Glossary
-
Check Point Software Blade on a Security Gateway that blocks botnet behavior and communication to Command and Control (C&C) centers. Acronyms: AB, ABOT.
-
Check Point Software Blade on a Security Gateway that provides comprehensive protection for email inspection. Synonym: Anti-Spam & Email Security. Acronyms: AS, ASPAM.
-
Check Point Software Blade on a Security Gateway that uses real-time virus signatures and anomaly-based protections from ThreatCloud to detect and block malware at the Security Gateway before users are affected. Acronym: AV.
-
Check Point Software Blade on a Security Gateway that allows granular control over specific web-enabled applications by using deep packet inspection. Acronym: APPI.
-
Microsoft® Azure Resource Manager. Technology to administer assets using Resource Group.
-
Autonomous System Number – Special number that used for the BGP
-
Log that contains administrator actions on a Management Server (login and logout, creation or modification of an object, installation of a policy, and so on).
-
Amazon® Web Services. Public cloud platform that offers global compute, storage, database, application and other cloud services.
-
In AWS, a geographic area to place resources. Each region has multiple, isolated locations known as Availability Zones.
-
AWS Virtual Private Cloud. A private cloud that exists in the public cloud of Amazon. It is isolated from other Virtual Networks in the AWS cloud.
-
Security Gateway or Virtual System that works as a Layer 2 bridge device for easy deployment in an existing topology.
-
Cisco® Application Centric Infrastructure. Comprehensive SDN architecture, policy-based automation solution for increased scalability through a distributed enforcement system with greater network visibility. Trademark of Cisco.
-
Cisco® Application Policy Infrastructure Controller. Automation and management point for the Cisco ACI fabric. It centralizes access to fabric information, optimizes the application lifecycle for scale and performance, and supports flexible application provisioning across physical and virtual resources.
-
In Cisco ACI SDN, a policy between Endpoint Groups (EPGs), with one EPG providing and one EPG consuming, to virtualize a physical network cable connection.
-
Cisco® Identity Services Engine. Provides highly secure network access to users and devices to streamline security policy management and reduce operating costs. Trademark of Cisco.
-
Provisions SDDC services as Virtual Data Centers that provide virtualized computer networking, storage, and security.
-
Check Point Virtual Security Gateway that protects dynamic virtual environments with policy enforcement. CloudGuard Gateway inspects traffic between Virtual Machines to enforce security, without changing the Virtual Network topology.
-
Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing.
-
Security Gateway that is part of a cluster.
-
Check Point Software Blade on a Management Server to view and apply the Security Best Practices to the managed Security Gateways. This Software Blade includes a library of Check Point-defined Security Best Practices to use as a baseline for good Security Gateway and Policy configuration.
-
Check Point Software Blade on a Security Gateway that provides data visibility and enforcement. Acronym: CTNT.
-
Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores.
-
On a Security Gateway with CoreXL enabled, the Firewall kernel is copied multiple times. Each replicated copy, or firewall instance, runs on one processing CPU core. These firewall instances handle traffic at the same time, and each firewall instance is a complete and independent firewall inspection kernel. Synonym: CoreXL FW Instance.
-
Secure Network Distributer. Part of CoreXL that is responsible for: Processing incoming traffic from the network interfaces; Securely accelerating authorized packets (if SecureXL is enabled); Distributing non-accelerated packets between Firewall kernel instances (SND maintains global dispatching table, which maps connections that were assigned to CoreXL Firewall instances). Traffic distribution between CoreXL Firewall instances is statically based on Source IP addresses, Destination IP addresses, and the IP 'Protocol' type. The CoreXL SND does not really "touch" packets. The decision to stick to a particular FWK daemon is done at the first packet of connection on a very high level, before anything else. Depending on the SecureXL settings, and in most of the cases, the SecureXL can be offloading decryption calculations. However, in some other cases, such as with Route-Based VPN, it is done by FWK daemon.
-
Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself.
-
Dynamically Assigned IP (DAIP) Security Gateway is a Security Gateway, on which the IP address of the external interface is assigned dynamically by the ISP.
-
Virtual centralized repository, or a group of physical networked hosts, Virtual Machines, and datastores. They are collected in a group for secured remote storage, management, and distribution of data.
-
Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP.
-
Classification of data in a Check Point Security Policy for the Content Awareness Software Blade.
-
Configuration in which the Check Point Security Gateway and the Security Management Server products are installed on different computers.
-
Special object type, whose IP address is not known in advance. The Security Gateway resolves the IP address of this object in real time.
-
Check Point Software Blade on a Management Server to manage an on-premises Harmony Endpoint Security environment.
-
The name of the elevated command line shell that gives full system root permissions in the Check Point Gaia operating system.
-
Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems.
-
The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell).
-
Web interface for the Check Point Gaia operating system.
-
Google® Cloud Platform is a suite of products and services that includes hosting, cloud computing, database services and more.
-
GCP Projects form the basis for creating, enabling, and using all Cloud Platform services. This includes managing APIs, enabling billing, adding and removing collaborators, and managing permissions for Cloud Platform resources.
-
A region is a specific geographical location where you can run resources. Each region has one or more zones.
-
A Virtual Private Cloud is a global private isolated Virtual Network partition that provides managed networking functionality for your GCP resources.
-
Software package installed on top of the current software version to fix a wrong or undesired behavior, and to add a new behavior.
-
Feature on a Security Gateway that inspects traffic encrypted by the Secure Sockets Layer (SSL) protocol for malware or suspicious patterns. Synonym: SSL Inspection. Acronyms: HTTPSI, HTTPSi.
-
Internal Certificate Authority. A component on Check Point Management Server that issues certificates for authentication.
