February 23, 2012

Check Point Series 80 Video Walkthrough

This is just a overview of the web interface setup for the Series 80.

This box must be managed by a Check Point Management Server. This video shows you how to physically setup the box so that you can connect it to a management server to push a security policy.

Checkpoint Unveils Network Security Blades

Check Point, the leader in network security has released its latest security architecture.  Security Blades is the new security innovation from Check Point.  These are logical independent security blocks that are centrally managed.  

For example ,you can have your standard Firewall blade and then add an IPS blade to further the security of your network.  Then later if you decide you want Anti-virus and Malware protection you can just turn on that blade.  Other Blade options are, Monitoring, URL Filtering, IPSEC VPN, etc…

Blade architecture can be deployed on Check Point UTM-1 and Power-1 appliances, open servers and within virtualized environments. New blades can be added by simply enabling their functionality in software; no additional hardware, firmware or drivers are necessary. This enables organizations to deploy security dynamically, as needed, with lower total cost of deployment.

This looks to be a good move by Check Point and it offers some excellent options for all size businesses.  I will be evaluating these blades soon and I will report my findings here.

thelv

Nokia Exiting the Security Appliance Business

One of the largest firewall security appliance vendor’s (Nokia appliances with Check Point software) recently announced that they would be selling off their security appliance business to an unnamed financial investment firm. This will mean significant confusion for Check Point customers running on the Nokia platforms in terms of what level of support, warranty service, product enhancements, etc. that they can expect to receive in the months ahead.

A source close to Nokia Security stated: For customers, it should be business as usual. Operationally speaking, most of what makes up the Security Appliance business in Nokia is already fairly independent of the rest of Nokia. The relationships with Check Point, Sourcefire, and others will continue and likely strengthen. The only real change will be the name on the front door, though you will likely to continue to see the Nokia brand in use for a period of time while the marketing folks roll out the new branding.

If you find your company in this situation please contact Positive Control Networks at lvance@positivecontrolnetworks.com for more information…

Check Point – for small business

Check Point has been the leader in network security for many years.  They invented stateful firewall protection and they provide network security for 99.9% of all fortune 500 companies.  In the past Check Point only provided security for the largest most complex networks.  This meant that their security products were very expensive and complex to configure.  This has drastically changed.

Check Point now offers their same level of security it offered the large corporations to the small to medium business owners.  Their small office line starts with the Safe@office appliance that can be purchased for the number of users being protected.  These are offered in 1-5 users, 1-25 users, and then unlimitted. These appliances are also offered with a wireless option.  These small office firewalls are nothing to sneeze at.  They offer gateway virus protection, web filtering, Intrusion Prevention, Internet failover, and many more options.

Check Point also offers a home version of this firewall called the Zone Alarm Security Firewall.  It is offered through the Zone Alarm company that is owned by Check Point.  Another variant of the this firewall is the Check Point Edge device that is a more robust firewall that is used for regional offices and medium sized businesses.  Look for another seperate article on the Edge box coming soon.

The small business can now get the same protection that the large corporations receive at a reasonable price. These firewall can also me professionally managed and configured for your company.  For more information see http://www.positivecontrolnetworks.com

What does a firewall do ?

A firewall is a system designed to prevent access from an external network (such as the internet) to an inside private network. The firewall is placed between the untrusted network and the trusted network and monitors all traffic between the two.  Early firewalls tended to just block all inbound traffic and let everything from the inside pass.  This was ok for a while but as threats became more complex, more protection was needed.  There are several different types of firewalls and a short list is provided below:

Packet Firewalls -  All network data travels via packets.  This is the basic transport layer and these firewalls just looked at the packet destination and either allowed or blocked.  A very simple firewall with limited abilities.

Proxy Server – A proxy firewall pretty much intercepts all packets and looks at a rule base to decide its fate.  Proxy firewall included some of the first firewalls but became very cumbersome in functionality.  Although the Proxy firewall is coming back in some respects and is mainly used in conjunction with other firewall types.

Stateful packet filters – This technology checks the state of firewalls connections to determine if the traffic will be allowed through.  An example, is that when the firewall receives a request to allow traffic through such as web traffic it first looks at its connection table to see if there was actually a web request initiated from the inside of the network.  A person browsing the internet for example from the inside network.

Application layer firewall – Application layer firewalls look at the actual information in the packets and at the application layer before allowing a connection.  These types of firewalls are the mainstay of more up to date blended threat firewalls.

This list is not a complete list of the firewall types, but it covers the majority of firewall types.  In the real world, threats have so evolved that the above type firewalls are utilized together to provide the best protection available in a single firewall.  Combining these firewall technologies has helped hinder the latest threats.  We call this Unified Threat Management firewalls.

What is a firewall ?

Firewalls have become a common word in the business world as well as the residential environment.  With the introduction of the internet to business operations, security has become a major concern.  Over the last few years breaches have become a common place and the firewall has evolved.  Over the last few years, the security threats to organizations have dramatically increased.   Along with that threat so has grown the evolution of the firewall.  The name firewall came from the aviation and construction industry.  In the building of an aircraft, a fire protectant firewall was built between the cockpit and the engine compartment on single engine aircraft. This barrier was designed to protect the pilot from the heat and dangers associated with the engine compartment. The construction industry termed this as well when fireproofing buildings with a fire resistant wall in a building.   So came the name firewall as it protects the inside network from the hostile outside environment.