ayulgui baidliin buteegdehunud checkpoint worldwide #1 security products
TRANSCRIPT
Аюулгүй байдлын зарим бүтээгдэхүүнүүд
The Internet of things BRINGS WITH IT NEW challenges
TECHNOLOGY IS EVERYWHERE
*Source: http://www.forbes.com
THREATS BECOME A COMMODITY
Growing Security Threats
Increased Demand in Network Performance
Simple + Effective = Secured
Today’s IT Security Challenges
6©2014 Check Point Software Technologies Ltd.©2014 Check Point Software Technologies Ltd
Corporate Presentation
August 2014
Check Point Software Technologies
7©2014 Check Point Software Technologies Ltd.
Security Focus and Leadership
$1.39 Billion (Revenue)Software Blades strategy fueling growth
100% (Security)Pure focus on security
All of Fortune 500 are Check Point customers
Network Security LeaderTop Ranked NGFW by NSS Labs, Gartner, SC Magazine
“Leader” in Gartner Enterprise Firewall, UTM and MDP
Who should you trust to secure your business?
8©2014 Check Point Software Technologies Ltd.
Hospital
record
update
Online bank
balance
check
Social
network
update
Supermarket
checkout
PDA email
check
Credit card
payment
ATM
withdrawal
Remote data
backup
ERP supplier
catalog
update
Opening of a
new branch
Setup a
mobile office
at a client
Check
today’s
sales orders
Update this
year’s
bonuses
Log into a
WiFi hotspot
8
Securing Businesses Everywhere
9©2014 Check Point Software Technologies Ltd.
Award Winning Security Products
Best IPS/IDS Product
Reader Trust
Award
2013
Leader, Magic
Quadrant Enterprise
Network Firewall
2014
Leader, Magic
Quadrant Mobile
Data Protection
2013
NGFW Earns
“Recommend”
Rating from NSS
2013
IPS Earns
“Recommend”
Rating from NSS
2012
Leader, Magic
Quadrant - UTM
2014
Computing Security
Awards Security
Company of the Year
2012
Network Security
Vendor of the Year
2012
Firewall Earns
“Recommend”
Rating from NSS
2013
Best Firewall
Reader Trust
Award
2013
10©2014 Check Point Software Technologies Ltd.
Every year threats are becoming MORE SOPHISTICATED and MORE FREQUENT
An Ever-Changing Threat Landscape
VIRUSES
AND
WORMS
ADWARE
AND
SPYWARE
DDOS
APTS
RANSOMWARE
HACTIVISM
STATE SPONSORED
INDUSTRIAL ESPIONAGE
NEXT GEN APTS
(MASS APT TOOLS)
UTILIZING WEB
INFRASTRUCTURES (DWS)
2014
2010
20072004
1997
1,300 known viruses
50,000known viruses
100,000+malware variants
daily
11©2014 Check Point Software Technologies Ltd.
Networks need protection
against ALL
types of threats
12©2014 Check Point Software Technologies Ltd.
Threat Prevention
Unified Management
End-to-End Next Generation Security
Check Point Security
E N F O R C E M E N T L A Y E RInspects traffic and enforces protection in well-defined segments
C O N T R O L L A Y E RDelivers real-time protections to the enforcement points
M A N A G E M E N T L A Y E RIntegrates security with business process
Built on a comprehensive
Software-defined Protection (SDP) Architecture
13©2014 Check Point Software Technologies Ltd.
End-to-End Next Generation SecurityAcross the Infrastructure
Software Blades
Across ALL Platforms
Data CenterNetworkEndpoint CloudMobile
2200 series
4400 series
12000 + 13000 series
41000 + 61000 series
Smart-1 series21000 series600 + 1100 series
Firewall IPSecVPN
Mobile Access
Identity Awareness
Application Control
IPS DLP Web Security
URL Filtering
Anti-
botThreat
EmulationAntivirus Anti-
SpamAdvanced
Networking and Clustering
VoIP SecurityGateway VirtualEdition
Full Disk Encryption
Smart Reporter
Smart Event
Multi-Domain Security
Management
Advanced Networking
Media Encryption
Remote Access
Anti-Malware
Network Policy
Endpoint Policy
Logging and
Status
Smart Workflow
Monitoring Management Portal
User Directory
Smart Provisioning
Compliance
14©2014 Check Point Software Technologies Ltd.
