce security threats into the organization, as well as add risk from increased legal liability, lost productivity, and compliance issues. UTM-1 Edge appliances support best-of-breed Web filtering based on an 3rd party URL filtering services. This enables you to define an acceptable web-access policy for your organization and protect it from threats such as spyware and viruses, as well as new risks from inappropriate Web content.

Network Access Control
UTM-1 Edge includes support for 802.1x port-based authentication enabling organizations to control network access at branch offices based on endpoint security policy compliance and user access privileges. UTM-1 Edge also includes a built-in EAP (Extended Authentication Protocol) authenticator, enabling administrators to use WPA Enterprise and 802.1x access control without requiring an external RADIUS authentication server, making NAC easy to use in even the smallest networks.

Networking Features

• Secure Hot Spot Support
• High Availability
• Quality of Service

Secure Hot Spot Support
UTM-1 Edge appliances can be used to create guest access networks by setting up hot-spot networks. Administrators can easily require Web-based user authentication or terms-of-use approval prior to providing network access. This enables convenient, yet controlled access for guest users, without compromising corporate resources.

High Availability
UTM-1 Edge appliances include high-availability options to ensure that security keeps pace with network- and business-critical applications. UTM-1 Edge appliances support WAN redundancy and load-balancing to ensure persistent connectivity and service availability. Dialup backup is also supported, providing either a primary or a secondary Internet connection if the primary broadband connection is not available.

Quality of Service
Network QoS is important where business-critical traffic, such as VoIP or VPN traffic is competing with noncritical traffic over a single Internet connection. UTM-1 Edge appliances include a comprehensive traffic management system that offers weighted priorities, bandwidth guarantees, and bandwidth limits. These allocate connectivity resources as predefined by business priorities and goals. Additionally, UTM-1 Edge W appliances support Wireless Multimedia QoS, which prioritizes multiple types of traffic flow from different applications— such as audio, video, and voice—under various environmental and traffic conditions.

Management Features

• Centralized, Large Scale Management
• Quick and Easy Setup
• Centralized, Automatic Updates

Centralized, Large Scale Management
UTM-1 Edge appliances can be centrally managed with Check Point SmartCenter or Provider-1, greatly simplifying security deployment in remote offices and locations. This allows administrators to centrally define a security policy for the entire network, including internal security, main sites, and remote sites. And with SmartLSM™, a profile-based management add-on designed specifically for the needs of large-scale VPN and security installations, administrators can define a single security profile and apply it simultaneously to thousands of UTM-1 Edge appliances from a single, central location. This enables rapid deployment of UTM-1 Edge gateways, dramatically reducing the costs and time required to deploy and manage security for thousands of devices.

Quick and Easy Setup
UTM-1 Edge appliances can be set up in less than 10 minutes, offering truly simple deployment to sites that have minimal IT resources. Even non-technical staff can easily perform initial setup and configuration.

Centralized, Automatic Updates
To maintain a preemptive security environment and ensure networks stay safe from new attacks, optional SmartDefense Services provide ongoing and automatic updates including new SmartDefense protections, antivirus signature updates, anti-spam updates and Web filtering services. SmartDefense Services also includes configuration advisories best practices security policies. Updates can be downloaded automatically and distributed to remote locations at preset intervals.

Hardware Options

• Secure Wireless Connectivity
• Integrated ADSL Modem
• Industrial Model for Production Floor and SCADA Environments

Secure Wireless Connectivity
UTM-1 Edge W appliances integrate a WiFi access-point (802.11b/g) supporting multiple security protocols, including 802.1x, IPSec over WLAN, RADIUS, WEP, WPA and WPA2 authentication. They also have dedicated WLAN interfaces from which you can set specific security rules for WLAN segments. This protects wireless interfaces by granting access only to authorized users, thereby preventing hackers from attacking corporate applications or resources. In addition, the wireless interface can be segmented into as many as four virtual access points, each with separate security policies and encryption methods.

Integrated ADSL Modem
UTM-1 Edge appliances are also available with integrated, high-speed ADSL modems, which eliminate the need for external ADSL modems and provide administrators with simple deployment options. It supports the latest ADSL standards, including ADSL v2/2+, and is available with Annex A and Annex B standards.

Industrial Model for Production Floor and SCADA Environments
UTM-1 Edge appliances are also available in an industrial model, designed protect Industrial Ethernet environments as well as supervisory control and data acquisition (SCADA) equipment from unauthorized access and attacks. UTM-1 Edge Industrial appliances comply with industrial mechanical specifications for dust, heat, and vibration, maximizing durability in harsh environments. The solid-state design of UTM-1 Edge Industrial appliances has no moving parts that could wear out over time, and it has flexible mounting options such as DIN rail, rack, and wall mounting.

Support and Warranty

Check Point offers a range of support programs for customers using our appliances covering both software and hardware issues.

Check Point offers support online, by phone and onsite directly or via its network of partners. Opening a ticket online with Check Point Support via Check Point User Center.

Support Programs for Appliances
Check Point's Appliance Support programs provide technical support, software updates and upgrades, and the replacement of faulty hardware.

Please visit our Support Programs for more information or Compare Programs for a summary of features.

Hardware Warranty
Check Point warrants that hardware components of its appliances shall be free from material defects and will function according to the documentation provided for a period of one year from the date of appliance activation by Check Point. If the unit has a hardware failure during this warranty period, customer can begin a RMA process. Please visit Hardware Warranty for more information.

Check Point Enterprise Support Lifecycle Policy
Check Point Enterprise Support Lifecycle Policy outlines the product support guidelines for a product's lifecycle. The objective of this policy is to standardize and normalize product lifecycle practices, thereby enabling Check Point customers to make more informed purchase, support and upgrade decisions.

All Check Point products (except third-party products sold by Check Point) are covered by this policy. Customers who are operating Check Point products under a valid Support & Maintenance Agreement are entitled to the benefits associated with this policy.