Introducing Check Point Application Control Software Blade. Patrick Hanel Technical consultant

Transcription

1 Introducing Check Point Application Control Software Blade Patrick Hanel Technical consultant 2010 Check Point Software Technologies Ltd. [Unrestricted] For everyone

2 Internet Applications in the Work Place Internet Applications an integral part of today s business John and Support Andy Mike Jeff Sue Julie David is (HR) sending posting team work watching Web searching updating new pictures progress the helping conferencing a to recap on his of with for corporate his personal customer Gmail Dan from last Facebook night branch candidates Twitter account on Skype office NBA status profile results IT staff lack strong visibility into this activity 2

3 The Problem with Internet Applications Malware Threats Bandwidth Hogging Productivity Loss 3

4 Introducing Check Point Application Control Software Blade Detect and control application usage AppWiki Industry s largest library with over 50,000 applications Educate users on corporate policies Available Q Available on EVERY gateway 4

5 Introducing Check Point AppWiki Unparalleled Application Control Over 4,500 applications Over 50,000 social-network widgets Grouped in over 150 categories (including Web 2.0, IM, P2P, Voice & Video, File Share) World s largest Application Classification Library 5

6 Granular Application Categorization Application Type IM Web conferencing Gaming. Advanced Properties Share files High bandwidth Use stealth techniques Security Risk Measures the potential risk 6

7 User and Machine Awareness Includes User Identification Corporate Active Directory Security Gateway User- and group-aware Machine-aware User identification with both agent-based and seamless, agentless Active Directory integration 7

8 Application Detection and Usage Controls Application Detection and Usage Controls Enable access for support team Identify, allow, block or limit usage of applications at user or group level 8

9 Reality of Standard Application Control IT defines black & white policies Policies don t match real usage IT resorts to monitor only No real control! 9

10 Check Point UserCheck Technology Ask Understand usage needs, while enforcing policy Application Usage Alert You are trying to use Skype. Corporate application use policy does not allow the use of Skype. If you require Skype access for business, please click Explain blow. Makes application control more practical Corporate Proper Use Policy Asks users to explain reasons for application usage 10

11 Check Point UserCheck Technology Ask Understand usage needs, while enforcing policy Application Usage Alert You are trying to access YouTube. Corporate application use policy limits YouTube access to business use only in order to save bandwidth. Makes application control more practical Please select and confirm your use-case: Personal, Business, or Cancel Asks users to confirm application usage in real-time 11

12 Check Point UserCheck Technology Inform Inform and educate, while allowing application usage Alerts users in real-time Educates users on risk and usage policies 12

13 Check Point UserCheck Technology Limit Use to preserve resources (bandwidth) or control acceptable use Application Usage Alert You are trying to access Facebook Games. Corporate application use policy allows access to non-business related activities such as Facebook Games only during these times: 12:30-14:00 19:30-8:30 Corporate Proper Use Policy 13

14 Practical Implementation Involve end-users using multiple policy actions Accept / Drop Traditional security policies are suitable for clear-cut cases Inform Allow but inform the user about the risks Ask Learn usage patterns to create better policies Limit Use to preserve resources (bandwidth) or control acceptable use 14

15 Fully Integrated Into Software Blade Architecture Integrated in Software Blade Architecture Available on All Security Gateways Centralized Management New Software Blade 15

16 Easy Deployment Available on All Security Gateways Application Control Identify and control usage of thousands of applications based on user and machine identity. One-click activation on any Check Point security gateway 16

17 Central Policy and Event Management Centralized Management Manage application policies, users and events from a single console 17

18 Summary Check Point Application Control Software Blade Detect and control application usage AppWiki Industry s largest library with over 50,000 applications Educate users on corporate policies Available Q Available on EVERY gateway 18

19 Thank You! 2010 Check Point Software Technologies Ltd. [Unrestricted] For everyone