A cloud based collaboration platform,
translating intelligence to protections for security Gateways
15©2014 Check Point Software Technologies Ltd.
ThreatCloud At-A-Glance
Variety of intelligence sources: Check Point research, worldwide network of sensors, community analysis & feeds
Over 250 million addresses analyzed
500,000 updates every day
Over 14 million malware-infested sites & signatures
Thousands of gateways
16©2014 Check Point Software Technologies Ltd.
Multi-Layer Threat Prevention
Known and Unknown Malware
Known
Unknown
XX X X XX XXX
KnownKnown Known Known
Industry FeedsGlobal Sensor DataCheck Point Research
ThreatCloud
Emulation
Service
17©2014 Check Point Software Technologies Ltd.
Unified Management
Best ROI for Management
Customized Visibility
Unified Policy
Monitoring
18©2014 Check Point Software Technologies Ltd.
Consolidated Visibility: Next Generation SmartEvent Unified event analysis with 360° visibility across Software Blades
High-level view with drill down to policy
19©2014 Check Point Software Technologies Ltd.
Summary
Multi-Layer Threat Prevention
Next Generation End-to-End Security
Best-in-Class Management
Check Point: Your Trusted Security Partner
More Security, Additional Power
[Confidential] For designated groups and individuals
About Check Point
The Security You Want
The Performance You Need
DLP
Software Blade
Application
Control
Software Blade
IPS
Software Blade
FW & VPN
Software BladesURL Filtering
Software Blade
Antivirus
Software Blade
Identity
Awareness
Software Blade
Anti-Bot
Software Blade
Security Appliance
Check Point
Appliances
INTRODUCING
22©2014 Check Point Software Technologies Ltd.
Meeting any security requirement
Check Point Appliances
Enterprise
4000 Appliances
(4 Models)
Branch
Office
2200 Appliance
1100 Appliances
(3 models)Ultra High End
41000 & 6100021000 Appliances
(3 Models)
13000 Appliance
(2 Models)
12000 Appliances
(3 Models)
Data Center
Small
Office
600 Appliances
(3 models)
Top Design Principles for Check Point Appliances
Best Security
Optimized for
Software Blades
PERFORMANCE New Features & Performance
SECURITY Consolidate SecurityOptimized for Software Blades
SCALABILITY Any Business & Environment
Appliances From Check Point
25©2014 Check Point Software Technologies Ltd.
Filled with New Features…
26©2014 Check Point Software Technologies Ltd.
Check Point 1100Built for the Branch Office Environment
Wi-Fi 802.11 b/g/n
8 x 1GbE LAN Ports
1GbE DMZ Port
1GbE WAN Port
ADSL Modem Port
RJ45 Console Port
2 x USB Ports
Express Card Slot
SD Memory Slot
Big Security for Small Branch Offices
27©2014 Check Point Software Technologies Ltd.
Check Point 4800Built for the Branch Office Environment
Variety of network interface expansions
Same cards for 4000 and
12000 appliances
Copper and fiber (1GE / 10GE)
Out-of-band management (LOM )
8x1GE onboard ports
Graphic LCD
display
Hot-swappable
redundant power
supplies
True Serviceability with Rich Connectivity
28©2014 Check Point Software Technologies Ltd.
Check Point 12600Datacenter-Grade, Robust Performance
3 slots for network expansion
Copper and fiber (1GE / 10GE)
Up to 24 1GE ports/ 12 10GE ports
Hot-swappable power
supply and
hard drive
Out-of-band management (LOM)
Graphic LCD display
Designed for The Datacenter
29©2014 Check Point Software Technologies Ltd.
Copper & fiber (1, 10 & 40 GbE ready)
Up to 26x1GbE, 12x10GbE
Wide-Spectrum of Network Interfaces
Hot-swap redundant hard drives & fans
Hot-swap redundant power supply
Integrated Redundancy and Serviceability
Out-of-band management (LOM)
Graphic LCD
Console, management and USB
High Manageability
13000 Platform Reliability
30©2014 Check Point Software Technologies Ltd.
