Expanded Threat Prevention, Operational Agility, and Scale — for DevOps and Data Centers Check Point’s network security software release R82 empowers organizations to future-proof their security and adapt quickly to evolving threats on premises and in the cloud. With new AI engines, quantum-ready VPN encryption, and effortless HTTPS inspection, enterprises are ready for previously unseen threats, like zero-day campaigns, quantum-computing-based hacking, and encrypted web traffic where attacks hide. R82 introduces important architectural enhancements to drive agility, scale, and speed for data centers and DevOps. This release also offers simpler policy management and lightning-fast security provisioning.

AI-Powered Threat Prevention

Data Center Agility

Operational Simplicity & Scale

Block the newest types of zero-day threats with new

AI-powered engines

Protect today’s VPN traffic against impending

quantum computing hacks

Accelerate DevOps with automated, self-service security

to dynamically modify firewall policies instantly

Adapt data center & virtual network infrastructure in seconds with a rapid virtual systems mode

Streamline firewall clustering with carrier-class resilience, faster provisioning and quick updates

Scale and resilience for any requirement, with built-in

software-based load sharing

Adaptive, effortless HTTPS inspection for maximum security

& user experience

Quantum Software R82: The Best Security, Simplicity, and Scale — Just Got Better

For Quantum Firewalls & CloudGuard Network

QUANTUM SOFTWARE R82 2

AI-Powered Threat Prevention Powerful new AI engines block 99.8% of zero-day attacks and uncover evasive threats in the first 24 hours. Enforce strict security policies and block dangerous or inappropriate websites by accurately categorizing unknown URLs. Additionally, R82 offers the latest NIST-approved VPN encryption to protect today’s data against future quantum computing-based hacking.

New Threat Prevention Engines

New cyber threat trends are more evasive than ever. In fact, Check Point Research shows that 90% of phishing sites last 24 hours or less, making quick identification critical to protection. The most sophisticated innovations are required to protect organizations.

Check Point’s new AI engines represent a groundbreaking shift in how we utilize data, emphasizing a more robust multi-dimensional approach. By analyzing data from various sources, identifying relationships, and processing information over time, these engines obtain a deep understanding of global traffic patterns, enabling Check Point to prevent zero-day campaigns.

New AI/ML Engines find hidden relationships and patterns to block novel malicious campaigns:

• ThreatCloud Graph: Leverages ThreatCloud AI’s knowledge base to form relationship graphs, identifying attacks patterns to prevent zero-day threats.

• Kronos: Inspects behavior over time with AI and signal processing algorithms to detect malicious activity, preventing zero-day C2, phishing campaigns and other threats.

• Deep Brand Clustering: Prevent zero-day brand spoofing campaigns with a patent-pending unsupervised deep learning engine. This engine clusters websites into local and global brands and determines whether it is an attack.

Advanced URL Categorization accurately categorizes 98% of URLs to block previously uncategorized dangerous or inappropriate web sites. By using AI natural language processing (NLP), website text is scanned to verify that the URL category is accurately assigned, so that your security policies are fully and correctly enforced.

Strong DNS Security blocks the newest breed of DNS attacks with:

• Advanced protection against NXNS attacks • Configuration granularity • Support for DNS over HTTPS Inspection • Prevention of DNS queries to newly created domains • Enhanced visibility of DNS security statistics in the SmartView Dashboard

QUANTUM SOFTWARE R82 3

Immunity Against Future Quantum Computing Encryption Cracking

Hackers are recording VPN encrypted traffic today with plans to decrypt it with quantum computers. Prevent impending quantum-computing-based decryption/hacking of today’s VPN traffic by implementing the new NIST-approved Post-Quantum Computing (PQC) encryption algorithms, Kyber (ML-KEM).

Data Center Agility Organizations need to keep up with frequent security policy changes and high velocity operations to maintain resilience and scale. With R82, application development is accelerated by empowering DevOps teams to automate security policy management with real-time, dynamic policy updates. Teams can now also provision virtual systems in seconds for multi-tenancy and agile development.

• Dynamic self-service provisioning for DevOps: Network security teams can now provide access to a dedicated, dynamic policy layer for DevOps. This enables teams to perform real-time, API-based policy updates directly to the firewall, for apps that need real-time security updates. This helps organizations support rapid and secure development, while also eliminating unnecessary tickets. All policy changes are automatically logged.

• Dramatically simplified virtual systems: Now, teams can rapidly provision new technology stacks within a fully secure, contained environment by spinning up firewall virtual systems in seconds with advanced automation. A single console delivers unified provisioning, management and shared APIs across virtual systems and physical firewall appliances for greater operational simplicity and speed.

Operational Simplicity & Scale Businesses can now handle growth and unpredictable network traffic events, with faster, more flexible deployment, unified management, and adaptive HTTPS inspection for effortless security.

• Rapid Maestro configuration: Maestro now has a fast, first-time wizard for initial set-up, and an easy web UI with interactive graphical presentation. Use simple drag-and-drop configuration to assign, monitor and edit ports. Maestro also has new REST APIs and support for SNMP queries on each security group member. Users can now manage members and apply changes across an entire cluster system in a single environment for fast operations with 40% fewer steps.

• Built-in software-based load sharing and resilience: Major data centers and telcos trust Check Point’s Maestro advanced clustering technology to ensure 99.999999% security system resilience, intelligent load sharing, easy scalability, and more. This Maestro technology is now also available as a powerful software-based solution (ElasticXL] without requiring a physical Maestro Orchestrator. This gives users the flexibility to choose the cluster design that best meets their requirements.

• Expanded network connection troubleshooting: Enables fast resolution of connection issues with powerful integrated diagnostic tools. Easily identify and fix policy configuration conflicts.

QUANTUM SOFTWARE R82 4

Adaptive HTTPS Inspection for Comprehensive & Efficient Security

95% of network traffic is encrypted and is the largest source of hidden threats. However, many organizations do not fully inspect encrypted HTTPS traffic due to operational complexities and challenges associated with encrypted connections. Simpler, effortless inspection enables smooth operations with maximum threat prevention.

R82 mitigates these common concerns with adaptive encrypted traffic inspection for maximum security coverage, while allowing for selective auto-bypass based on customer settings. This gives network security teams the ability to quickly and easily prioritize optimal security connections and CPU utilization.

• HTTPS learning mode: Gradually deploys HTTPS inspection to a portion of the traffic over time to predict network performance and automatically detect connectivity issues, and provides recommendations.

• Smart CPU performance management during HTTPS inspection: Optional setting to temporarily bypass TLS inspection during high CPU load periods to minimize network performance issues.

• Enhanced HTTPS inspection policies: Comprehensive security with a default recommended inspection policy, separate inbound/outbound rules, and support for multiple outbound certificates.

• Fail-open mode: New optional setting to automatically detect failures in the HTTPS inspection process due to client-side issues, such as pinned or misconfigured certificates. When detected, the connection is automatically added to the security policy exception list, eliminating unnecessary connectivity issues for end-users.

• HTTPS inspection dashboard: View detailed inspection status and statistics overviews.

• HTTP/3 protocol over QUIC transport: The first security platform to fully inspect, sandbox, and secure HTTP/3 encrypted traffic for accelerated web inspection and faster secure web browsing.

» Many websites are adding support for QUIC protocol that is faster than TCP.

» QUIC improves reliability over UDP protocol, resulting in faster load times of internet pages and an overall improvement in performance.

» Without firewall support for HTTP/3 over QUIC, standard TLS decryption is required, causing users to default to the slower and less secure HTTP/2 standard.

View encrypted traffic statistics at a glance

QUANTUM SOFTWARE R82 5

And Many More Features, Including…

• Simplified and automatic threat prevention: New default settings automatically block phishing, bots, and zero-day malware with advanced AI.

• 2X higher logging performance: Quantum Security Gateways optimize multi-core utilization for simultaneous dispatch of gateway logs to Log Servers—improving log output capacity by up to 2X.

• Custom feeds for intrusion detection: Automatically loads SNORT rules file in 5-minute intervals to enforce IPS protections.

• Advanced routing and networking capabilities

• Multi-domain enhancements: 2X faster upgrades, adding the option to clone domain

• HyperFlow multi-core processing: Supports CIFS and UDP traffic

• Site-to-Site VPN resiliency with public cloud: Automatically adjusts to changes on AWS, GCP & Azure to ensure connectivity

© 2024 Check Point Software Technologies Ltd. All rights reserved.

For more information, view full R82 Feature List | Schedule Demo

About Check Point Software Technologies Ltd. Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading AI-powered, cloud-delivered cyber security platform provider protecting over 100,000 organizations worldwide. Check Point leverages the power of AI everywhere to enhance cyber security efficiency and accuracy through its Infinity Platform, with industry-leading catch rates enabling proactive threat anticipation and smarter, faster response times. The comprehensive platform includes cloud-delivered technologies consisting of Check Point Harmony to secure the workspace, Check Point CloudGuard to secure the cloud, Check Point Quantum to secure the network, and Check Point Infinity Core Services for collaborative security operations and services.

© 2024 Check Point Software Technologies Ltd. All rights reserved.

Worldwide Headquarters 5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599

U.S. Headquarters 100 Oracle Parkway, Suite 800, Redwood City, CA 94065 | Tel: 1-800-429-4391

www.checkpoint.com

https://www.checkpoint.com/downloads/products/check-point-quantum-software-r82-feature-list.pdf https://pages.checkpoint.com/quantum-firewall-software-demo.html https://protect.checkpoint.com/v2/___https://www.checkpoint.com/___.YzJlOmNwYWxsOmM6bzo5OTYwODJjNTA4OTVkMjJiYmRjZjVkZWFjYjY0MTIzMTo2OmUxMGQ6OWRkNzlhNzg2ZTk5ZDU2ZDc4OTM3ODQ3N2YwOGU5OWRlNDIyZGQ2ZThlNDUyZWVmNjZjMjE5ODdhNWQ0OTEzMDpwOlQ6Tg