SmartDefense Program Advisor Service

•
•
•
•
T:
F:
E:
W:
+44 (0) 1483-227600
+44 (0) 1483-227700
[email protected]
www.wickhill.com
Wick Hill Ltd. River Court, Albert Drive, Woking, Surrey, GU21 5RP
Data Sheet
SmartDefense
Program Advisor Service
Automated application control
YOUR CHALLENGE
Your IT security staff is dedicated to developing and deploying security
policies that increase enterprise security while maintaining overall company
productivity. However, with limited resources and time to address the newest
worms, Trojan horses, and Day Zero threats, administrators need every
advantage to effectively and rapidly respond to these emerging threats.
OUR SOLUTION
SmartDefense Program Advisor™ Service is the first endpoint security
subscription service that automates Integrity’s application control decisions,
dramatically lowering IT administrative overhead while maintaining the highest
productivity and endpoint security levels. Administrators can now leverage and
depend on Check Point’s unmatched expertise and application knowledge
base for authenticated, real-time network access decisions for more than
85,000 PC applications. IT administrators can now focus on new, unknown
applications entering the enterprise and determine their access rights.
The real-time, on-demand policy decisions provided by SmartDefense
Program Advisor Service allow “known good” applications network access
while blocking emerging Day Zero threats that are attempting to abuse the
enterprise network. SmartDefense Program Advisor can also be configured
to automatically terminate malicious software processes. SmartDefense
Program Advisor enables IT organizations to leverage Check Point best
practices to reach a new depth, breadth, and speed in application security
policy development and deployment.
PRODUCT DESCRIPTION
SmartDefense Program Advisor
Service, a new SmartDefense™
Service from Check Point, offers
administrators the ability to automate
most application policy decisions for
granting or blocking network access
to PC applications.
PRODUCT FEATURES
■
Subscription service that automates
security decisions to allow or block
application network access
■
Application security policies for
more than 85,000 PC applications
■
Centralized management through
the Integrity management console
PRODUCT BENEFITS
■
Greatly reduces administrative time,
effort, and related costs
■
Stops the newest worms and other
malware automatically
■
Decreases help-desk calls and
end user involvement in security
decisions
■
Minimizes end-user involvement
STRENGTHENING ENDPOINT AND NETWORK AVAILABILITY
SmartDefense Program Advisor provides preemptive security by automating
application control decisions strengthening endpoint and network availability.
SmartDefense Program Advisor also identifies emerging threats and automatically terminates malicious application processes preventing network
abuse. Emerging Day Zero application threats are stopped in their tracks before
further enterprise network abuse occurs. Whether endpoints are “in-network”
on the corporate LAN or “off-network” when using a third-party network,
they have access to Check Point expert application policies at the earliest
opportunity. SmartDefense Program Advisor safeguards enterprises from
major financial damage associated with endpoint or network downtime.
Check Point protects every part of your
network—perimeter, internal, Web—
to keep your information resources safe,
accessible, and easy to manage.
1
enabling administrators to auto-deploy policies that meet
corporate standards, or to rapidly review, customize,
and deploy application security policies.
INCREASING THE RETURN ON
SECURITY INVESTMENT
SmartDefense Program Advisor increases the return on
security investment by minimizing IT help desk calls and
maximizing IT productivity and enterprise security. By
eliminating the uncertainty of granting “known good” applications network access while silently blocking “known bad”
applications, end users and IT administrators alike stay
productive while maintaining real-time endpoint and network
availability. It reduces help-desk calls by minimizing the need
for end-user involvement. Also, by integrating SmartDefense
Program Advisor into the Integrity management console,
Check Point application control polices can be quickly
customized and deployed, reducing administrative overhead
and improving IT productivity and overall enterprise security.
SmartDefense Program Advisor Service configuration options
ACTIONABLE BEST PRACTICE SECURITY POLICIES
SmartDefense Program Advisor provides actionable
application control policies through the familiar Integrity
management console enabling administrators to autodeploy or rapidly review, customize, and deploy application
security policies. The application control policies have been
researched and developed by the Check Point Security Alert
Services team and cover more than 85,000 PC applications.
The Check Point security team has members located around
the globe identifying, researching, and quickly developing
application control policies for emerging applications and
threats. IT administrators can now focus on analyzing
unknown application security policies while “known good”
and “known bad” application policies are quickly and simply
deployed protecting against emerging Day Zero threats.
When a new program attempts network access, a query
is made by the Integrity client to the Integrity server asking
for the enterprise’s application control policy. If no specific
application control policy exists, the Integrity server queries
the SmartDefense Program Advisor service seeking a
decision to allow or block network access to the specific
application. Enterprises now have instant access to
Check Point’s collective application security expertise
and authenticated application knowledge base. These
best practice application security policies are provided
through the familiar Integrity management console,
No other endpoint security vendor offers a preemptive
endpoint security service like SmartDefense Program
Advisor, featuring real-time access to expert, authenticated
application security policies protecting against Day
Zero threats that evade reactive security technologies.
SmartDefense Program Advisor is the only endpoint security
service enabling out-of-the-box application control policy
deployment protecting your enterprise network investments
and maintaining employee productivity.
Full integration of SmartDefense Program Advisor Service into the
Integrity management console
©2004-2005 Check Point Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor, Application Intelligence, Check Point Express, the Check Point logo, ClusterXL, Cooperative
Enforcement, ConnectControl, Connectra, CoSa, Cooperative Security Alliance, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, IMsecure, INSPECT, INSPECT XL,
Integrity, InterSpect, IQ Engine, Open Security Extension, OPSEC, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureKnowledge, SecurePlatform,
SecuRemote, SecureServer, SecureUpdate, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, Smarter Security, SmartDashboard, SmartDefense, SmartLSM, SmartMap,
SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, TrueVector, UAM, User-to-Address
Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 VSX, Web Intelligence,
ZoneAlarm, ZoneAlarm Pro, Zone Labs, and the Zone Labs logo, are trade-marks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other
product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S.
Patent No. 5,606,668, 5,835,726 and 6,496,935 and may be protected by other U.S. Patents, foreign patents, or pending applications.
February 4, 2005 P/N: 501658
Worldwide Headquarters
2
3A Jabotinsky Street, 24th Floor
Ramat Gan 52520, Israel
Tel: 972-3-753-4555
Fax: 972-3-575-9256
Email: [email protected]
U.S. Headquarters
800 Bridge Parkway
Redwood City, CA 94065
Tel: 800-429-4391; 650-628-2000
Fax: 650-654-4233
www.checkpoint.com