T: +44 (0) F: +44 (0) E: W:

Transcription

1 T: +44 (0) F: +44 (0) E: W: Wick Hill Ltd. River Court, Albert Drive, Woking, Surrey, GU21 5RP

2 Data Sheet Edge Wireless Secure wireless connectivity with unmatched scalability YOUR CHALLENGE Organizations are increasingly deploying wireless LANs (WLANs) at remote sites to increase worker productivity and make the network more accessible. And you are concerned about security at these sites when enabling wireless connectivity there. You know it is essential that WLANs receive the same levels of security that wired LANs do. OUR SOLUTION VPN-1 UTM Edge Wireless (W) security appliances deliver the same security found in Edge appliances and add the highest levels of security for wireless networks. Edge W appliances support multiple security protocols, including 802.1x, IPSec over WLAN, RADIUS, WPA2, and WEP authentication. They also have dedicated WLAN interfaces from which administrators can set specific security rules for WLAN segments. This protects wireless interfaces by granting access only to authorized users, preventing hackers from attacking corporate resources and applications. SUPERIOR WIRELESS PERFORMANCE Extended wireless throughput and range In addition to supporting b and g technologies, Edge W is the only UTM appliance to support Atheros Super G and Extended Range (XR ) technologies for WLANs. Providing double the network throughput of g, Super G enables your wireless network to reach speeds of up to 108 Mbps. And Super G provides faster network performance when users work with bandwidth-intensive applications, such as streaming media and VoIP. The NGX platform delivers a unified security architecture for Check Point perimeter, internal, and Web security. PRODUCT DESCRIPTION VPN-1 UTM Edge W appliances provide integrated firewall, VPN, intrusion prevention, and antivirus technologies to securely connect remote offices. They enable businesses to provide wireless access at remote sites without compromising security. Edge gateways can be managed with SmartCenter, ensuring consistent policy management across both central and remote networks. PRODUCT FEATURES Integrated firewall, VPN, intrusion prevention, and antivirus Wireless LAN support Centralized, large-scale management PRODUCT BENEFITS Provides the highest level of security Simplifies WLAN and security deployments Increases user mobility and productivity at remote sites NGX HIGHLIGHTS Unified management Automatic, centralized security updates Dynamic routing support Check Point protects every part of your network perimeter, internal, Web to keep your information resources safe, accessible, and easy to manage. 1

3 Edge Wireless XR technology on Edge W minimizes dead spots and greatly increases the coverage of a wireless network for remote sites, providing connectivity that is more reliable. With XR-enabled clients, your network achieves up to three times the range of a standard access point up to 300 meters indoors and up to 1 kilometer outdoors. Wireless Multimedia Quality of Service As businesses adopt real-time multimedia services to increase worker productivity and enable cost-effective communication across geographically dispersed locations, they expect reasonable Quality of Service (QoS) levels for these communications. Edge W is the only UTM that supports Wireless Multimedia QoS, which prioritizes multiple types of traffic flow from different applications such as voice, video, and audio under a variety of environmental and traffic conditions. It ensures that time-sensitive traffic is transmitted with minimal delay and at expected performance levels. HOT SPOT SUPPORT Internet hot spots are rapidly being deployed in places like airports, hotels, retail outlets, and educational institutions. Edge W can be used to create guest access networks by setting up a hot spot network. Administrators can easily require Web-based user authentication or termsof-use approval prior to providing access to the network. This enables convenient, yet controlled network access for guest users, without compromising corporate resources. THE TECHNOLOGY INSIDE THE BOX Edge W is based on VPN-1 Embedded NGX technology, which incorporates Check Point marketleading firewall and VPN software optimized for embedded platforms. VPN-1 Embedded NGX is developed by SofaWare Technologies, a Check Point company. Edge W supports unparalleled wireless network speeds of up to 108 Mbps through the new Super G wireless standard. 2

