Network Security & Firewalls

DDOS ATTACKS ARE ON THE RISE

In today's info-security threat landscape, denial-of-service and distributed denial-ofservice (DoS/DDoS) attacks are a major cause of network downtime. Whether executed by hacktivists to draw attention to a cause, fraudsters trying to illegally obtain data or funds, or a result of geopolitical events, DDoS attacks are a destructive cyber weapon. Governments, utilities, financial services and commercial institutions face daily attacks.

Preparing for "common" DDoS attacks is no longer enough. Thanks to the growing array of online marketplaces, it is now possible for hackers to wreak havoc with virtually no knowledge of computer programming or networks. Attack tools and services are easy to access, making the pool of possible assaults larger than ever.

With Burst attacks and Advanced Persistent DDoS campaigns, hackers launch multivector, blended campaigns with high volume network vectors with more sophisticated application-layer attacks. In addition, recent IoT threats spawned the largest DDoS attack in history, propelling the industry into the 1Tbps DDoS era.

With these new threats, it is critical to ensure your DDoS mitigation solution can protect your organization and customers from today and tomorrow's sophisticated attacks.

INTEGRATED ON PREMISES AND CLOUD DDOS PROTECTION

DDoS Protector is part of Check Point's Attack Mitigation Solution and is an awardwinning, real-time, perimeter attack mitigation device that secures organizations against emerging network and applications threats. DDoS Protector protects the infrastructure against network and application downtime (or slow time), application vulnerability exploitation, malware spread, network anomalies, information theft and other types of attacks.

DDoS Protector provides the industry's most advanced, automated protection from fastmoving threats, including from recent IoT based attacks such as Mirai. It is uniquely built to overcome both the complexity and scale of today's sophisticated IoT-based botnets. DDoS Protector also helps organizations win the ongoing security battle against availability attacks, by detecting and mitigating known and zero-day DoS/DDoS attacks in real-time. It protects against other security threats that are usually undetected by traditional DDoS mitigation tools, such as SSL-based flood attacks, attacks on login pages and attacks behind CDNs.

With DDoS Protector, Check Point's attack mitigation solution offers protection with the shortest mitigation time and broadest attack coverage. Check Point provides a hybrid solution combining on premise and cloud-based mitigation tools in a single integrated solution, designed to optimally block multiple attack vectors occurring in parallel.

WHY DDOS PROTECTOR?

DDoS Protector includes a comprehensive set of four essential security modules - anti-DDoS, network behavioral analysis (NBA), intrusion prevention system (IPS) and SSL-attack protection - to fully protect the application infrastructure against known and emerging network security attacks. It employs multiple detection and mitigation modules, including adaptive behavioral analysis, challenge response technologies and signature detection.

Compared to standalone solutions, the synergy of multiple security modules on a single, hardware-accelerated platform enables effective protection against attackers who seek to systematically compromise business assets while providing unified reporting, forensics and compliance.

Managing security is becoming more complex as corporate boundaries extend to include roaming users, mobile devices and cloud environments. To manage security in this changing landscape efficiently, organizations need a security management solution that can centrally handle all security functions and deal with large volumes of mixed traffic data.

SOLUTION
Check Point's SMART-1 appliances consolidate security policy, log and event management into a single dedicated management appliance. SMART-1 appliances scale to fit your needs today, with the ability to adapt to future requirements. Organizations of all sizes can leverage SMART-1 to manage from 5 to 5000 gateways within their network, and accelerate time to deployment for their security infrastructures.

Further improve security and control by utilizing SMART-1 appliances with MultiDomain Management (MDM), segmenting the network into as many as 200 independent domains by geography and business use.

SMART-1 appliances efficiently manage and analyze security logs and events in realtime. By implementing SMART-1, organizations gain centralized visibility into millions of logs, get visual indication of risks and can quickly investigate potential threats.

DDOS ATTACKS ARE ON THE RISE

In today's info-security threat landscape, denial-of-service and distributed denial-ofservice (DoS/DDoS) attacks are a major cause of network downtime. Whether executed by hacktivists to draw attention to a cause, fraudsters trying to illegally obtain data or funds, or a result of geopolitical events, DDoS attacks are a destructive cyber weapon. Governments, utilities, financial services and commercial institutions face daily attacks.

Preparing for "common" DDoS attacks is no longer enough. Thanks to the growing array of online marketplaces, it is now possible for hackers to wreak havoc with virtually no knowledge of computer programming or networks. Attack tools and services are easy to access, making the pool of possible assaults larger than ever.

With Burst attacks and Advanced Persistent DDoS campaigns, hackers launch multivector, blended campaigns with high volume network vectors with more sophisticated application-layer attacks. In addition, recent IoT threats spawned the largest DDoS attack in history, propelling the industry into the 1Tbps DDoS era.