-
Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA.
-
Check Point Software Blade on a Management Server to view Identity Logs from the managed Security Gateways with enabled Identity Awareness Software Blade.
-
Internal Load Balancer, used to load balance traffic in a virtual network
-
Computers and resources protected by the Firewall and accessed by authenticated users.
-
Check Point Software Blade on a Security Gateway that inspects and analyzes packets and data for numerous types of risks (Intrusion Prevention System).
-
Check Point Software Blade on a Security Gateway that provides a Site to Site VPN and Remote Access VPN access.
-
Collection of hotfixes combined into a single package. Acronyms: JHA, JHF, JHFA.
-
An authentication server for Microsoft Windows Active Directory Federation Services (ADFS).
-
Dedicated Check Point server that runs Check Point software to store and process logs.
-
Check Point Software Blade on a Management Server to view Security Logs from the managed Security Gateways.
-
(1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI.
-
Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server.
-
Manual configuration of NAT rules by the administrator of the Check Point Management Server.
-
Collection of integrated cloud services that developers and IT professionals use to build, deploy, and manage applications through a global network of data centers managed by Microsoft®.
-
Check Point Software Blade on a Security Gateway that provides a Remote Access VPN access for managed and unmanaged clients. Acronym: MAB.
-
Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS.
-
Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS.
-
Logical object that represents different parts of corporate topology - computers, IP addresses, traffic protocols, and so on. Administrators use these objects in Security Policies.
-
Check Point Software Blade on a Management Server to manage an on-premises environment with an Access Control and Threat Prevention policies.
-
Network Virtual Appliance - A resource deployed in Azure's Virtual Hub that includes Security Gateways and other networking infrastructure.
-
Physical computer manufactured and distributed by a company, other than Check Point.
-
An open source cloud-computing infrastructure for service providers and enterprises. It includes modules for administration, storage, networking and Virtual Machine deployment and control.
-
A Layer 3 network that separates routing instances, and can be used as an administrator separation.
-
Check Point Software Blade on a Management Server that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: SmartProvisioning, SmartLSM, Large-Scale Management, LSM.
-
Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency.
-
Object used in ARM to monitor, control access, provision and manage billing for collections of assets that are required to run an application, or used by a client or company department.
-
Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session.
-
All rules configured in a given Security Policy. Synonym: Rulebase.
-
Software Defined – Wide Area Network (WAN), more information on this solution: https://www.checkpoint.com/cyber-hub/network-security/what-is-sd-wan/
-
Software-Defined Data Center. Data Center infrastructure components that can be provisioned, operated, and managed through an API for full automation.
-
Software-Defined Network. Virtualization of topology, traffic, and functionality.
-
Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway.
-
Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.
-
Acts as a virtual firewall that controls the traffic for one or more instances in AWS. Security Groups are associated with network interfaces.
-
A collection of virtual objects that defines the Distributed Firewall protection policy in VMware NSX.
-
Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server.
-
Collection of rules that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection.
-
Ordered set of function nodes between terminals, which identifies network service functions required by an application. Required for CloudGuard integration.
-
Component that manages the communication between Check Point products, CloudGuard Controller and the VMware NSX, through the VMware REST API.
-
Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server.
-
Software Load Balancer, used to distribute tenant and tenant customer network traffic to virtual network resources. SLB enables multiple servers to host the same workload, providing high availability and scalability
-
Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.
-
Legacy Check Point GUI client used to create and manage the security settings in versions R77.30 and lower. In versions R80.X and higher is still used to configure specific legacy settings.
-
Check Point Software Blade on a Management Server (the actual name is "Provisioning") that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: Large-Scale Management, SmartLSM, LSM.
-
Legacy Check Point GUI client used to manage licenses and contracts in a Check Point environment.
-
Source Network Address Translation (Source NAT)
-
Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities.
-
Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server.
-
Group of users, to isolate access to resources in Cisco ACI. Also known as Project.
-
Check Point Software Blade on a Security Gateway that monitors the behavior of files in a sandbox to determine whether or not they are malicious. Acronym: TE.
-
Check Point Software Blade on a Security Gateway that removes malicious content from files. Acronym: TEX.
-
Network object that represents an external service, such as Microsoft 365, AWS, Geo locations, and more.
-
Check Point Software Blade on a Security Gateway that allows granular control over which web sites can be accessed by a given group of users, computers or networks. Acronym: URLF.
-
Check Point Software Blade on a Management Server that integrates LDAP and other external user management servers with Check Point products and security solutions.
-
Environment of logically connected Virtual Machines.
-
A VMware® physical hypervisor server that hosts one or more Virtual Machines and other virtual objects. All references to ESX are also relevant for ESXi unless specifically noted otherwise.
-
Basic network and security functionality for virtual computer environments. A VMware® product family for SDN of Virtual Machines on the cloud (previously known as vShield).
-
Centralized management tool for VMware® vSphere. It manages many ESX servers and Virtual Machines from different ESX servers, from one console application.
-
VMware® cloud computing virtualization operating system. The vSphere Web Client is the GUI to manage Virtual Machines and their objects.
-
Virtual Network Interface Card. Software-based abstraction of a physical interface that supplies network connectivity for Virtual Machines.
-
A software abstraction of a physical Ethernet switch. It can connect to physical switches through physical network adapters to join virtual networks with physical networks. It can also be a Distributed Virtual Switch (dvSwitch), for definition and use on multiple ESXi hosts.
-
Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts.
-
Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0.
-
Check Point Software Blade on a Security Gateway (R81.20 and higher) that provides real-time phishing prevention based on URLs. Acronym: ZPH.
A
B
C
D
E
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
Z