Speaking of security products of checkpoint software technologies (hereinafter checkpoints), it has a strong image that it is difficult for enterprise.However, "CHECKPOINT 600/1100 APPLIANCE" for small businesses has an easy -to -understand Japanese GUI and can be easily handled by those who have never handled the company.
Enterprise functions in small business!
A security gateway with many achievements in enterprise and telecommunications carriers.It adopts "Software Blade architecture", which provides security, networks, and management functions such as firewalls, anti -viruses, IPS, and web filtering as a module, and has the feature that it can be customized flexibly according to the policy of each company.Each blade is implemented on a 64 -bit secure OS called "CHECK POINT GAIA", so you can rest assured in terms of performance and reliability.
This is the "CHECKPOINT 600/1100 APPLIANCE" introduced by a security gateway that inherits such enterprise -level functions, performance and reliability.CHECKPOINT 600/1100 APPLIANCE for small business has condensed checkpoint technologies on a small housing like a broadband router.In addition, by installing a Japanese -speaking GUI that can set all functions not found in the upper model, it is finished in an easy -to -use appliance.Let's take a look.
"CHECKPOINT 600/1100 APPLIANCE" (600 on the top, 1100 on the bottom) using a small desktop type small housing
600 for intensive management and 1100 for bases
CHECKPOINT 600/1100 Appliance uses a common hardware, orange is checkpoint 600 and white and blue are checkpoint 1100.The 600 AppPliance is premised on centralized management using the "Check Point Cloud-Managed Security Services" provided by check points, but 1100 Applianace assumes the use on the base.Of course, you can also select conventional local security management for both 600/1100 Appiance.
Both have LEDs and USB ports to know the link status, and on the back, eight LAN ports and USB ports are installed in addition to WAN/DMZ ports.The USB port is used to save logs and configuration files.While adopting a compact housing, 1.It is an authentic school with a 5Gbps high firewall -slopes and 220Mbps VPN throughput.
All Ethernet interfaces on the back are gigabit.Equipped with an SD/USB port that stores logs and configuration files
ソフトウェアとしては、CheckPoint GAiAのエンベデッド版を採用し、上位と同じSoftware Bladeをほとんどそのまま利用できる。具体的には、Firewall、VPN、Advanced Networking & Clustering、User Awarenessを標準搭載し、最新の脅威に対応するIPS、Application Control、URL Filtering、Antivirus、Anti-Spam & Email SecurityなどのSoftware Bladeなども利用可能。標的型攻撃などに有効な出口対策を実現するAntiBotも近々対応する予定となっている。
GUI that can be easily set in Japanese
Setup can also be performed from the wizard.When a PC is connected to the LAN port, an IP address is automatically assigned.Open the management tool from a web browser and the wizard starts.Administrator's ID / password, time, appliance name, Wan settings, LAN side settings, administrator access settings, license activates, and software blade on / off.Can be done.Because it supports Japanese as an OS, you can select English and Japanese on the login screen.
Initial setting wizard starts
Software Blade is also set on / off
The use of Software Blade can be turned on / off in the "Security Dashboard" menu.The control of each blade is also very simple because the check box is turned on / off.VPN can also be used if you set the shared key with on / off.Nevertheless, the default recommendation settings are prepared, so if you connect it, the standard level security will be secured properly.
Security dashboard that controls each setting and status of Software Blade
Firewall policy settings are also on and off the check box only
Various remote access settings can be done uniformly
In the case of NGFW, it is important to identify and visualize users, computers, and applications.In that regard, the user management of the CHECKPOINT 600/1100 Appliance is not only an Active Directory but also a web browser authentication.In other words, you can authenticate when using the Internet or VPN, and track your application and browsing websites based on your ID.Of course, you can use the "3D Security Report", which is characteristic of the Software Blade architecture of checkpoints, allows you to grasp dangerous communications and user usage trends at a glance.It is very attractive that these features that only have expensive applians in a long time ago can be used with low -cost appliors.
You can refer to various logs and reports on the "Log & Monitoring" tab
You can easily create 3D Security Report unique to Software Blade
In the latest version, in addition to Japanese support, it also supports the requirements unique to Japan.For example, it supports PPPoE, which is essential for broadband connection, and multi -sessions and multi -WAN are now possible (UNNUMBERED will also support).It also supports email checks via POP, which is still often used in Japan, and fits the needs of SMEs.
The person in charge has also tried "Safe@Office 1000N", a conventional model.For small business, Safe@Office is also considering the ease of setting, and the service is turned on / off with a pinch, and settings using a wizard can be said to be safe@Office.CHECKPOINT 600/1100 Appliance is even more friendly because the menu structure has been simplified and Japanese.Compared to domestic routers and other small business UTMs, they are not inferior in terms of use.I have the impression that professional models have emphasized ease of use and have come down to small businesses.
An NGFW for small businesses with both enterprise level security and small business and easy -to -use usability.If you are seriously confronted against the worse attacks, the combination of managed services and NGFW is the best option.