CloudGuard Network Security for Microsoft Azure Virtual WAN Comprehensive Security Protections for Azure Virtual WAN and Hybrid Clouds

Hybrid Cloud Security Overview The wide adoption of cloud architectures is being driven by the desire to transform businesses for greater efficiency, speed, agility, and cost controls. While cloud solutions offer many advantages over traditional IT infrastructure, legacy security approaches do not address the dynamic nature of cloud environments, and can expose organizations to a new set of security risks.

Security insertion and management is a significant challenge for the cloud. Organizations struggle to manage disparate security solutions for their premises and cloud environments, resulting in a lack of consistent policy enforcement that makes regulatory compliance difficult. At the same time, the frequency and sophistication of threats continues to increase. Security solutions protecting premises-based environments do not extend to the cloud, leaving them exposed and making them attractive targets for cyber criminals. Once a cloud environment is breached, attacks are able to spread laterally from VM to VM within the cloud and even extend externally to corporate networks.

2CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

Organizations often own and maintain multiple datacenters in multiple regions and multiple platforms. This creates a challenge for security managers: maintaining, securing, and peering multiple datacenters. Complex connectivity and security posture causes security issues and lack of agility in business growth. Network security in the cloud is more complex than it is on-premises because the cloud is dynamic and ephemeral. When connecting cloud infrastructures with existing infrastructures (on-premises and branch offices) the challenge is even greater.

Microsoft Azure Virtual WAN is a cloud networking service with a hub-and-spoke architecture for connecting multiple Azure regions, on-premises sites, remote users, branch offices and other clouds. Virtual WAN benefits include simplified network management, improved reliability, and reduced costs through optimized routing and traffic flow. Virtual WAN customers can easily deploy and manage complex hybrid networks, enhance application performance, and improve user experiences across different locations.

CloudGuard Network Security for Microsoft Azure Virtual WAN delivers advanced, multi-layered security for the Virtual WAN deployment, protecting assets in the cloud from attacks while enabling secure connectivity between enterprise networks, Azure vNETs and hybrid networks. Designed for the dynamic security requirements of cloud deployments, CloudGuard provides advanced threat protections to inspect all traffic flows. Fully integrated security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus, Anti-Bot, Threat Extraction and Threat Emulation. CloudGuard Network Security provides consistent security policy management, enforcement, and reporting, making migration to Azure painless.

Benefits • Centralized connectivity and security enables streamlined

and consistent security across all distributed environments

• Inspect all traffic flows and support all security use cases to ensure broad protection against various threats

• The simple and scalable solution allows easy management and monitoring of network traffic

• The consumption-based solution on Azure Marketplace allows better cost management: paying only for the services you use, instead of what you deploy

Top use cases • Prevent threats, gain visibility and control with best-in-class network security

• Reduce attack surfaces and implement segmentation to enforce zero-trust and stop lateral attacks

• Scale rapidly with the cloud-native integration for easy automation and orchestration

• Secure the VPN connectivity to all parts of your distributed network

• Unified Security Management

3CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

Unified policy management and security that follows VMs as they migrate from the data center to Azure Virtual WAN

Advanced Threat Prevention for Azure Virtual WAN Check Point and Microsoft partnered to deliver a best-in-class experience for customers looking to extend advanced security protections to their Azure Virtual WAN and hybrid environments. Seamlessly integrating with Azure Virtual WAN, CloudGuard provides reliable and secure connectivity to public cloud assets while protecting applications and data with industry-leading threat prevention. Additionally, CloudGuard helps organizations by dramatically simplifying security management and policy enforcement across private, hybrid, and public cloud networks. IT organizations can now achieve an advanced security posture that moves with Virtual Applications as they migrate from data centers to Azure and Azure Virtual WAN.

4CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

As an Azure certified technology solution, CloudGuard Network Security complements Azure cloud security controls to enable you to easily and seamlessly secure your assets in the cloud with elastic scalability and high availability using a cloud security solution integrated with Azure Virtual WAN.

Customers deploy the cloud security gateways automatically into the Azure Virtual WAN hub directly from the Marketplace using an Azure Managed Application, with PAYG pricing based on the volume of inspected traffic so customers pay for what they use instead of what they deploy.

Complete Visibility and Control for Azure CloudGuard gives businesses the confidence to securely migrate and host their data center resources and workloads to hybrid clouds, providing tangible customer benefits including:

• Consistent protection across your data center and cloud-based workloads in Azure Virtual WAN from potential security breaches and malware

• Unified security management, improved visibility and consolidated logging across Azure Virtual WAN, public and private clouds and on-premises workloads.

• Automated workflows and orchestration along with dynamic security policies leveraging Azure context minimize configuration errors while lowering operations costs

5CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

Comprehensive Security Protections CloudGuard Network Security provides industry-leading threat prevention security to keep Azure public cloud and Azure Virtual WAN networks safe from even the most sophisticated attacks. Fully integrated security protections include:

• Firewall, Intrusion Prevention System (IPS), Antivirus, and Anti-Bot technology protect workloads in the cloud from unauthorized access and malicious network attacks

• IPSec VPN allows secure connectivity over a dedicated and encrypted tunnel between Azure Virtual Networks (VNets) and the Enterprise network

• Remote Access allows remote users to connect to Azure clouds using an SSL encrypted connection with two-factor authentication and device pairing

• Data Loss Prevention protects sensitive data from theft or unintentional loss

• SandBlast Zero-Day Protection sandbox technology provides the most advanced protection against malware and zero-day attacks

Check Point Security Management provides real-time visibility into activity that spans the data center to the Azure public cloud.

Centralized Management Policy management is simplified with centralized configuration and monitoring of cloud and on-premises security from a single console. This ensures that the right level of protection is applied consistently across both hybrid cloud and physical networks. Hybrid cloud workload traffic is logged and can be easily viewed within the same dashboard as other logs.

6CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

Consolidated Logs and Reporting CloudGuard gives organizations complete threat visibility and enforcement for hybrid cloud environments. Check Point Security Management consolidates monitoring, logging, and reporting across cloud and on-premises networks. Security Management logs can also be exported to 3rd party SIEM platforms. Security reports specific to cloud workload traffic can be generated to track security compliance across the hybrid cloud network, simplifying reporting and audits and making it easy to demonstrate compliance with industry regulations. With all aspects of security management such as policy management, logging, monitoring, event analysis, and reporting centralized via a single dashboard, security administrators get a holistic view of their security posture across the entire organization.

Rapid and Flexible Deployment

Easily and affordably extend security to your Azure Virtual WAN using rapid one-click deployment of CloudGuard, available in the Azure Marketplace with PAYG consumption-based billing based on throughput. Quickly customize security protections to your specific business needs using Check Point’s advanced threat prevention suite of security technologies.

Check Point CloudGuard Network Security for Azure Virtual WAN on Azure Marketplace

7CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

Integration with Microsoft Sentinel CloudGuard integrates with Microsoft Sentinel, providing a complete view of security information and incidents across an organization’s Azure footprint and other hybrid clouds. With CloudGuard data, Sentinel customers can correlate security events coming from CloudGuard with other events across the cloud (and from other cloud providers) to generate alerts, root-cause cloud security issues and initiate remediation activities.

Microsoft Defender for Cloud Microsoft Defender for Cloud enhances cloud security with advanced threat detection capabilities and centralized management. It is also integrated with CloudGuard, providing the capability to rapidly provision CloudGuard security gateways in just a few clicks. Alerts and logging from CloudGuard security gateways are integrated in Microsoft Defender for Cloud so that security events can be viewed from a single dashboard.

Summary

8CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

Check Point Software Technologies provides uncompromising protection against all types of cyberattacks while dramatically simplifying IT security management. Check Point CloudGuard Network Security for Azure Virtual WAN takes advantage of the cost efficiencies and automation of Virtual WAN while tightly integrating advanced security features designed to meet the efficiency and scalability requirements of large deployments in the public cloud.

CloudGuard enables customers to confidently extend security to their Azure Virtual WAN infrastructure with the full range of protections of the Check Point threat prevention architecture. CloudGuard prevents network attacks and data breaches while enabling secure connectivity to Azure and Azure Virtual WAN public cloud environments. CloudGuard also integrates with a wide variety of public cloud and private cloud environments including those built on SDDC technology.

To learn more about how Check Point CloudGuard Network Security and Microsoft Azure Virtual WAN provide advanced security protections for public and hybrid cloud networks, schedule a free demo of CloudGuard or contact your Check Point or Microsoft Azure partner or sales representative.

9CLOUDGUARD NETWORK SECURITY FOR MICROSOFT AZURE VIRTUAL WAN

About Check Point Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber-attacks with an industry leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and mobile device held information, plus the most comprehensive and intuitive one point of control security management system. Check Point protects over 100,000 organizations of all sizes.

About Microsoft Azure Azure (www.azure.com) is a leading public cloud computing services provider globally, provides an enterprise-grade highly reliable, scalable, low-cost computing platform in the cloud that powers businesses in countries around the world. With data center locations in 54 regions, customers across all industries are using the Azure cloud computing platform to launch applications across a wide variety of use cases taking advantage of the following benefits offered by Azure: low cost, agility, elasticity, security, openness, flexibility, reliability and compliance.

Worldwide Headquarters 5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@checkpoint.com

U.S. Headquarters 959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233

www.checkpoint.com

© 2024 Check Point Software Technologies Ltd. All rights reserved.

Next 2: Page 2: Page 3: Page 4: Page 5: Page 6: Page 7: Page 8: Page 9:

Previous 2: Page 2: Page 3: Page 4: Page 5: Page 6: Page 7: Page 8: Page 9: