Check Point Next Generation Security Gateway Solution

In This Section:

Overview of Firewall Features

The Check Point Next Generation Security Gateway includes:

Access Control
- Firewall (network-level filtering)
- Application Control
- Internet access and filtering
- Content Awareness
- Site to Site VPN
- Mobile Access and VPN Remote Access
Intrusion and Threat Prevention
Identity Awareness (network, user, and machine awareness, for Access Control and Threat Prevention)
Data Loss Prevention

How to Use this Guide

To configure an effective security solution, you must understand how to configure the Next Generation Security Gateway features, and how to add rules to your security policy. This guide helps you understand the general principles of the Check Point Next Generation Security Gateway, and how to configure it.

To learn more about each feature, look at the administration guide for the feature. There is a link to the appropriate administration guide at the end of each section of this guide. To find the link, search for "To Learn More".

Chapter	Feature	Section
Creating an Access Control Policy	Firewall	Basic Access Control
	Application Control	Creating a Unified Access Control Policy:
	URL Filtering
	Content Awareness
	Mobile Access
	IPsec VPN
Creating a Threat Prevention Policy	IPS
	Anti-Bot
	Anti-Virus
	Threat Emulation
	Threat Extraction
Creating Shared Policies	HTTPS Inspection	Configuring HTTPS Inspection
Creating Shared Policies	Geo Policy	Configuring the Geo Policy
Adding Users to the Policy	Identity Awareness
Monitoring and Logging	Logging & Status SmartEvent
Maximizing Network Performance	Advanced Networking & Clustering	CoreXL, SecureXL and Multi-Queue ClusterXL and VRRP
Simplifying Security for Private Clouds	Virtual Systems
Appendix: Securing Data	Data Loss Prevention
Appendix: Securing Data	Data Loss Prevention

Components of the Check Point Firewall Solution

Item	Description
1	SmartConsole
2	Security Management Server
3	Internet and external networks
4	Security Gateway
5	Internal network

These are the primary components of a Check Point firewall solution:

Security Gateway - The engine that enforces the organization’s security policy, is an entry point to the LAN, and is managed by the Security Management Server.
Security Management Server - The application that manages, stores, and distributes the security policy to Security Gateways.
SmartConsole - A Check Point GUI application used to manage security policies, monitor products and events, install updates, provision new devices and appliances, and manage a multi-domain environment.