Access control

The firewall software blade enables network administrators to securely control access to clients, servers and applications. With detailed visibility into the users, groups, applications, machines and connection types, the Check Point firewall software blade enables network administrators to provide superior protection across the entire security gateway.

User and machine awareness

User and machine awareness balances security with business needs by enabling granular policy definitions per user and group. Seamless and agent-less integration with Active Directory provides complete user identification, enabling simple application-based policy definition per user or group directly from the firewall.

Authentication

To ensure the security of your network, you need to be able to confirm the identity of all users attempting to access it. Authentication assigns access permissions to individuals and groups, based on their level of responsibility and role within the organization. Based on the industry's most advanced identity awareness, the firewall software blade provides robust authentication capabilities to confirm the identity of all users and establish their rights and privileges.

Network Address Translation (NAT)

Whether computers have routable or non-routable addresses, administrators may want to conceal their real addresses, to ensure that addresses cannot be seen from outside the organization or from other parts of the same organization. A network's internal address contains the topology of the network and therefore hiding this information greatly enhances security.

Bridge mode

A security gateway in bridge mode operates as a regular firewall, inspecting traffic and dropping or blocking unauthorized or unsafe traffic, and is invisible to all Layer-3 traffic. When authorized traffic arrives at the gateway, it is passed from one interface to another through a procedure known as bridging. Bridging creates a Layer-2 relationship between two or more interfaces, whereby any traffic that enters one interface always exits the other. This way, the firewall can inspect and forward traffic without interfering with the original IP routing.

Intrusion Prevention System (IPS)

The IPS software blade delivers complete and proactive intrusion prevention - all with the deployment and management advantages of a unified and extensible next-generation firewall solution. Complementing Check Point's firewall protection, the IPS software blade further secures your network by inspecting packets traversing through the gateway. It offers full-featured IPS with geo-protections and is constantly updated with new defenses against emerging threats.

Application control

Control access to over 5,200 applications and 240,000 social network widgets with the industry's large application coverage. Create granular security policies based on users or groups to identify, block or limit usage of web applications and widgets like instant messaging, social networking, video streaming, VoIP, games and more. Enables companies the ability to balance security and business needs.

Identity awareness

Provides granular visibility of users, groups and machines, enabling unmatched application and access control through the creation of accurate, identity-based policies.

Logging and status

Transforms data into security intelligence with SmartLog, an advanced log analyzer that delivers split-second search results providing real-time visibility into billions of log records over multiple time periods and domains.

Integrated security management

Unified security management simplifies the monumental task of managing growing threats, devices and users by enabling views, details, and reports through a single pane of glass. Check Point's comprehensive, centralized security management system controls all Check Point gateways and software blades from SmartDashboard. This intuitive graphical user interface enables IT managers to easily manage a wide set of security management functions.

Add functionality when you need it

Check Point Next Generation Firewall appliance can add additional software functionality as your security needs increase. Seamlessly add software blades such as the data loss prevention software blade.

Check Point Next Generation Firewall for 5400 - Subscription licence (2 years)

Check Point Software - Ugunsmūri - Next Generation Firewall for 5400

Ielogoties