T: +44 (0) F: +44 (0) E: W:

Transcription

1 T: +44 (0) F: +44 (0) E: W: Wick Hill Ltd. River Court, Albert Drive, Woking, Surrey, GU21 5RP

2 SYSTEM REQUIREMENTS Sed ut perspiciatis, unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam LOBORTIS NISL UT ALIQUIP rem aperiam eaque ipsa, quae ab illo inventore veritatis Duis autem: Tincidun laoreet dolore: Facilisis vero eros: Odio dignissim: QUIS NOSTRUD EXERCIT PRODUCT HIGHLIGHTS dolore FEATURES: magnam aliquam quaerat YOUR voluptatem. CHALLENGE ut enim ad ipsum built suscipit to dolor easily laboriosam, nisi ize ut aliquid that they ex cannot ea commodi remain competitive by just Vel eum dolor hendrerits: Scalable, resilient architecture Internet service providers around the world rel- Lorem sit Tincidun laoreet dolore: support amet consequatur? tens of thousands in of ea small voluptate busi- velit esse, quam nihil molestiae conse- Facilisis vero eros: quis autem vel providing eum iure reprehenderit, connectivity services. qui Ut wisi enim ad minim nesses quatur, vel illum, qui dolorem eum Concurrently, fugiat, quo increasing voluptas awareness to Praesent Internet : Ullamcorper nulla pariatur? suscipitlobortis nisl ut aliquip Vulputate esse mole: hazards has resulted in an appealing business Single solution for delivering firewall, VPN, antivirus, antispam, URL filtertion to enhance their relationships with VEL small UT ALIQUIP COMMODO opportunity. Service providers in a perfect posiing, reporting, automated and medium businesses by providing Internet Duis autem: firmware At vero updates, eos et and accusamus et iusto security odio services. dignissimos Tincidun laoreet dolore: DNS ducimus, services. qui blanditiis praesentium voluptatum deleniti atque corrupti, quos dolores et Small quas and molestias medium excepturi sint, businesses need Facilisis a simple, vero eros: User-friendly, web-based obcaecati cupiditate intuitive non provident, measure similique to ensure the privacy Facilisis of their vero eros: interface increases efficiency sunt and in reduces culpa, qui training costs laborum et dolorum fuga. et harum tect the quidem integrity rerum of their faci-systems and block-out officia deserunt personal mollitia and animi, business id est data. They need to pro- Odio vero dignissim: lis est et expedita distinctio. nam objectionable libero tempore, content cum and viruses, while constantly cumque staying nihil up impedit, to date. before. Integrated soluta subscriber nobis est eligendi optio, CONSECTETUER ADIPISCING management quo minus system id, quod maxime placeat, facere possimus, Providing managed security services omnis voluptas assumenda est, omnis dolor repellendus. temporibus autem quibusdam et aut officiis debitis Tincidun laoreet Vulputate to small esse mole: and medium sized businesses allows service dolore: Security Management Portal Vel eum iriure dolor hendrerit In Vulputate velit esse at vero The Security Lorem ipsum Management dolor sit amet Portal was developed by SofaWare Technologies, a Check providers to generate new revenue streams, aut rerum necessitatibus saepe eveniet, ut et voluptates Point company focusing on building innovative Facilisis vero eros: while improving customer loyalty. repudiandae sint et molestiae non recusandae. itaque solutions that allow service providers to deliver Autem : earum rerum hic tenetur a sapiente delectus, ut aut reiciendis voluptatibus maiores alias consequatur aut perfer- businesses. managed broadband security solutions to small endis doloribus asperiores repellat. Vel eum iriure dolor hendrerit In Vulputate velit esse at vero OUR SOLUTION Lorem ipsum dolor sit amet Security Facilisis Management at vero et accumsan Portal (SMP) introduces a new management model for service providers that target the small-business market. SMP offers a robust, resilient architecture that supports tens Vel illum of thousands dolore eu feugiat of Safe@Office gateways. SMP has an intuitive, Web-based user Nibh euisod tincidunt laoreet In hendrerit interface, which includes a host of service-provider oriented capabilities that automate some of the time-consuming, repetitive tasks that are common in network operations center (NOC) environments. SMP includes Vel illum dolore a set eu of feugiat built-in virus and spam scanners Vel iriure that make dolor in it hendrerit possible for service providers In Vulputate to deliver et velit value-add ese at vero services to endusers with Nib euismod more revenue tincidunt laoreet potential than ever Hanc ego cum