WebCheck Endpoint Software Blade

The WebCheck Endpoint Software Blade maximizes browser security by virtualizing the browser and creating an isolated protected sandbox for the web browser—thereby segregating corporate data from the Internet. Should a user accidentally visit an infected web site that delivers a drive-by malware download through a browser or if a malicious plug-in is downloaded, no permanent damage will result. Instead, the attack will be contained inside the virtual sandbox and deleted when the browser session ends.

Signature matching and heuristics alert users to both known and unknown phishing pages. The Check Point heuristic detection engine identifies fraudulent copies of major financial, social networking, webmail and shopping sites.

In addition to browser virtualization, the WebCheck Endpoint Software Blade stops users from going to dangerous sites. It detects phishing web sites using a dual-mode engine comprised of a phishing site signature database and a proprietary heuristic method. The signature database is continuously updated and provides up-to-the-minute protection from known phishing web sites.

Check Point has also developed a heuristic phishing detection method that can preemptively spot fake and fraudulent copies of over fifty financial, social networking, webmail and shopping web sites. Using this heuristic anti-phishing engine, the WebCheck Endpoint Software Blade can identify threats before they are reported and placed on the signature based block lists.

 

The WebCheck Endpoint Software Blade rates each site visited to warn users if a site has weak or suspicious credentials. Numerous attributes are examined to determine if the site is dangerous. For example, the age of the domain, whether the IP is listed in public spam blocking lists, or if the site is hosted in certain foreign countries.

The WebCheck Software Blade is centrally managed by the Endpoint Policy Management Software Blade, enabling central policy administration, enforcement and logging from a single, user-friendly console. Centralized management offers unmatched leverage and control of security policies and multiple deployment options offer easy installation and minimize user impact, for a reduced overall cost of operations.

Administrators can centrally configure and manage the WebCheck Endpoint Software Blade as part of the endpoint security management console. The browser security policy can be enforced across multiple browser types including multiple versions of Windows Internet Explorer and Mozilla Firefox.

Using the web-based management console, administrators can gain quick, central insight into browser security events across the enterprise. Using the built-in reports and graphs, administrators can spot trends and investigate as needed.

Endpoint Security Software Blades from Check Point bring unprecedented flexibility, control and efficiency to the management and deployment of endpoint security. Choose from six Software Blades to deploy only the protection you need, with the freedom to increase security at any time from a single central management console.

Browser Support
Browser Protected by WebCheck	Internet Explorer 6, 7, 8 Mozilla Firefox 2, 3
Client Platform Support
Operating Systems	Windows 7 (32 & 64 bit) Windows Vista (32 & 64 bit) Windows XP Pro (32-bit, SP2 and later)
Client Language Support
Languages	English Japanese Chinese (simplified)

Management Platform
See Endpoint Policy Management Software Blade

The WebCheck Endpoint Software Blade protects browsers from attacks in the following areas:

Browser Attack Target	Attack Vector
External Browser Plug-in	Drive-by malware via plug-in outside browser (Flash, Acrobat, Office, etc.)
Internal Browser Plug-in	Drive-by malware via plug-in inside browser
Un-patched Vulnerabilities	Drive-by malware via browser holder
Browser Helper Object (BHO)	Drive-by malware via plug-in outside browser

The WebCheck Endpoint Software Blade provides preemptive heuristic phishing protection for major web sites. Examples include:

Category	Web Site (partial list)
Banking	Bank of America Wachovia Wells Fargo
Ecommerce	eBay PayPal Amazon
Social Networking & Webmail	MySpac3 Yahoo Mail MSN Hotmail