4 Secure wireless connectivity with unmatched scalability Corporate Headquarters Financials Employee Retail Inventory Partner Site PDA SMART Check Point Centralized Management VPN-1 Power or Internet Primary ISP Backup ISP Retail Site VLAN 1 VLAN 3 Edge W VPN-1 SecuRemote VLAN 2 Office 1 Office 2 Offices Edge W Backup Office 3 Teleworker or Traveling Employee Connected to Office Edge W provides enterprise-level integrated firewall and wired and wireless VPN security solutions for remote sites, branch offices, and partner sites. EDGE W APPLIANCE SPECIFICATIONS W8 W16 W32 WU Size Total users Unlimited Interfaces Four-port 10/100 LAN switch 10/100 WAN port 10/100 DMZ/WAN2 port Serial port Optional ADSL modem Firewall and security features Performance 80 Mbps 80 Mbps 80 Mbps 150 Mbps Concurrent connections 8,000 8,000 8,000 8,000 Stateful Inspection firewall SmartDefense Application Intelligence Port-based and tag-based VLAN support Denial of Service (DoS) protection Anti-spoofing Gateway antivirus Integrated antivirus support Supported protocols IMAP, NBT, NUR FTP, POP3, SMTP, user-defined TCP and UDP ports On-the-fly decompression Centralized antivirus* POP3, SMTP VPN Performance (3DES) 20 Mbps 20 Mbps 20 Mbps 30 Mbps Site-to-site IPSec VPN gateway Remote access IPSec VPN client Remote access VPN gateway 1 user 10 users 15 users 25 users Remote access from internal networks VPN-1 SecuRemote client licenses Included Included Included Included MS, 3DES, DES encryption IPSec NAT traversal Hardware random number generator Continued on page 4 3

5 W8 W16 W32 WU Wireless LAN Wireless protocols IEEE b, g, Super G Wireless security 802.1x, IPSec over Wireless, MAC address filtering, WPA, WPA2, WPA-PSK, WEP Wireless range (regular mode) Up to 100 meters indoors/greater than 300 meters outdoors Wireless range (extended range mode) Up to 300 meters indoors/greater than 1 kilometer outdoors** Multiple SSIDs Dual diversity antennas Wireless Multimedia QoS Hot spot mode Networking WAN access protocols DHCP, PPPoE, PPTP, static IP, Telstra Static NAT Hide NAT DHCP server, client, and relay Dead Internet connection detection OSPF dynamic routing Bandwidth management (QoS) High Availability Gateway High Availability-ready Supports backup VPN gateway at another site (MEP) Supports backup ISP (broadband) Supports dial backup (requires external modem) Automatic failover VPN user and gateway authentication Site-to-site Check Point Internal Certification Authority (Diffie-Hellman 1,024-bit PKI) digital certificates, X.509 digital certificates, or preshared secret Remote access (to VPN-1 Power) LDAP, MS ActiveDirectory, RADIUS, RSA SecurID, TACACS, XAUTH Remote access (to Edge W) Preshared secret or RADIUS Certificate generation for remote access Centralized management support Management software Provider-1, SmartCenter, SmartCenter Pro/SmartLSM, SmartCenter Express, SmartCenter Express Plus, SMP Software updates SmartUpdate Reporting and monitoring Eventia Reporter, SmartView Monitor, SmartView Tracker, Syslog Local Web-based management Installation wizard Firewall wizard VPN wizard Local logs HTTPS remote access Additional management options CLI via SSH CLI via serial port SNMP support Other hardware specifications Dimensions H x W x L 1.2 x 8 x 4.8 inches (3.0 x 20.3 x 12.2 cm) Weight 1.8 Ibs (0.82 kg) Power VAC, Hz Regulatory compliance FCC Part 15 Class B, CE Warranty One-year hardware *Super G and XR modes require Super G- and XR-enabled wireless network adapters. **Environmental factors may lower actual range Check Point Software Technologies Ltd. All rights reserved. Check Point, Application Intelligence, Check Point Express, the Check Point logo, AlertAdvisor, ClusterXL, Cooperative Enforcement, ConnectControl, Connectra, CoSa, Cooperative Security Alliance, Eventia, Eventia Analyzer, Eventia Reporter, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, IMsecure, INSPECT, INSPECT XL, Integrity, InterSpect, IQ Engine, Open Security Extension, OPSEC, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureKnowledge, SecurePlatform, SecuRemote, SecureXL Turbocard, SecureServer, SecureUpdate, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, Smarter Security, SmartDashboard, SmartDefense, SmartLSM, SmartMap, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, Stateful Clustering, TrueVector, Turbocard, UAM, User-to-Address Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge,, VPN-1 Power, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 VSX, VPN-1 XL, Web Intelligence, ZoneAlarm, ZoneAlarm Pro, Zone Labs, and the Zone Labs logo are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726, 6,496,935, 6,873,988 and 6,850,943 and may be protected by other U.S. Patents, foreign patents, or pending applications. May 5, 2006 P/N Worldwide Headquarters 3A Jabotinsky Street, 24th Floor Ramat Gan 52520, Israel Tel: Fax: info@checkpoint.com U.S. Headquarters 800 Bridge Parkway Redwood City, CA Tel: ; Fax: