Security Policy

Security PolicyClosed Collection of rules that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection. is a collection of rules and settings that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection.

Check Point solution provides several types of Security Policies.

Access Control Policy

Access Control Policy consists of these parts:

Threat Prevention Policy

For more information, see the R81 Threat Prevention Administration Guide.

Determines how the system inspects connections for bots and viruses. The primary component of the policy is the Rule BaseClosed All rules configured in a given Security Policy. Synonym: Rulebase.. The rules use the Malware database and network objects.

If you enable Identity Awareness Software Blade on your Security Gateways, you can also use Access Role objects as the scope in a rule. This lets you easily make rules for individuals or different groups of users.

How to get there:

  1. Connect with SmartConsole to the Management Server.

  2. From the left navigation panel, click Security Policies.

  3. In the Threat Prevention section, click Policy.

Rule structure:

No

Name

Protected
Scope

Source

Destination

Protection/
Site/
File/
Blade

Services

Action

Track

Install On

Comments

#

Your Rule Name

Specific objects

Specific Source objects

Specific Destination objects

N/A

(or your specific objects in an exception rule)

Any

or

Specific Service objects

Basic

or

Optimized

or

Strict

or

Your Profile

None

or

Log

or

Alert

In addition:

Packet Capture

Forensics

Policy Targets

or

Specific Security Gateway and Cluster objects

Your Comment

HTTPS Inspection Policy

For more information, see the R81 Security Management Administration Guide.

Inspects the HTTP / HTTPS traffic with these Software Blades:

Security Gateways cannot inspect HTTPS traffic because it is encrypted. You can enable the HTTPS InspectionClosed Feature on a Security Gateway that inspects traffic encrypted by the Secure Sockets Layer (SSL) protocol for malware or suspicious patterns. Synonym: SSL Inspection. Acronyms: HTTPSI, HTTPSi. feature to let the Security Gateways create new SSL connections with the external site or server. The Security Gateways are then able to decrypt and inspect HTTPS traffic that uses the new SSL connections.

How to get there:

  1. Connect with SmartConsole to the Management Server.

  2. From the left navigation panel, click Security Policies.

  3. In the HTTPS Inspection section, click Policy.

    Note - In addition, in the HTTPS Tools section, click Additional Settings.

Rule structure:

No

Name

Source

Destination

Services

Category/
Custom
Application

Action

Track

Blade

Install On

Certificate

Comment

#

Your Rule Name

Any

APPI_global_obj_Internet

or

Specific Destination objects

TLS default services

or

Specific Service objects

Any

or

Specific objects

Inspect

or

Bypass

None

or

Log

or

Alert

All

or

Specific Blade

Policy TLS Targets

or

Specific Security Gateway and Cluster objects

Outbound Certificate

or

Your Certificate for Inbound Inspection

Your Comment

Data Loss Prevention Policy

For more information, see the R81 Data Loss Prevention Administration Guide.

Prevents unintentional data leaks by catching protected data before it leaves your organization.

How to get there:

  1. Connect with SmartConsole to the Management Server.

  2. From the left navigation panel, click Manage & Settings.

  3. From the left tree, click Blades.

  4. In the Data Loss Prevention section, click Configure in SmartDashboard.

  5. From the top, click the Data Loss Prevention tab.

  6. From the left tree, click Policy.

Rule structure:

Flag

Name

Data

Source

Destination

Protocol

Exceptions

Action

Track

Severity

Install On

Time

Category

Comment

Category Name(Y-Z)

No Flag

or

Follow Up

or

Improve Accuracy

Your Rule Name

Specific Data TypeClosed Classification of data in a Check Point Security Policy for the Content Awareness Software Blade.

My Organization

or

Specific Source objects

Outside My Org

or

Specific Destination objects

Any

or

E-mail

or

FTP

or

HTTP

Shows:

none

or

The number of exceptions added for this rule (double-click this cell)

Detect

or

Inform User

or

Ask User

or

Prevent

or

Watermark

Email

or

Log

or

Alert

and how to store an incident

Low

or

Medium

or

High

or

Critical

DLP Blades

Any

None

or

Specific Category

Your Comment

Geo Policy

For more information, see the R81 Security Management Administration Guide.

Creates a policy for traffic to or from specific geographical or political locations.

How to get there:

  1. Connect with SmartConsole to the Management Server.

  2. From the left navigation panel, click Security Policies.

  3. In the Access Control section, click Policy.

  4. Follow sk126172 to use Updatable Objects in the Source and Destination columns.

For additional information, see the SmartConsole Online Help (press F1).

Important - From R81, Security Gateways no longer support Geo Policy configured in SmartConsole > Security Policies view > Shared Policies section > Geo Policy (Known Limitation PMTR-56212).

Rule structure:

Country

Direction

Action

Track

Comments

Specific Country object

From and To Country

or

From Country

or

To Country

Accept

or

Drop

None

or

Log

or

Alert

Your Comment

Mobile Access Policy

For more information, see the R81 Mobile Access Administration Guide.

Controls which user groups have access to which applications, when connecting through a Mobile AccessClosed Check Point Software Blade on a Security Gateway that provides a Remote Access VPN access for managed and unmanaged clients. Acronym: MAB. Security Gateway.

How to get there:

  1. Connect with SmartConsole to the Management Server.

  2. From the left navigation panel, click Manage & Settings.

  3. From the left tree, click Blades.

  4. In the Mobile Access section, click Configure in SmartDashboard.

  5. From the top, click the Mobile Access tab.

  6. From the left tree, click Policy.

Rule structure:

No

Users

Applications

Install On

Comment

#

All Users

or

Specific User objects

Any

or

Specific Custom Application objects

Any

or

Specific Security Gateway objects

Your Comment