Check Point Endpoint Security
April 01, 2009
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Comprehensive solution
- Weaknesses: Reporting and event management are separate. Costly
- Verdict: If you have the Check Point infrastructure in place, this solution will slide into that framework nicely. A lot of protection at the endpoint
Check Point Endpoint Security (Total Security Edition) is a single agent for total endpoint security that combines a firewall, network access control (NAC), program control, anti-virus, anti-spyware, full disk encryption (FDE), media encryption (ME) and remote access VPN.
We installed and used the management console on our Windows 2003 server. The platform integrates with Check Point's management framework and SecurePlatform and includes support for SmartView Tracker, Eventia Reporter, Eventia Analyzer and SmartView Monitor. We did not test the additional Windows applications.
The client side came with the capability to deploy a firewall including custom policies, anti-virus and anti-spyware, ability to control program execution, VPN, some basic intrusion prevention capabilities and integrated NAC functions to allow for network quarantine in the event of a detection or policy violations.
The client side also included disk and media encryption capabilities. The encryption could be applied to removable media devices, including CD and DVD. This version supports 256-bit encryption. For mobile devices, the policies were in effect even when we detached the system. We were warned when we were out of compliance with the policy.
The management interface was easy to navigate. If you have used a Check Point management interface before, this one will be very familiar. An Active Directory scanner is included to find and pull in data. There is also an option for a webRH component that will allow for establishing a web portal for users to request self help. We did not test this function during our review.
The documentation was hard to follow and did not track well to the ISOs. We tried to download PDF manuals from the website but several of them came with errors. Support is good but does come at a fee through various offering and service levels.
If you are a Check Point shop, this solution will integrate well and the learning curve will be small. Reporting and event management are also available as Windows applications. The solution with all the options can be costly, but it delivers a comprehensive set of controls at the endpoint.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Microsoft update left Azure Linux virtual machines open to hacking
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- ICYMI: CEO Sacked; MS Zero-day; Passwords dropped; Ransomware wild, charging hack
- 9.2 million medical records for sale on darkweb
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry