Check Point NGX Platform

Top 10 reasons to upgrade

to Check Point’s NGX platform
The Check Point NGX platform delivers new features and extended functionality to more than 20
Check Point products, providing stronger protection and smarter management than ever before to
address the most challenging security problems. Critical new security features offer deeper security,
protecting more network and application types from more threats than any other solution. Simplified
and powerful management features allow enterprises to manage even the most sophisticated
networks more efficiently, with fewer resources, and lower total cost of ownership (TCO).

While there are many reasons to upgrade your Check Point products to NGX versions, we’ve
compiled the top 10 reasons how customers like you are taking advantage of the NGX platform.

1 Reduce the cost and complexity of security management

SmartCenter™ NGX reduces the burden and costs of typical security administration with unified management of all
®
Check Point gateways from a single console. Administrators can now centrally manage VPN-1 Pro™, VPN-1 Edge™,
Check Point Express™, VSX™, InterSpect™, and Connectra™[DH1], including simplified management of VPN-1 Edge
appliances with centralized configuration and topology creation.

2 Ensure confidentiality and availability of VoIP communications

The NGX platform enables VPN-1 Pro and Check Point Express gateways with advanced security features to protect
voice over Internet Protocol (VoIP) networks from threats such as call hijacking, call theft, network hacking, Denial of
Service (DoS), and more to ensure confidentiality and availability of voice communications.

Check Point’s NGX platform also includes support for the most popular VoIP protocols and multiple networking
configurations with application layer filtering of SIP, H.323 v3 and v4, MGCP, and SCCP packets, offering flexible VoIP
networking configurations and solutions.
 Top 10 reasons to upgrade
to Check Point’s NGX platform

3 Gain better insight into your network and security operations

SmartView Monitor™ integrates multiple monitoring functions into a single application, providing a better view for
administrators to understand the status of their networks and their security in order to maximize network performance
and manage costs. SmartView Monitor reports on the:

• Status of VPN-1, InterSpect, and Connectra gateways

• State of VPN tunnels between gateways
• Currently connected remote access users
• Type and distribution of traffic

Permanent tunnels can be established and monitored in real time via SmartView Monitor, ensuring that VPN tunnels
are always active.

4 Simplify VPN deployment in dynamic environments

VPN-1 Pro NGX enables organizations to quickly establish VPNs between sites with rapidly changing infrastructures
with route-based VPNs. Combined with support for dynamic routing protocols like OSPF, VPN-1 Pro NGX makes it
simple to provision stable and reliable service across a distributed environment.

5 Quickly and easily extend remote access for employees

SSL Network Extender™ now enables administrators to quickly and easily provide remote access without installing
remote-access clients on end-user machines. This browser-based solution can be centrally managed from within
SmartCenter NGX and is integrated with Check Point Integrity™ Clientless Security to ensure that only safe PCs are
allowed access to the network, protecting them and your critical network resources from remote threats.

6 Increase security against new, evolving attacks

SmartDefense™ now provides better protections for an increased number of protocols, including DNS, unicast and
multicast routing, mail, peer-to-peer, and DCE-RPC. For example, administrators now have more granular control
over MSN Messenger functions such as file transfers, application sharing, and whiteboarding. As new defenses
become available from SmartDefense Services, NGX enables dynamic and real-time updates with increasingly
sophisticated protections for your network.
 Top 10 reasons to upgrade
to Check Point’s NGX platform

7 Protect Web applications against advanced hacking techniques

Web Intelligence™ is tightly integrated with VPN-1 Pro NGX and Connectra gateways to better protect Web servers
against increasingly complex and aggressive attacks, including buffer overflows, SQL injections, cross-site scripting
attacks, and more. Web Intelligence has also been expanded to protect against new attacks such as LDAP injections
and to conceal Web server error messages from users, which thwarts reconnaissance efforts by hackers and ensures
the confidentiality and integrity of business data.

8 Support multicast applications across a distributed environment

Organizations can now encrypt multicast applications such as video and audio conferencing through VPN-1, enabling
the secure distribution of content to all locations. Administrators can also control access of multicast traffic to specific
groups, ensuring that multicast applications are not inadvertently broadcast to outside groups.

9 Extend visibility of security administration to technical support staff or

auditors
SmartPortal™ is a Web-based GUI for SmartCenter NGX that provides a read-only view of the organization’s security
policy, enabling nonadministrative users to troubleshoot security issues without the danger of changing policies or
security rules. Internal teams can now work together seamlessly in mitigating attacks and troubleshooting network
and security issues—without compromising security policy.

10 Deploy security on a reliable, manageable platform

The SecurePlatform™ operating system has been extended to support the most demanding environments with
increased support for diverse hardware and up to 64GB memory on management servers. Administrators now have
the power to upgrade security applications through a newly designed Web interface, making large upgrades simpler,
quicker, and easier. SecurePlatform now also includes the ability to revert to previous versions if an upgrade fails,
giving administrators peace of mind and options to reduce potential downtime.

Learn more about the Check Point NGX platform

Find out how you can take advantage of these top 10 reasons and many more by visiting the
NGX Upgrade Center at http://www.checkpoint.com/ngx/upgrade/, where you’ll find important
information, tools, and resources to make upgrading your Check Point products to the NGX
version simple and easy.

©2003-2005 Check Point Software Technologies Ltd. All rights reserved. Check Point, Application Intelligence, Check Point Express, the Check Point logo, AlertAdvisor, ClusterXL, Cooperative Enforcement,
ConnectControl, Connectra, CoSa, Cooperative Security Alliance, Eventia, Eventia Analyzer, Eventia Reporter, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, IMsecure, INSPECT,
INSPECT XL, Integrity, InterSpect, IQ Engine, Open Security Extension, OPSEC, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureKnowledge, SecurePlatform,
SecuRemote, SecureXL Turbocard, SecureServer, SecureUpdate, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, Smarter Security, SmartDashboard, SmartDefense, SmartLSM, SmartMap,
SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, Stateful Clustering, TrueVector, Turbocard, UAM, User-to-Address
Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 VSX, VPN-1 XL, Web Intelligence, ZoneAlarm,
ZoneAlarm Pro, Zone Labs, and the Zone Labs logo, are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks
or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726, 6,496,935 and 6,850,943 and may be protected by other U.S.
Patents, foreign patents, or pending applications.