Profile - General Policy

What can I do here?

Use this window to activate Threat Prevention blades, active protection, and activation modes.

Getting Here - Security Policies > Threat Prevention > Policy > Threat Tools > Profiles > Profile > General Policy

Introducing Profiles

Check Point Threat Prevention provides instant protection based on pre-defined Threat Prevention Profiles. You can also configure a custom Threat Prevention profile to give the exact level of protection that the organization needs.

When you install a Threat Prevention policy on the Security Gateways, they immediately begin to enforce IPS protection on network traffic.

A Threat Prevention profile determines which protections are activated, and which Software Blades are enabled for the specified rule or policy. The protections that the profile activates depend on the:

Performance impact of the protection.
Severity of the threat.
Confidence that a protection can correctly identify an attack.
Settings that are specific to the Software Blade.

A Threat Prevention profile applies to one or more of the Threat Prevention Software Blades: IPS, Anti-Bot, Anti-Virus, Threat Emulation and Threat Extraction.

A profile is a set of configurations based on:

Activation settings (prevent, detect, or inactive) for each confidence level of protections that the ThreatSpect engine analyzes
IPS Settings
Anti-Bot Settings
Anti-Virus Settings
Threat Emulation Settings
Threat Extraction Settings
Indicator configuration
Malware DNS Trap configuration
Links inside mail configuration

Without profiles, it would be necessary to configure separate rules for different activation settings and confidence levels. With profiles, you get customization and efficiency.

SmartConsole includes these default Threat Prevention profiles:

Optimized - Provides excellent protection for common network products and protocols against recent or popular attacks
Strict - Provides a wide coverage for all products and protocols, with impact on network performance
Basic - Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance