Network Security and Malware Protection

• Overview of Firewall and VPN Consulting Services
• Cisco Firepower, ASA and PIX Firewall Consulting
• Palo Alto Networks PA-Series Firewalls Consulting
• Check Point Software Consulting
• WatchGuard Consulting
• Juniper Networks NetScreen Consulting
• SonicWall Consulting
• Fortinet FortiGate Firewall Consulting
• Symantec Raptor and VelociRaptor Consulting
  
  

Check Point Firewalls and Services Supported by Progent
Check Point's next-generation firewalls are available at prices and scale suitable for any deployment scenario including your data center, enterprise, small business, branch, or home office. Check Point firewalls integrate natively with Check Point's portfolio of subscription-based cloud services including Next Generation Threat Prevention (NGTP) and SandBlast. NGTP includes multi-layered protection from known signature-based threats including Antivirus, Anti-Bot, IPS, App Control, URL Filtering, and Identity Awareness. SandBlast Threat Emulation combines deep malware inspection at the CPU level with OS-level emulation of a broad range of file types to block the most dangerous zero-day attacks including ransomware and spyware. SandBlast Threat Extraction uses AI and behavioral based machine learning algorithms to detect and remove exploitable content from web downloads and email attachments in real time, including active content and embedded objects. SandBlast Threat Extraction can then quickly deliver safe reconstructed files without disrupting business workflow.

Small Business and Branch Office Firewalls from Check Point
Check Point's NGFW security gateways for small offices are compact, fanless desktop/wall-mount firewall appliances with multiple LAN switch ports. The devices offer firewall, VPN, antivirus, application visibility and control, URL filtering, and email security. All versions support Check Point's subscription-based SandBlast Threat Emulation and Extraction (sandboxing) and NGTP services. The Check Point 910 Security Gateway includes 16 10/100/1000Base-T RJ45 LAN switch ports, one RJ45/micro USB console port, one GbE WAN port, one GbE copper/fiber DMZ port, and two USB 3.0 ports. The firewall also supports a 4G/LTE modem. The 910 model delivers 2 Gbps firewall throughput, 800 Mbps Intrusion Prevention System (IPS) throughput, and 800 Mbps NGFW throughput (includes firewall, application control, and IPS).

The Check Point 1550 Security Gateway features five 10/100/1000Base-T RJ45 LAN ports, one 10/100/1000Base-T RJ45 WAN port, a USB console port and an additional USB port. A Wi-Fi 802.11 b/g/n/ac MIMO 3x3 interface is optional. The 1550 firewall delivers 1 Gbps firewall throughput, 900 Mbps IPS throughput, and 800 Mbps NGFW throughput. The Check Point 1590 Security Gateway features eight 10/100/1000Base-T RJ45 LAN ports, one 10/100/1000Base-T RJ45 WAN port, one 10/100/1000Base-T RJ45/1000BaseF SFP DMZ port, a USB console port, an additional USB port, and an SD card slot for added log storage. Wi-Fi 802.11 b/g/n/ac MIMO 3x3 is optional. The 1550 firewall delivers 1 Gbps firewall throughput, 900 Mbps IPS throughput, and 800 Mbps NGFW throughput (includes firewall, application control, and IPS). An 802.11 n/ac wave II MIMO 4x4 Wi-Fi interface is optional.

The Check Point 3100 Security Gateway features five 10/100/1000Base-T RJ45 LAN ports, one 10/100/1000Base-T RJ45 management port, two USB ISO installation ports, and an RJ45/micro USB console port. The 3100 firewall delivers 3.15 Gbps firewall throughput, 1.1 Gbps IPS throughput, and 850 Mbps NGFW throughput. Check Point's 3200 Security Gateway features the same interface configuration as the 3100 model and delivers 4 Gbps firewall throughput, 1.44 Gbps IPS throughput, and 1.15 Gbps NGFW throughput. Both the 3100 and 3200 security gateways include 240GB of SSD storage.

Check Point Firewalls for Small to Midsize Enterprises
Check Point's NGFW security gateways for small to midsize enterprises are compact 1RU rack-mount firewall appliances with multiple LAN switch ports. The devices offer the full range of NGFW security features, deliver excellent throughput, work with all Check Point subscription-based services, support Lights Out Management (LOM) cards, and include SSD memory. The Check Point 5100 Security Gateway includes five 10/100/1000Base-T RJ45 LAN switch ports and a network expansion slot that accepts a card with eight 10/100/1000Base-T RJ45 port or one with four 1000Base-F SFP ports. The 5100 firewall also has one RJ45/micro USB console port, two USB ports for ISO installation, a Lights-Out Management port, and a 1TB hard disk or 240GB of SSD storage. The 5100 model delivers 6.45 Gbps firewall throughput, 2.45 Gbps IPS throughput, and 2.1 Gbps NGFW throughput. Check Point's 5200 Security Gateway has the same interface configuration as the 5100 firewall and delivers 7.8 Gbps firewall throughput, 3 Gbps IPS throughput, and 2.52 Gbps NGFW throughput.

The Check Point 5400 Security Gateway includes eight 10/100/1000Base-T RJ45 LAN switch ports and a network card expansion slot. The 5200 firewall also has one RJ45/micro USB console port, two USB ports for ISO installation, a Lights-Out Management port, a sync 10/100/1000Base-T RJ45 port, and a 1TB hard disk or 240GB of SSD storage. The 5400 security gateway delivers 11.4 Gbps firewall throughput, 3.9 Gbps IPS throughput, and 3.4 Gbps NGFW throughput. The Check Point 5600 Security Gateway has the same interface configuration and storage options as the 5400 firewall but its network card expansion slot also accepts a card with four 10GBase-F SFP+ ports. The 5600 model delivers 20.4 Gbps firewall throughput, 5.5 Gbps IPS throughput, and 5.1 Gbps NGFW throughput.

The Check Point 5800 Security Gateway includes eight 10/100/1000Base-T RJ45 LAN switch ports and two network card expansion slots. The 5800 firewall also has one RJ45/micro USB console port, two USB ports for ISO installation, a Lights-Out Management port, a sync 10/100/1000Base-T RJ45 port, and a 1TB hard disk or 240GB of SSD storage. Among the network expansion options accepted by the 5800 firewall is a 40G QSFP+ card with four ports. The 5800 security gateway delivers 25 Gbps firewall throughput, 6.5 Gbps IPS throughput, and 6 Gbps NGFW throughput. The Check Point 5900 Security Gateway has the same interface configuration, expansion, and storage options as the 5800 firewall and delivers 29.4 Gbps firewall throughput, 7.6 Gbps IPS throughput, and 6.1 Gbps NGFW throughput.

The Check Point 6500 Security Gateway includes eight 10/100/1000Base-T RJ45 LAN switch ports, one network card expansion slot, one RJ45/micro USB console port, two USB ports for ISO installation, a 10/100/1000Base-T RJ45 Management port, a Lights-Out Management port, a sync 10/100/1000Base-T RJ45 port, and 240 GB of SSD storage. Among the network expansion options accepted by the 6500 firewall is a 1000Base-F SFP card with four ports. The 6500 security gateway delivers 20.6 Gbps firewall throughput, 7.8 Gbps IPS throughput, and 6.8 Gbps NGFW throughput. The Check Point 6800 Security Gateway has the same interface configuration as the 6500 firewall but has two network card expansion slots and 480 GB of SSD storage. The 6800 model delivers 42 Gbps firewall throughput, 20 Gbps IPS throughput, and 15 Gbps NGFW throughput.

Check Point Firewalls for Large Enterprises
Check Point's NGFW security gateways for large enterprises are 2RU and 3RU appliances offering high performance, scalability, port capacity, and availability. Modular I/O expansion allows you to select the port density and connectivity appropriate for your IT environment. These devices include graphic LCD displays, purpose-built processors for fast inspection of SSL traffic, and Lights-Out-Management support. All these high-performance firewalls work with Check Point's NGTP and SandBlast NGTX subscription security services.