Scalable SolutionWith wide variety of NIC options
4 x 1000BaseF
8 x 10/100/1000BaseT
4 x 10GBaseF
2 x 1000BaseF
2 x 10GBaseF
Commonly shared NICs with
4000, 12000 and 13000 appliance
families
4 x 1GbE copper or
fiber Fail-Open
2 x 10GBaseF
Fail-Open
4 x 10/100/1000BaseT
• Copper and fiber
(1GE / 10GE)
• Up to 26 1GE or 12
10GE ports
• Fail-Open NIC option
31©2014 Check Point Software Technologies Ltd.
Expansion Options & Accessories4200 4400 4600 4800 12200 12400 12600 13000 21000
Ex
pa
ns
ion
Base 1xGbE copper 4 8 8 8 8 10 14 14 14
Expansion slots 1 1 1 1 1 3 3 3 3
2x1GbE fiber √ √ √ √ √ √ √ √
4x1GbE copper √ √ √ √ √ √ √ √
4x1GbE copper (FO) √ √ √ √ √ √ √ √
4x1GbE fiber √ √ √ √ √ √ √ √
4x1GbE fiber (FO) √ √ √ √ √ √ √ √
8x1GbE copper √ √ √ √ √
12x1GbE copper √
12x1GbE fiber √
2x10GbE fiber √ √ √ √ √
2x10GbE fiber (FO) √ √ √ √ √
4x10GbE fiber √ √ √ √ √
Hard Drive 1+1 1+1 2 2 2
Power supply 1+1 1+1 2 2 2 2
Slide Rails √ √ √ Included Included Included Included Included Included
Memory Upgrade √ √ √ √ √ √
32©2014 Check Point Software Technologies Ltd.[Confidential] For designated groups and individuals
[Confidential] For designated groups and individuals
How About Performance?
33©2014 Check Point Software Technologies Ltd.
Check Point SecurityPower
* With Security Acceleration Module
2200 4200
121
SPU
4400 4800 12200 12400 12600 21400
121
SPU
230
SPU
673
SPU
811
SPU
1185
SPU
2050
SPU
2900*
SPU
21700
3551*
SPU
3800*
SPU
1380013500
3200
SPU
4600
405
SPU
1100
37
SPU
Predictable Real-World Performance
4300*
SPU
21800
34©2014 Check Point Software Technologies Ltd.
More Capacity…
Connection
Capacity
Up to 28 million
concurrent
connections*
* With Memory Upgrade & GAiA OS
13
50
0A
pp
liance30-
20-
10-
0-
Mil
lio
n
Session
Rate
Up to 300K
connections per
second
21
00
0 A
pp
liance*300-
200-
100-
0-
Co
nn
/Se
c (
k)
* With Security Acceleration Module
35©2014 Check Point Software Technologies Ltd.
SAM-108 Dedicated Acceleration Module for 21K Series
Sub 5 µs Firewall latency
110 Gbps Firewall throughput
50 Gbps VPN throughput
60 Million Packets per Second
300,000 Connections per Second
36©2014 Check Point Software Technologies Ltd.
Ready For Over 1 Terabit Per Second
Secure the
most demanding
networks
Advanced security - Scalable performance
Check Point 41000 and 61000
[Confidential] For designated groups and individuals
37©2014 Check Point Software Technologies Ltd.©2014 Check Point Software Technologies Ltd.
Ultra-fast performance for demanding
environments
Datacenter Portfolio SecurityPower
33,000
SPU
21400 21600 13500 21700 41000 61000
2,900*
SPU
3,300*
SPU
3,300
SPU
3,550*
SPU
11,000
SPU
* With SAM acceleration module
[Confidential] For designated groups and individuals
38©2014 Check Point Software Technologies Ltd.©2014 Check Point Software Technologies Ltd.
High Performance Multi-Blade Gateways
[Confidential] For designated groups and individuals
Size
Security Power
Firewall Throughput
(Production Performance)
IPS Throughput(Production Performance)
Virtual Systems
Session Rate (Connection/Seconds)
Concurrent Connections
41000
6U
Up to 11,000 SPU
Up to 40Gbps
25Gbps
Up to 250
1.1M
80M
61000
14U
Up to 33,000 SPU
Up to 120Gbps
70Gbps
Up to 250
3.3M
240M
39©2014 Check Point Software Technologies Ltd.©2014 Check Point Software Technologies Ltd.
Scalable Performance
1-4 1-12
61000
Field proven architecture
41000
Security Gateway Module (SGM) 260
Security Switch Module (SSM)160 1-2 1-4
[Confidential] For designated groups and individuals
40©2014 Check Point Software Technologies Ltd.
