Check Point's IPS-1 Intrusion Prevention Solution Delivers Accurate and Granular Attack Prevention Addressing Today's Network Environment Challenges


First Phase of IPS-1 Integration with Check Point Unified Security Architecture Features Security Event Correlation and Management

REDWOOD CITY, CALIF., April 30, 2007 - Check Point® Software Technologies Ltd. (Nasdaq: CHKP), the worldwide leader in securing the Internet, today announced the immediate availability of IPS-1(TM) (former technology acquired from NFR Security) dedicated intrusion prevention system (IPS) solution delivering accurate, real-time attack mitigation, unmatched management, granular forensic analysis and flexible deployment enabling enterprises to protect against worms, automated malware and other hybrid threats, both known and unknown.

Since the acquisition of NFR Security in January 2007, Check Point has been successfully integrating NFR's products, services and employees into the company, and is leveraging the new technologies to offer customers and partners the opportunity to further enhance Check Point's NGX(TM) Unified Security Architecture and strengthen network defenses for enterprises worldwide.

Check Point has integrated IPS-1 into key security event management components of the Check Point product family and is now available in SmartCenter's SmartView Tracker(TM) and Eventia(TM) Analyzer, which provide centralized logging and real-time event correlation and prioritization. Check Point customers will immediately be able to utilize the Dynamic Update capability in Eventia Analyzer to add support for IPS-1, enabling them to use a single, familiar security event management tool to view, analyze, prioritize and respond to critical security events. Customers can now track IPS-1 events alongside firewall and VPN events from the same SmartCenter management console, as well as correlate these events with event data from other Check Point and third party products using Eventia Analyzer. In addition, through SmartView Tracker, IT can ensure that their products are operating properly, troubleshoot system and security issues, gather information for legal or audit purposes, and generate reports to analyze network traffic patterns.

"Operational efficiency is becoming increasingly important to IT security leaders, and therefore the goal for next generation intrusion prevention must be focused on providing actionable information to security operations staff," said Dave Burton, director of product marketing at Check Point Software Technologies. "Delays in providing operating system patches, along with a constant threat of targeted attacks by hackers all translate into increased windows of exposure. By employing a pure, proactive defense mechanism like IPS-1 on their networks, critical data remains secure and business continues as usual, minimizing time, costs, and staff requirements associated with network attacks."

IPS-1 provides security that is aware, adaptive, and actionable. It has awareness of the network environment, adapts to changes in the environment, and can take action to protect the network from exploitation. Consequently, IT staff can focus on security functions that are strategic and provide a value-add. Designed to provide immediate and reliable blocking of unwanted network traffic, IPS-1 delivers comprehensive network protection against unwanted network traffic including worms, Trojans, application layer attacks, buffer overflows and other automated malware before they can affect an organization. Additionally, with visibility into network application endpoints, IPS-1 can alert to and protect against the exposures created by rogue servers and critical vulnerabilities. With unmatched forensic analysis, IPS-1 deployments of all sizes are defined, managed and monitored from the centralized, IPS-1 Management Dashboard(TM).

As intrusion detection and prevention are a part of Check Point's core strategy, this is the first in a series of steps to deliver on a commitment to incorporate NFR Security technologies into Check Point's existing firewall, VPN, UTM and security management solutions based on the company's Unified Security Architecture. This strategy will add even more intelligence to Check Point solutions and help ensure network security systems can quickly adapt to changing threats, cooperate with other systems to enforce security policy, and enable central administrative control. Check Point will continue to incorporate advanced intrusion detection and prevention (IDS/IPS) technologies into its Unified Security Architecture, as it has done with its firewall, VPN, NAC security and security event management solutions.

IPS-1 Product Features:

Hybrid Detection Engine(TM) leverages multiple detection and analysis techniques to prevent network- and application-layer attacks including strong "zero-day" protection.
Confidence Indexing(TM) offers the unique ability to direct and calibrate enforcement, giving customers the flexibility to ease their way into a full prevention deployment.
Advanced forensic analysis and reporting.
Centralized management provides real-time, graphical views across all IPS-1 Sensors.
Powerful, flexible signature language enables customized signatures and protocol decoders.

Availability
Check Point IPS-1 is available immediately and starts at $7,000. For more information on IPS-1, please visit www.checkpoint.com

About Check Point Software Technologies Ltd.
Check Point Software Technologies Ltd. (www.checkpoint.com) is a leader in securing the Internet. The company is a market leader in the worldwide enterprise firewall, personal firewall, data security and VPN markets. Check Point's PURE focus is on IT security with its extensive portfolio of network security, data security and security management solutions. Through its NGX platform, Check Point delivers a unified security architecture for a broad range of security solutions to protect business communications and resources for corporate networks and applications, remote employees, branch offices and partner extranets. The company also offers market leading data security solutions through the Pointsec product line, protecting and encrypting sensitive corporate information stored on PCs and other mobile computing devices. Check Point's award-winning ZoneAlarm Internet Security Suite and additional consumer security solutions protect millions of consumer PCs from hackers, spyware and data theft. Extending the power of the Check Point solution is its Open Platform for Security (OPSEC), the industry's framework and alliance for integration and interoperability with "best-of-breed" solutions from hundreds of leading companies. Check Point solutions are sold, integrated and serviced by a network of Check Point partners around the world and its customers include 100 percent of Fortune 100 companies and tens of thousands of businesses and organizations of all sizes.

©2003-2007 Check Point Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor, Application Intelligence, Check Point Express, Check Point Express CI, the Check Point logo, ClusterXL, Confidence Indexing, ConnectControl, Connectra, Connectra Accelerator Card, Cooperative Enforcement, Cooperative Security Alliance, CoSa, DefenseNet, Dynamic Shielding Architecture, Eventia, Eventia Analyzer, Eventia Reporter, Eventia Suite, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, Hybrid Detection Engine, IMsecure, INSPECT, INSPECT XL, Integrity, Integrity Clientless Security, Integrity SecureClient, InterSpect, IPS-1, IQ Engine, MailSafe, NG, NGX, Open Security Extension, OPSEC, OSFirewall, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureClient Mobile, SecureKnowledge, SecurePlatform, SecurePlatform Pro, SecuRemote, SecureServer, SecureUpdate, SecureXL, SecureXL Turbocard, Sentivist, SiteManager-1, SmartCenter, SmartCenter Express, SmartCenter Power, SmartCenter Pro, SmartCenter UTM, SmartConsole, SmartDashboard, SmartDefense, SmartDefense Advisor, Smarter Security, SmartLSM, SmartMap, SmartPortal, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, Stateful Clustering, TrueVector, Turbocard, UAM, UserAuthority, User-to-Address Mapping, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Express, VPN-1 Express CI, VPN-1 Power, VPN-1 Power VSX, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 UTM, VPN-1 UTM Edge, VPN-1 VSX, Web Intelligence, ZoneAlarm, ZoneAlarm Anti-Spyware, ZoneAlarm Antivirus, ZoneAlarm Internet Security Suite, ZoneAlarm Pro, ZoneAlarm Secure Wireless Router, Zone Labs, and the Zone Labs logo are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. ZoneAlarm is a Check Point Software Technologies, Inc. Company. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726, 6,496,935, 6,873,988, and 6,850,943 and may be protected by other U.S. Patents, foreign patents, or pending applications.

All Topics