Check Point FireWall-1 NG FP1

Check Point Firewall-1 is a security platform for the protection of large networks with multiple Internet access points (Internet gateways) via the creation and maintenance of a centralized Enterprise Security Policy. The individual components of the Firewall-1 system allow for both the GUI based maintenance of said policy, as well as the enforcement of that policy at the actual Internet gateways located throughout the network. Features of the system include support for user authentication (by user, client, or session), Network Address Translation (NAT), and multiple content protection features including URL, Java, JavaScript, and ActiveX Control screening.

System administrators can define their security policies using the Firewall-1 GUI, by assigning rules and properties to each specific type of communication that will take place over the network, and the actual objects (Internet gateways, routers, etc.) that are used to access the Internet. This central Security Policy is then downloaded to the individual Firewall Modules which reside at the Internet gateways themselves for actual enforcement. At the Firewall Module level, network packet traffic is examined at the lowest level, within the operating system kernel and below the network layer (layer 3), with packets that do not comply with the security policy not passed on to the higher protocol layers.

Key features in the latest FireWall-1 release, dubbed FireWall-1 NG FP1 (or "Next Generation, Feature Pack 1," the "version" identification applied to each of the latest products in Check Point's arsenal), include the ability to remotely manage gateways with dynamically assigned IP addresses; the ability to limit the scope of individual policies to specific gateways and no others; and increased security for system administrators, including support for stronger authentication methods and the integration of administrator management directly within the management console.

Check Point Firewall-1 is available now. For pricing and availability of the latest product releases, contact Check Point.