teneam sententiam, quid est cur verear, ne ad eam non possim accommodare Torquatos nostros? quos tu paulo ante cum memoriter, tum etiam erga nos amice et benivole collegisti, nec me tamen laudandis maioribus meis corrupisti nec segniorem ad respondendum reddidisti. quorum facta quem ad modum, quaeso, interpretaris? sicine eos censes aut in armatum hostem impetum fecisse aut in liberos atque in sanguinem suum tam crudelis fuisse 2003 Check Point Software Technologies Ltd. All rights reserved. Check Point, the Check Point logo, ClusterXL, ConnectControl, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FireWall-1 SmallOffice, FireWall-1 VSX, FireWall-1 XL, FloodGate-1, INSPECT, INSPECT XL, IQ Engine, Open Security Extension, OPSEC, Provider-1, SecureKnowledge, SecurePlatform, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, SmartDashboard, SmartDefense, SmartLSM, SmartMap, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartView Tracker, SVN, UAM, User-to-Address Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Net, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 SmallOffice, and VPN-1 VSX are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668 and 5,835,726 and may Security be protected Management by other U.S. Patents, Portal enables foreign patents, the delivery or pending of applications. cost-effective, comprehensive managed security services to small businesses. PN ###### Check Point Software Technologies Ltd. 1

3 SMP also offers the option to enable a Web-based selfprovisioning portal that lets managed customers directly edit some of their own settings. This further simplifies security provisioning and monitoring while increasing customer participation. ALL-IN-ONE SMP integrates a wide array of managed services into a single turnkey solution: Network and firewall management antivirus and antispam Web content filtering VPN management Firmware updates These features enable service providers to deliver costeffective, comprehensive managed security services to small businesses. SIMPLE PROVISIONING AND MAINTENANCE SMP simplifies the deployment and maintenance of Safe@Office gateways by using group-based management tools. Administrators can create a single service plan consisting of a template that defines gateway properties, an associated VPN and security policy, and additional services such as antivirus protection and content filtering. Once a service plan has been defined, the service provider can associate it with an unlimited number of Safe@Office gateways. Each gateway that is assigned a particular service plan inherits all of that plan s properties, including its VPN and security policy. When the policy needs to be updated, administrators simply update the plans via SMP s Web-based user interface and then watch as the updates are being applied automatically to the appropriate Safe@Office gateways with no further effort required by the administrators. This delivers unparalleled scalability and time-savings by eliminating the need to make repetitive policy changes to thousands of devices individually. VIRUS AND SPAM SCANNING By offering a centralized, network based antivirus and antispam solution, SMP blocks security threats before they ever reach the customer s network. The antivirus signatures are automatically updated, keeping the security up-to-date with no need for any user or network administrator intervention. SMP owners can choose between built-in virus and spam scanners and third party OPSEC CVP based scanners. WEB CONTENT FILTERING SMP supports URL based web filtering, allowing users to protect their employees and families from up to 32 categories of objectionable or malicious Web sites. ARCHITECTURE SMP s primary elements are a management server and an intuitive, Web-based user interface. SMP s Web-based user interface simplifies security management for deployments of up to tens of thousands of customers. It provides an easy way to view, edit and navigate between service plans, customers, gateways and VPN/security policies. This feature allows the small business owners to block access to objectionable sites from their entire network (using categories that cover content such as pornography and fraud sites), as well as block access to sites which they just doesn t want their employees to access during working time, such as shopping or gambling. The interface also provides a single, centralized snapshot of all rules, objects, logs, statuses and alerts for Safe@Office gateways Check Point Software Technologies Ltd.