The Check Point 15400 Security Gateway includes three network expansion slots that allow you to add up to 24 10/100/1000Base-T RJ45 ports, 12 1000Base-F SFP or 10GBase-F SFP+ ports, six 40G QSFP+ or 100/25G QSFP28 ports, or a mix of LAN connectivity ports. The 15400 also has two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. For storage, the 15400 model comes with the choice of two 1 TB HDDs or two 480GB SSD RAID1 units. The 15400 model delivers 33.5 Gbps firewall throughput, 8 Gbps IPS throughput, and 7.6 Gbps NGFW throughput. Check Point's 15600 Security Gateway has the same LAN interface and storage options as the 15400 firewall and delivers 41.2 Gbps firewall throughput, 13.5 Gbps IPS throughput, and 12.6 Gbps NGFW throughput.

The Check Point 16000 Security Gateway has four network expansion slots that allow you to add up to 34 10/100/1000Base-T RJ45 ports, 16 1000Base-F SFP or 10GBase-F SFP+ ports, eight 40G QSFP+ or 100/25G QSFP28 ports, or a mix of switch ports. The 16000 also includes two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. The 16000 firewall comes with two 480GB SSD RAID1 units for storage. The 16000 security gateway delivers 58 Gbps firewall throughput, 21 Gbps IPS throughput, and 20 Gbps NGFW throughput.

Check Point Firewalls for Data Centers and High-End Enterprises
Check Point's next generation security gateways for data centers and high-end enterprises are integrated 2RU and 3RU appliances offering the highest performance, scalability, and port capacity offered by Check Point in a non-chassis enclosure. Check Point's 23500 Security Gateway includes five network card expansion slots that let you add up to 42 10/100/1000Base-T RJ45 ports, 20 1000Base-F SFP or 10GBase-F SFP+ ports, six 40G QSFP+ or 100/25G QSFP28 ports, or a combination of switch interfaces. The 23500 also features two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. For storage, the 15400 model comes with the choice of two 1 TB HDDs or two 480GB SSD RAID1 storage. The 23500 security gateway delivers 52 Gbps firewall throughput, 14.45 Gbps IPS throughput, and 13.75 Gbps NGFW throughput. The Check Point 23800 Security Gateway includes the same interface and storage options as the 23500 firewall and delivers 65 Gbps firewall throughput, 21.5 Gbps IPS throughput, and 20.4 Gbps NGFW throughput. Check Point's 23900 Security Gateway includes the same interface and storage options and delivers 77.9 Gbps firewall throughput, 26 Gbps IPS throughput, and 24 Gbps NGFW throughput.

Check Point's 26000 Security Gateway is a 3RU rack-mount appliance featuring eight network card expansion slots that let you add up to 66 10/100/1000Base-T RJ45 ports, 32 1000Base-F SFP or 10GBase-F SFP+ ports, 16 40G QSFP+ or 100/25G QSFP28 ports, or a combination of different LAN interface ports. The 26000 also features two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. For storage, the 26000 firewall comes with the choice of two 1 TB hard disks or two 480GB SSD RAID1 storage. The 26000 security gateway delivers 106.2 Gbps firewall throughput, 43 Gbps IPS throughput, and 40.5 Gbps NGFW throughput.

Check Point Legacy Products Supported by Progent
As a pioneer in the firewall/VPN market, Check Point has built a sizable installed base of legacy single-purpose and integrated services products. Progent's security engineers have supported Check Point technology for more than two decades and can provide expert consulting, management, and troubleshooting services for older products or assistance for upgrading to newer models. Legacy Check Point products supported by Progent include:

Check Point's legacy integrated firewall/VPN security appliances include desktop and rack-mount devices that support a broad spectrum of environments ranging from remote users and branch offices to enterprise data centers. These devices are built around Check Point's Software Blade architecture, which makes it possible to add features incrementally without installing new hardware and to manage a variety of security appliances from a central software console. Check Point's legacy firewall/VPN products supported by Progent include:

Check Point UTM-1 Edge and UTM-1 Firewall/VPN Family: Check Point UTM-1 firewall/VPN appliances come in two families. The UTM-1 Edge family is packaged in a desktop form factor and is intended for remote users and small or branch offices with up to 100 users. The UTM-1 family of security appliances are packaged in desktop or rack-mountable chassis, include security acceleration and multi-site management capabilities, and can handle the firewall and remote connectivity requirements of small-to-midsize companies and branch offices. Check Point's UTM-1 Edge N-Series has embedded NGX software and features six 10/100/1000 Ethernet ports. Firewall throughput is 1 Gbps, VPN throughput is 200 Mbps, and IPS performance is 30 Mbps. The device can support 60,000 concurrent user sessions.