With these new threats, it is critical to ensure your DDoS mitigation solution can protect your organization and customers from today and tomorrow's sophisticated attacks.

INTEGRATED ON PREMISES AND CLOUD DDOS PROTECTION

DDoS Protector is part of Check Point's Attack Mitigation Solution and is an awardwinning, real-time, perimeter attack mitigation device that secures organizations against emerging network and applications threats. DDoS Protector protects the infrastructure against network and application downtime (or slow time), application vulnerability exploitation, malware spread, network anomalies, information theft and other types of attacks.

DDoS Protector provides the industry's most advanced, automated protection from fastmoving threats, including from recent IoT based attacks such as Mirai. It is uniquely built to overcome both the complexity and scale of today's sophisticated IoT-based botnets. DDoS Protector also helps organizations win the ongoing security battle against availability attacks, by detecting and mitigating known and zero-day DoS/DDoS attacks in real-time. It protects against other security threats that are usually undetected by traditional DDoS mitigation tools, such as SSL-based flood attacks, attacks on login pages and attacks behind CDNs.

With DDoS Protector, Check Point's attack mitigation solution offers protection with the shortest mitigation time and broadest attack coverage. Check Point provides a hybrid solution combining on premise and cloud-based mitigation tools in a single integrated solution, designed to optimally block multiple attack vectors occurring in parallel.

WHY DDOS PROTECTOR?

DDoS Protector includes a comprehensive set of four essential security modules - anti-DDoS, network behavioral analysis (NBA), intrusion prevention system (IPS) and SSL-attack protection - to fully protect the application infrastructure against known and emerging network security attacks. It employs multiple detection and mitigation modules, including adaptive behavioral analysis, challenge response technologies and signature detection.

Compared to standalone solutions, the synergy of multiple security modules on a single, hardware-accelerated platform enables effective protection against attackers who seek to systematically compromise business assets while providing unified reporting, forensics and compliance.

Cyberattacks on critical infrastructures & industrial environments are no longer a myth. Power generation facilities, metropolitan traffic control systems, water treatment systems, and factories are all at risk. Exploits freely available on the Internet make the Industrial Control Systems (ICS) of leading vendors easy targets for attackers.

These ICS environments can be harsh - exposing networking equipment to extreme temperatures, humidity, dust, and vibration. They require a rugged and reliable security gateway solution to detect threats and control access to critical components.

Check Point Smart-1 security management appliances realize Check Point Infinity security architecture, featuring consolidated security management in a single scalable appliance for superior threat visibility and control across Networks, Cloud and Mobile. Check Point Smart-1 appliances are designed to optimally manage Check Point's high-performance security gateways, enabling effective security management to keep you protected against any threat, anytime and anywhere.

Benefits

New security management platforms for policy segregation, log and threat analysis

• Five new security management appliances to centrally manage Check Point security gateways
• Greater policy segregation with up to 200 independent security domains
• One-stop security management and monitoring for consolidated security with Firewall, IPS, Anti-Virus, Anti-Bot, Threat Emulation, URL Filtering and Application Control

• Up to 44,000 logs per second with real-time indexing for immediate search results
• Leverage Next Generation SmartEvent for generating views and reports in seconds
• Facilitate forensic investigation with up to 24TB of internal storage

• Wide variety of networking options including 1GbE and 10GbE and SAN interfaces
• Maintain business continuity with redundant, hot-swappable power supplies, fans and hard drives

Consolidated and Comprehensive Security Management

Smart-1 appliances consolidate security, log, and event management into a single dedicated management appliance and a unified management console for one-stop security management and monitoring. From SmartConsole, an administrator can define and monitor security policies across multiple security functions including Firewall, IPS, Anti-Virus, Anti-Bot, Threat Emulation, URL Filtering, and Application control.

Smart-1 Appliances provide central security management and the ability to view logs, track events, view reports and monitor security and network activity, see trends, and centrally distribute signatures and software updates.

Organizations seeking to optimize their security management can leverage the Compliance Software Blade on their Smart-1 Appliances. Security best practices provided by the Compliance Software Blade deliver continuous feedback to organizations to help them ensure that gateways and Software Blades are configured and managed correctly. The Compliance Software Blade simulates the security impact of configuration or policy changes before installation, and provides real-time notifications to administrators alerting them to potential risks. The Compliance Software Blade provides a valuable tool for organizations seeking to consolidate their security management and stay on top of your security posture.

Multi-Domain Security Management

Smart-1 Appliances allow IT administrators to segment security management into as many as 200 independent domains. Easily create domains based on geography, business unit or security function to strengthen security and simplify management by segregating administration and policies.

Smart-1 Appliances with Multi-Domain Log Management host log files in segregated domains and improve performance by isolating log traffic from management traffic.