4 INSTANT MANAGED VPN DEPLOYMENT SMP enables administrators to create VPNs in a single operation by using the Dynamic VPN (DVPN) module. Sed ut perspiciatis, unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam eaque ipsa, quae ab illo inventore veritatis dolore magnam aliquam quaerat voluptatem. ut enim ad suscipit laboriosam, nisi ut aliquid ex ea commodi Administrators consequatur? can define quis VPN autem communities vel eum iure and reprehenderit, set qui security parameters in ea voluptate for the velit entire esse, VPN quam in one nihil step. molestiae By consequatur, vel illum, qui dolorem eum fugiat, quo voluptas grouping a customer s VPN end-points in a community, a fully meshed nulla pariatur? VPN is automatically enabled among those points (establishing site-to-site tunnels between each pair of sites). New users and sites that are added to a community automatically inherit the appropriate properties and immediately establish secure IPSec sessions with the rest of the community. Additionally, the Dynamic VPN module fully supports dynamically addressed IP gateways and takes care of automatically updating all VPN end points with the most recent IP addresses of the gateways in their community. This further reduces administrators burdens. Picture Placeholder INTEGRATED LOGGING AND REPORTING SMP turns the vast amount of data collected from security devices into understandable information that can be used to demonstrate the effectiveness of security services. Hanc ego cum teneam sententiam, quid est cur verear, ne ad eam non possim accommodare Torquatos nostros? quos tu paulo ante cum memoriter, tum etiam erga nos amice et benivole collegisti, nec me tamen laudandis maioribus meis corrupisti nec segniorem ad respondendum reddidisti. quorum facta quem ad modum, quaeso, interpretaris? sicine eos censes aut in armatum hostem impetum fecisse aut in liberos atque in sanguinem suum tam crudelis fuisse, nihil ut de utilitatibus, nihil ut de commodis suis cogitarent? at id ne ferae quidem faciunt, ut ita ruant itaque turbent, ut earum motus et impetus quo pertineant non intellegamus, tu tam egregios viros censes tantas res gessisse sine causa Security reports are automatically generated and ed to customers at user-defined intervals. In addition, the security reports can be viewed directly from the security Sed management ut perspiciatis, portal. unde The omnis security iste natus reports error sit include information voluptatem about accusantium blocked doloremque attacks, detected laudantium, totam viruses, filtered rem aperiam Web sites, eaque and ipsa, more. quae ab illo inventore veritatis dolore magnam aliquam quaerat voluptatem. ut enim ad suscipit laboriosam, nisi ut aliquid ex ea commodi consequatur? quis autem vel eum iure reprehenderit, qui in ea voluptate velit esse, quam nihil molestiae consequatur, vel illum, qui dolorem eum fugiat, quo voluptas nulla pariatur? STRONG AUTHENTICATION OUT-OF-THE-BOX Service providers that want to implement strong authentication can do so by using the Internal Certificate Authority that is included with SMP s Dynamic VPN module. SMP issues X.509 digital certificates to all Safe@Office gateways that are part of a community to ensure secure site-to-site VPN communications. This feature provides industry-standard, two-factor authenti- Italic Caption here cation without the additional complexity and expense of separate public-key infrastructure (PKI) systems. At vero eos et accusamus et iusto odio dignissimos AUTOMATIC FIRMWARE UPDATES ducimus, qui blanditiis praesentium voluptatum deleniti EFFORTLESS atque corrupti, SUPPORT quos FOR dolores DYNAMICALLY et quas molestias excepturi sint, GATEWAYS obcaecati cupiditate non provident, similique Making sure At vero that eos tens et of accusamus thousands et of iusto managed odio gateways are ducimus, all enforcing qui the blanditiis highest praesentium level of security voluptatum can deleniti sunt in culpa, qui officia deserunt mollitia animi, id est dignissimos ADDRESSED be a daunting atque administrative corrupti, quos task. dolores To alleviate et quas this molestias problem, SMP turi uses sint, pull obcaecati technology cupiditate for automatic non provident, firmware similique es, tracking lis est and et monitoring expedita distinctio. them can nam become libero a concern tempore, cum excep- If customer laborum gateways et dolorum are assigned fuga. et dynamic harum IP quidem address- rerum faci- updates: sunt Gateways in culpa, automatically qui officia deserunt detect and mollitia download animi, id est since their soluta IP addresses nobis est change eligendi each optio, time cumque they connect nihil impedit, new firmware laborum whenever et dolorum it becomes fuga. et available harum quidem on the rerum facilis est server, et expedita rather distinctio. than the management nam libero tempore, server cum omnis voluptas assumenda est, omnis dolor repellen- to the Internet. quo minus id, quod maxime placeat, facere possimus, management having to soluta spend nobis time initiating est eligendi communications optio, cumque with nihil impedit, SMP alleviates this concern by fully supporting management and monitoring of dynamically address gateways. dus. temporibus autem quibusdam et aut officiis debitis each gateway quo minus individually. id, quod This maxime reduces placeat, the administrative load omnis on the voluptas management assumenda server. est, omnis dolor repellen- facere possimus, aut rerum necessitatibus saepe eveniet, ut et voluptates In addition, repudiandae SMP can act sint as et a molestiae Dynamic non Domain recusandae. Name itaque dus. temporibus autem quibusdam et aut officiis debitis The SMP administrator also has the option to override Service (DDNS) earum rerum server, hic which tenetur constantly a sapiente checks delectus, and ut aut reiciendis mapping voluptatibus of a domain maiores name alias to consequatur a gateway s aut perfer- aut rerum necessitatibus saepe eveniet, ut et voluptates the group settings and push unique firmware and settings to specific gateways. corresponding endis IP doloribus address. asperiores Each time repellat. the gateway s IP updates the repudiandae sint et molestiae non recusandae. itaque earum rerum hic tenetur a sapiente delectus, ut aut reiciendis voluptatibus maiores alias consequatur aut perfer- address changes, DDNS maps the DNS name to the new IP address. Dynamic DNS allows service providers endis doloribus asperiores repellat Check Point Software Technologies Ltd. 3

5 to appeal to a larger customer base by enabling customers to use lower cost dynamic IP connectivity. EFFICIENT ROLE-BASED ADMINISTRATION SMP provides a flexible way to distribute management responsibility among a group of security administrators, dividing that responsibility by type of service plan, customer, or specific functional tasks. All administrator activity is logged and reported on, improving security by providing information than can identify unauthorized policy changes. RESILIENT MANAGEMENT INFRASTRUCTURE Security Management Portal provides a fully redundant management infrastructure that enables round-the-clock control of customer security. Service providers may deploy more than one management server in a NOC, CENTRALIZED MANAGEMENT Firewall management Network management Real Time monitoring Automated firmware updates Dynamic DNS Role based permissions VIRTUAL PRIVATE NETWORKING VPN management Complete dynamic IP support Built in Certificate Authority (CA) CONTENT FILTERING antivirus Antispam Web filtering LOGGING & REPORTING Centralized Logging Security Reporting Automatic report mailing Customizable report templates SUBSCRIBER MANAGEMENT Built in customer database Customer ing Self provisioning portal (SPP) with full load balancing and automatic failover, enabling carrier grade service, fault tolerance and scalability. VIRTUAL PORTALS SMP allows the creation of Virtual Portals to be created, or multiple instances of SMP on the same server, each one acting as a standalone virtual SMP. For example, a service provider with multiple resellers can configure a private instance for each reseller. This allows saving on hardware, software, and ongoing maintenance, while allowing resellers to manage their own customers with minimal initial capital investment. SCALABILITY Scalable to 100,000+ devices Automated server load balancing Automated server failover Profile based management Batch updates INTEGRATION LDAP Built-in syslog server XML import / export OPERATING SYSTEMS Microsoft Windows 2000 / 2003 Server Sun Solaris 8.0 / 9.0 DIRECTORY SERVERS Microsoft Active directory Sun iplanet Directory Server MANAGED DEVICES Check Point Safe@Office Check Point VPN-1 Edge Nokia IP40 NEC SecureBlade CONTACT US For more information on SMP contact us at smp@sofaware.com Embedded 2005 Check Point Software Technologies Ltd. All rights reserved. Check Point, Check Point Express, the Check Point logo, ClusterXL, ConnectControl, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FireWall-1 VSX, FireWall-1 XL, FloodGate-1, INSPECT, INSPECT XL, IQ Engine, Open Security Extension, OPSEC, Provider-1, Safe@Office, SecureKnowledge, SecurePlatform, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, SmartDashboard, SmartDefense, SmartLSM, SmartMap, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, UAM, User-to-Address Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, and VPN-1 VSX are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668 and 5,835,726 and may be protected by other U.S. Patents, foreign patents, or pending applications. P/N Check Point Software Technologies Ltd.