Check Point's UTM-1 3070 is housed in a 1U rack-mountable chassis and supports Check Point's Software Blade architecture. This high-end member of the UTM-1 family features 10 10/100/1000 Ethernet ports and offers firewall throughput of 10 Gbps, VPN throughput of 1.1 Gbps, and IPS performance of 4.4 Gbps. The UTM-1 3070 can handle 1.1 million concurrent user sessions.

Check Point Series 80 Appliance: Check Point's Series 80 Appliance is an integrated security device with a desktop form factor and designed to provide high performance and port density for remote and branch offices. In addition to offering firewall protection, the Series 80 also supports both IPsec and SSL VPN tunneling. The Series 80 supports Check Point's Software Blade architecture and features 10 10/100/1000 Ethernet ports. Firewall throughput is 1.5 Gbps, VPN throughput is 220 Mbps, and IPS performance is 720 Mbps. The Series 80 can support 150,000 concurrent user sessions.

Check Point Power-1 Family: Check Point Power-1 integrated security appliances are intended for campuses, data centers, or other environments that require high-performance routing, firewall, and IPsec VPN capability. This series of rack-mountable 2U devices can all be upgraded to universal threat management (UTM) capability, and each supports 1.2 million concurrent sessions and 1,024 VLANs. Check Point's Power-1 5075 supports up to 14 10/100/1000 Ethernet ports and two optional 10Gb ports. Firewall throughput is 9 Gbps, VPN throughput is 2.4 Gbps, and IPS performance is 7.5 Gbps. The top-of-the-line Power-1 11085 supports up to 18 10/100/1000 Ethernet ports and four optional 10Gb ports. Firewall throughput is 30 Gbps, VPN throughput is 4.5 Gbps, and IPS performance is 15 Gbps.

Check Point VPN-1 Pro VPN/Firewall: VPN-1 Pro provides intelligent and reliable security for stopping attacks while simplifying business communications across the Internet. A tightly integrated combination of Firewall, VPN and intrusion prevention, VPN-1 Pro is built on Stateful Inspection, Application Intelligence, and One-Click VPN technologies. SmartCenter, Check Point's centralized management solution, provides unified threat management.

Check Point VPN-1 Edge Firewall: The VPN-1 Edge provides secure connectivity from remote branch and partner offices to the corporate network. With VPN-1/FireWall-1 technology, multiple high-availability features, and extensive networking capabilities, VPN-1 Edge provides secure, reliable, and immediate connection to applications and other corporate resources.

Check Point NGX: The NGX platform delivers a unified security architecture for a broad range of perimeter, internal, Web, and endpoint security solutions that protect business communications and resources for corporate networks and applications, remote employees, branch offices and partner extranets.

Check Point Express NGX: Check Point Express NGX is a comprehensive VPN/security solution designed to meet the Internet security needs of mid-sized businesses with up to 500 users. Check Point Express NGX delivers the essential security elements required by a mid-sized business in a single affordable solution that includes firewall, VPN, network and application attack protection plus multi-site, centralized management.

Nokia Firewalls: Nokia's family of purpose-built, high-performance firewall/VPN appliances incorporates Check Point's VPN-1 technology to protect and extend the network perimeter for small office to carrier-class applications. Nokia's firewall/VPN appliances provide strong security by combining Check Point's software with Nokia IPSO, a hardened, security-specific operating system.

How Progent Can Help with Check Point Technology
Progent's Check Point consultants can help you select and deploy Check Point software and firewall/VPN appliances powered by Check Point technology to provide an affordable and effective security solution for your corporate network. Progent can help you integrate Check Point products and technology with security products from other vendors and provide a single source of on-going technical support, maintenance, training and consulting expertise. Progent can also help you evaluate the business case for upgrading your legacy Check Point products to newer technology, and can assist you to plan and manage a seamless migration to Check Point's latest security gateway solutions.

Progent can save you time and money by providing Check Point consulting and troubleshooting services online, eliminating travel delays and expenses and maximizing network availability. Progent has successfully delivered remote support to small businesses in every state in the United States (see Progent's customer testimonials).

Find out how to contact a Progent security consultant.