Endpoint Policy Management
Software Blade

Overview

Enterprises have typically deployed some standalone point solutions for endpoint security such as a personal firewall or antivirus software. This approach quickly becomes a management nightmare in organizations with hundreds or thousands of PCs. For example, each time a software update is available for individual endpoint agents, IT must execute a rigorous engineering test cycle to qualify the release for performance and compatibility before pushing the update out to endpoints. Because it is not uncommon for enterprises to have three or more endpoint security agents on each device, implementation can become very time consuming and costly.

A new strategy is to unify endpoint security with functionality on each PC that is centrally deployed and managed by IT security specialists on a single console. Unification of security functionality allows for simplified deployment and management, which lowers the overall cost of operations. With a unified agent approach, IT will only have to run test cycles for one agent and will have the assurance that each function within that agent is compatible. However, to achieve strong endpoint security, an enterprise should carefully consider functions in a particular unified endpoint solution. Only a comprehensive set of security controls can provide an enterprise with complete endpoint security.

The Endpoint Policy Management Software Blade enables you to centrally manage the security products you use on your organization's end-user devices. This means that you can take and keep control of computing devices and the sensitive information they contain.

Key Benefits

• Centralized and delegated management options
• Central monitoring and reporting on every endpoint security control
• Faster security incident discovery, monitoring, and forensics
• Comprehensive reporting and support for audits and compliance
• Easier, faster deployment of software using single agent without requiring on-site manual intervention of IT or end users resulting in lower TCO
• Unification of endpoint security with network security event management

Features

• Firewall Rules
• Access Zones and Zone Rules
• Program Control Policies
• Program Advisor Service Policies
• Program Enforcement Policies
• Cooperative Enforcement® Policies
• Check Point Antispyware Policies
• Check Point Antivirus Policies

Firewall Rules
Provides same the level of security as standard perimeter firewalls by restricting or allowing network activity based on connection information

Access Zones and Zone Rules
Provides network security through creating groups of locations to which you assign network permissions

Program Control Policies
Restricts network access on a per-application basis

Program Advisor Service Policies
Automates application control management

Program Enforcement Policies
Ensures that every Endpoint computer meets application and version requirements before it connects to the network. For example, using Program Enforcement, you can require that Endpoint computers have a certain version of Antivirus protection

Cooperative Enforcement® Policies
Restricts or disconnects noncompliant users at the network access/authorization level

Check Point Antispyware Policies
Protects your company’s data by detecting and removing spyware

Check Point Antivirus Policies
Provides centrally-managed antivirus protection to your Endpoint users

Specifications

Support

Threats to the network are constantly evolving and becoming more sophisticated. To maintain continuity and productivity, defenses must advance as quickly to deliver the technology and features that protect the business. Check Point Update service protects against emerging threats with critical hot software fixes, service packs, and major software upgrades.

Benefits

• Ensures continuous security with access to critical hot fixes and service packs
• Maximizes ROI and investment with access to major upgrades and enhancements
• Increases security with the latest applications, features, and technologies