UTM-1 Edge Appliance: Total Security
Because branch offices are connected to your core network via private lines or a virtual private network over the Internet, they represent a possible back door to your network. To prevent this, UTM-1 Edge lets you provision the same level of security to a small remote location as you would to a large campus.
Enterprise-Class UTM for the Branch Office
A major challenge companies face when securing the branch office is that solutions designed for these smaller locations often offer lesser security than those solutions protecting large locations. UTM-1 Edge takes the opposite approach. It delivers firewall, VPN, intrusion prevention, and antivirus technologies based on the same ones used to protect sensitive information at the largest sites—ensuring that the branch office is not the weak security link in the network.
Firewall: UTM-1 Edge incorporates Check Point’s FireWall-1 technologies including Stateful Inspection and Application Intelligence to provide the branch office with the most proven access control available.
VPN: UTM-1 Edge enables organizations to use Check Point’s One-Click VPN technologies to quickly set up either hub-and-spoke or fully-meshed VPNs to a large number of gateways in minutes with minimal configurations. UTM-1 Edge can also participate in route-based VPNs with other Check Point gateways. For branch offices that have remote access users, UTM-1 Edge terminates connections for both VPN-1 SecuRemote and Integrity SecureClient.
Intrusion Prevention: SmartDefense intrusion prevention is integrated into UTM-1 Edge. Regularly updated through SmartDefense Services, SmartDefense intrusion prevention protects against application-layer attacks like worms by deeply understanding how protocols and application such as VoIP, Exchange, Web, POP3/SMTP, or various instant messaging or peer to peer applications are meant to work.
Antivirus: UTM-1 Edge includes advanced gateway antivirus technology that instpects Web, email, an FTP traffic as well as being flexible enough to inspect customer ports. The UTM-1 Edge antivirus technology uses streaming inspection to improve performance quality for end users and to ensure inspection for any size files.
Total Access Protection
UTM-1 Edge appliances include 802.1x port-based authentication for both LAN and wireless LAN users. With this, organizations can control network access by computers all the way out to the branch office while implementing a vendor-neutral strategy.
Client verification with Integrity - Before allowing clients onto the network, Integrity and UTM-1 Edge cooperatively ensure that the machine meets corporate security standards and that no malware is running.
Dynamic VLAN Assignment - Based on a user’s authentication against RADIUS servers, he or she can be assigned to the proper VLAN. For example, salespeople may be assigned to one VLAN while people working in operations functions are assigned to another.
User Quarantine - If someone fails to properly authenticate, that user can be quarantined within their physical segment—limiting exposure to unauthorized users.
Unified Security Architecture
UTM-1 Edge is part of Check Point’s Unified Security Architecture, providing a common security technology across the enterprise. Not only does this enable simplified centralized management, it also ensure that organizations have a predictably high level of security at large offices data centers, and branch offices.