Check Point Intrusion Prevention System Software Blade

The Check Point Intrusion Prevention System (IPS) Software Blade combines industry-leading IPS protection with breakthrough performance at a lower cost than traditional, stand-alone IPS software solutions. The IPS Software Blade delivers complete and proactive intrusion prevention – all with the deployment and management advantages of a unified and extensible next-generation firewall solution. Benefits

• Next-generation security prevention, protection and performance
• Industry-leading intrusion protection and firewall—as tested NSS Labs—delivers 1,000s of signature, behavioral and preemptive protections
• Check Point is ranked #1 in Microsoft and Adobe threat coverage
• Combines with best-of-breed firewall, application control, URL filtering, DLP and more on the most comprehensive, network-class next gen firewall
• Unrivaled, multi-Gigabit performance in an integrated IPS
• Up to 15 Gbps of IPS and 30 Gbps of firewall throughput
• Stateful Inspection and SecureXL technology deliver multi-tier IPS inspection and accelerated IPS throughput
• CoreXL technology provides the most efficient and high-performance use of multi-core technologies
• Lowest TCO and fastest ROI of any enterprise-class firewall solution
• One-click activation of IPS and firewall protection on any Check Point gateway
• Delivers unmatched extensibility and flexibility—all without adding CapEx
• Integrated into Check Point Software Blade Architecture for on-demand security

The Check Point IPS Software Blade is delivering better security than our previous IPS software solution and at a lower cost. Check Point has designed the IPS software blade for efficient resource utilization, which improves performance, mission critical availability, and uptime. Complete Intrusion Prevention System (IPS) Functionality The Intrusion Protection System Software Blade complements firewall protection, further securing your network without degrading gateway performance. Full-featured IPS The IPS Software Blade provides a complete Intrusion Prevention System security solution, providing comprehensive network protection against malicious and unwanted network traffic, including:

• Malware attacks
• Dos and DDoS attacks
• Application and server vulnerabilities
• Insider threats
• Unwanted application traffic, including IM and P2P
• Geo-protections

Geo-protections enforce or monitor traffic based on the source or destination country. Create a geo-protection policy with exceptions to allow legitimate traffic through while blocking or monitoring traffic from unknown and untrusted sources. Monitor activity with the SmartEvent Software Blade. Trusted Security Real-Time protections – The IPS Software Blade is constantly updated with new defenses against emerging threats. Many of the IPS protections are pre-emptive, providing defenses before vulnerabilities are discovered or exploits are even created. Microsoft vulnerability coverage – Check Point is ranked #1 in Microsoft threat coverage, including preemptive protections against emerging vulnerabilities and exploits. Multi-gigabit Integrated IPS Performance Delivers up to 15 Gbps of IPS throughput with the default IPS profile. The IPS Software Blade incorporates a high-speed pattern matching engine that does multi-layered, 2-tier inspection for maximum performance with thousands of protections enabled. Dynamic Threat Management With the IPS Software Blade and the SmartEvent Software Blade you gain a new, dynamic management paradigm for today’s high volume, real-time and evolving threat environment. Check Point threat management workflows allow you to handle constant change quickly and efficiently, reducing your management overhead and allowing you to confidently and promptly deploy protections. The IPS Software Blade offers:

• New protections sandbox – Build confidence in a ‘sandbox’ environment with no impact on your network.
• Automatic protection activation – Activation of new protections, based on configurable parameters (performance impact, confidence index, threat severity). The difficulties of constant, individual management of thousands of protections are eliminated.
• Unified Management – The IPS blade is configured and managed through a common Check Point management interface—the same one used to manage other security gateway Software Blades and Check Point dedicated IPS.
• Configurable, actionable monitoring – Track events through detailed reports and logs of what is most important. The new Security Management Software Blade for IPS and Security Provisioning Software Blade simplify threat analysis and reduce operational overhead.
• Business-level views – Customizable reports provide easy monitoring of critical security events associated with your business-critical systems.
• Multi-dimensional sorting – Drag-and-drop columns of event data and the information will be automatically re-ordered.
• Actionable event logs – Edit the associated protection, create an exception or view packet data directly from log entries.