Check Point Endpoint Security
Strengths: Comprehensive solution
Weaknesses: Reporting and event management are separate. Costly
Verdict: If you have the Check Point infrastructure in place, this solution will slide into that framework nicely. A lot of protection at the endpoint
Check Point Endpoint Security (Total Security Edition) is a single agent for total endpoint security that combines a firewall, network access control (NAC), program control, anti-virus, anti-spyware, full disk encryption (FDE), media encryption (ME) and remote access VPN.
We installed and used the management console on our Windows 2003 server. The platform integrates with Check Point's management framework and SecurePlatform and includes support for SmartView Tracker, Eventia Reporter, Eventia Analyzer and SmartView Monitor. We did not test the additional Windows applications.
The client side came with the capability to deploy a firewall including custom policies, anti-virus and anti-spyware, ability to control program execution, VPN, some basic intrusion prevention capabilities and integrated NAC functions to allow for network quarantine in the event of a detection or policy violations.
The client side also included disk and media encryption capabilities. The encryption could be applied to removable media devices, including CD and DVD. This version supports 256-bit encryption. For mobile devices, the policies were in effect even when we detached the system. We were warned when we were out of compliance with the policy.
The management interface was easy to navigate. If you have used a Check Point management interface before, this one will be very familiar. An Active Directory scanner is included to find and pull in data. There is also an option for a webRH component that will allow for establishing a web portal for users to request self help. We did not test this function during our review.
The documentation was hard to follow and did not track well to the ISOs. We tried to download PDF manuals from the website but several of them came with errors. Support is good but does come at a fee through various offering and service levels.
If you are a Check Point shop, this solution will integrate well and the learning curve will be small. Reporting and event management are also available as Windows applications. The solution with all the options can be costly, but it delivers a comprehensive set of controls at the endpoint.