Appliances From Check Point
PERFORMANCE New Features & Performance
SECURITY Consolidate SecurityOptimized for Software Blades
SCALABILITY Any Business & Environment
[Confidential] For designated groups and individuals
41©2014 Check Point Software Technologies Ltd.
Optimized for Software Blades
Any Software Blade You Need
in Every New Appliance
Anti-Bot
Software Blade
Application
Control
Software Blade
IPS
Software Blade
FW & VPN
Software Blades
URL Filtering
Software BladeAntivirus
Software Blade
Identity
Awareness
Software Blade
1200040002200 210001100 13500
[Confidential] For designated groups and individuals
42©2014 Check Point Software Technologies Ltd.
ThreatCloud Emulation Service
Branch
Headquarters
Branch
Agent for Exchange Server
ThreatCloud
Emulation Service
Single Global Solution – For the Entire Organization
[Confidential] For designated groups and individuals
43©2014 Check Point Software Technologies Ltd.
Enable Hardware ConsolidationWith Optimal Support of Check Point Virtual Systems
[Confidential] For designated groups and individuals
Consolidate Up to 250 Gateways to
Secure Many Customers & Networks
Central Management With
Check Point SM and MDSM
High Scalability and Full
Redundancy with VSLS
Check Point 13500
44©2014 Check Point Software Technologies Ltd.[Confidential] For designated groups and individuals
Integrated Solutions
45©2014 Check Point Software Technologies Ltd.
More SecurityWith 4 Predefined Security Packages
[Confidential] For designated groups and individuals
The Security You WantThe Performance You Need
Next
Generation
Firewall
Next Generation
Threat Prevention
Next Generation
Secure Web
Gateway
Next Generation
Data Protection
1200040002200 210001100 13500
46©2014 Check Point Software Technologies Ltd.
Firewall
Identity
Awareness
IPsec VPN
ADN&C
Mobile Access
IPS
App Control
DLP
URL Filtering
Antivirus
Anti-Bot
Anti-Spam
Pre-Packaged Turn-Key Solutions
Next
Generation
Firewall
Next Generation
Threat
Prevention
Next Generation
Secure Web
Gateway
Next Generation
Data Protection
[Confidential] For designated groups and individuals
47©2014 Check Point Software Technologies Ltd.
High Performance Appliance Packages
12600 13000 21400 21700 21800
Next Gen Firewall, Secure Web Gateway, Data Protection and Threat Prevention Packages
On-board
interfaces
2x1GbE
Copper
2x1GbE
Copper
1x1GbE
Copper
1x1GbE
Copper
1x10GbE
SFP+
SR
transceiver
1x1GbE
Copper
1x10GbE
SFP+
SR
transceiver
Network
Interface Cards
included
8x1GbE
Copper
4x10Gb SFP+
4xSR
transceivers
8x1GbE
Copper
4x10Gb SFP+
4xSR
transceivers
4x10GbE
SFP+ (Accel-
ready)
4xSR
transceivers
4x10GbE
SFP+ (Accel-
ready)
4xSR
transceivers
4x10GbE
SFP+ (Accel-
ready)
4xSR
transceivers
Memory 12GB 64GB 24GB 64GB 64GB
Security Acceleration Module Package (Additions)
SAM-108 Yes Yes Yes
SAM-108
Memory
24 GB 24 GB 24 GB
[Confidential] For designated groups and individuals
48©2014 Check Point Software Technologies Ltd.
Consolidated Management
[Confidential] For designated groups and individuals
49©2014 Check Point Software Technologies Ltd.
Centrally Managed
ONE PLACE
Control All Security
Functions
Network Security Management Single Unified Console for All Security Functions
50©2014 Check Point Software Technologies Ltd.
Easy Security Status View
Security
Status
Overview
Real-time
Synopsis
Trending
Analysis
51©2014 Check Point Software Technologies Ltd.
Appliances From Check Point
PERFORMANCE New Features & Performance
SECURITY Consolidate SecurityOptimized for Software Blades
SCALABILITY Any Business & Environment
52©2014 Check Point Software Technologies Ltd.
Check Point Appliances—Securing Any Environment
Branch Office
Solution
Internal
Networks
Network
Perimeter
Data Center &
Cloud Security