Check Point Next Generation Security Gateway Solution

In This Section: Overview of Firewall Features How to Use this Guide Components of the Check Point Firewall Solution

Overview of Firewall Features

The Check Point Next Generation Security Gateway includes:

• Access Control
  • Firewall (network-level filtering)
  • Application Control
  • Internet access and filtering
  • Content Awareness
  • Site to Site VPN
  • Mobile Access and VPN Remote Access
• Intrusion and Threat Prevention
• Identity Awareness (network, user, and machine awareness, for Access Control and Threat Prevention)
• Data Loss Prevention

How to Use this Guide

To configure an effective security solution, you must understand how to configure the Next Generation Security Gateway features, and how to add rules to your security policy. This guide helps you understand the general principles of the Check Point Next Generation Security Gateway, and how to configure it.

To learn more about each feature, look at the administration guide for the feature. There is a link to the appropriate administration guide at the end of each section of this guide. To find the link, search for "To Learn More".

Chapter		Feature	Section
Creating an Access Control Policy		Firewall	Basic Access Control
		Application Control	Creating a Unified Access Control Policy
		URL Filtering
		Content Awareness
		Mobile Access
		IPsec VPN
Creating a Threat Prevention Policy		IPS
		Anti-Bot
		Anti-Virus
		Threat Emulation
		Threat Extraction
Creating Shared Policies		HTTPS Inspection	Configuring HTTPS Inspection
		Geo Control	Configuring the Geo Policy
Adding Users to the Policy		Identity Awareness
Monitoring and Logging		Logging & Status SmartEvent
Maximizing Network Performance		Advanced Networking & Clustering	CoreXL, SecureXL and Multi-Queue Performance Tuning Administration Guide ClusterXL and VRRP
Simplifying Security for Private Clouds		Virtual Systems
Appendix: Securing Data		Data Loss Prevention

Components of the Check Point Firewall Solution

Item	Description
1	SmartConsole
2	Security Management Server
3	Internet and external networks
4	Security Gateway
5	Internal network

These are the primary components of a Check Point firewall solution:

• Security Gateway - The engine that enforces the organization’s security policy, is an entry point to the LAN, and is managed by the Security Management Server.
• Security Management Server - The application that manages, stores, and distributes the security policy to Security Gateways.
• SmartConsole - A Check Point GUI application used to manage security policies, monitor products and events, install updates, provision new devices and appliances, and manage a multi-domain environment.