Secure Remote Access without VPN Complexity Zero-Trust Enforcement

© 2023 Check Point Software Technologies Ltd. All rights reserved.

The use cases for remote access have changed, and relying solely on VPNs is oftentimes not feasible. While VPNs have become more secure, they can be cumbersome and complicated to manage. And they make remote users part of the overall target network, which can enable them to move freely throughout the network and gain broad access to sensitive data unrelated to their roles.

Given the challenges of keeping up with sophisticated cyberattacks and providing remote access for a fast-growing mobile user base, a new approach is required. ZTNA (Zero Trust Network Access) can help overcome some shortcomings of traditional VPN-based access, but it still involves multiple components and significant configuration and administration. Unfortunately, the complexity of implementing cyber security is a key pain point for many organizations. And, higher complexity oftentimes translates into weaker security.

“Check Point and SparkView complement each other perfectly. A VPN-less Next Generation Remote Access that doesn’t burden the Quantum Firewall but enhances it with Zero Trust capabilities.” - M. Hochgesang

Joint Solution Check Point and beyond SSL have joined forces to address the above challenges by combining the strengths of Check Point network security firewalls and beyond SSL SparkView Zero Trust Remote Access. This integration is straightforward, transparent, and manageable. It takes ZTNA to a new level and reduces the enterprise attack surface to a bare minimum, delivering maximum security and easier implementation for remote access from any device with a browser.

SparkView eliminates the need for software rollouts to client devices or installations on target systems. With a single installation point on servers or virtual machines (VMs), configuration and administration is simple. In addition to leveraging the standards-based HTML5 encryption on client device browsers, SparkView offers a wide range of functionalities such as multi-monitor support, local printing, session shadowing, file transfer, and more.

Organizations can now seamlessly add clientless secure remote access from almost any device to company resources, while maintaining their established security policies. In partnership with Check Point, beyond SSL supports a true BYOD (Bring Your Own Device) strategy, enabling secure access for unmanaged devices and offering a unified experience across Windows, Linux, and applications on iPads, Android tablets, and smartphones. With this solution, customers can eliminate the need for software rollouts, minimize client support requirements, swiftly adapt to changing demands, and reduce both client hardware and administrative expenses.

CLIENTLESS ZERO-TRUST REMOTE ACCESS

© 2023 Check Point Software Technologies Ltd. All rights reserved.

How It Works This joint solution uses a secure TLS/SSL tunnel initiated by the client device (via HTML5 browser) to the beyond SSL SparkView host server which sits behind the Check Point firewall (see image below). This connection is first verified by the Check Point firewall which serves as a reverse proxy. The Check Point firewall then permits a peer- to-peer HTML5/WebSocket communication between the client’s remote device browser and SparkView host server. The session continues to be monitored by the firewall throughout the connection to assure maximum security.

Importantly, only encrypted pixel information is communicated to the client PC or mobile device, simply to provide the graphical view on the client-side browser. (By default, no actual application data is transmitted to the remote device, unless the security administrator explicitly enables file downloads.) The remote user views and enters information via their browser, which is converted once again into encrypted pixel information (not as files or data fields). This approach is somewhat analogous to using a ‘dumb terminal’ (text-only and keyboard) to work remotely on a mainframe computer. Therefore, all sensitive data remains secure behind the organization’s firewalled environment.

A Better Approach for Securing Business Continuity in Mobile Work Enviroments Check Point provides a perfect approach for protecting data within an organization, on-premises or in the cloud. For maximum data security in mobile work environments, SparkView ensures that the data remains within the Check Point-protected environment even during remote access, unlike traditional remote access methods where sensitive data is transmitted back and forth between the host and end client device. The Check Point firewall can therefore always maintain full protection. Moreover, SparkView’s true BYOD capability and high scalability enable uninterrupted business continuity and an in-office experience regardless of the user’s location.

Solution Benefits • true Zero Trust capabilities

• seamlessly integrates into Check Point infrastructure

• no client software needed, for true BYOD

• highly scalable in minutes

• no compromises on security by adopting existing security settings

CLIENTLESS ZERO-TRUST REMOTE ACCESS

Worldwide Headquarters 5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@checkpoint.com

U.S. Headquarters 959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233

www.checkpoint.com

© 2023 Check Point Software Technologies Ltd. All rights reserved.

About beyond SSL At beyond SSL, we focus on clientless remote access to data and applications from any device with a browser, protection from unauthorized access, and efficient sync and share solutions for confidential information (GDPR compliant). Together with Check Point, we provide Zero Trust Network Access (ZTNA) solutions.

About Check Point Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to corporate enterprises and governments globally. Check Point Infinity’s portfolio of solutions protects enterprises and public organizations from 5th generation cyber-attacks with an industry leading catch rate of malware, ransomware and other threats. Infinity comprises three core pillars delivering uncompromised security and generation V threat prevention across enterprise environments: Check Point Harmony, for remote users; Check Point CloudGuard, to automatically secure clouds; and Check Point Quantum, to protect network perimeters and datacenters, all controlled by the industry’s most comprehensive, intuitive unified security management; Check Point Horizon, a prevention-first security operations suite. Check Point protects over 100,000 organizations of all sizes.