Incident Response

Check Point is the only company to offer insight and remediation for several different types of threats including:

• Firewall
• IPS
• Applications
• Data Loss
• Malware
• Botnets
• Unauthorized access
• Denial of Service

Real-time remediation is only possible with access to real-time data.  We collect your logs, and then encrypt, compress and store them for immediate access to data should an attack occur. Your logs are refreshed every 30 days to capture the latest information and speed remediation time so you can get back to business.  Customers can always view their logs via the Incident Response portal.

Incident Response customers receive detailed documentation and best practices guidelines to improve processes, speed ability to respond to an attack and meet compliance and reporting requirements including:

• Incident Response Analysis and Recommended Remediation
• Incident Response Best Practices Guidelines
• State of Preparedness Report
• Annual Summary of Event Activity vs. the Check Point community
• Attack Profiling

The Incident Response portal offers everything you need to prepare for and respond to a security attack. Via the Incident Response portal customers can view actionable attack remediation data including:

• Summary of the Security Event
• Summary of Alerts during the last 24 hours
• Message Board
• Report Repository

Customers upload their raw data (logs) to the Incident Response portal for encrypted storage and analysis.

In addition to real-time attack remediation assistance, we also provide expert recommendations to enhance your security protection including:

• Custom signatures
• Traffic and attack analysis
• Rule-base protection activations
• Custom protection development
• How to protect 3rd party systems and service providers