Check Point Antivirus Software Blade
Provides optimized web security

Benefits:

Real-time security intelligence delivered from ThreatCloud

• Leverage the industry's first collaborative network to fight cybercrime
• Identify over 4.5 Million malware signatures and 300,000 malicious websites
• Dynamically update attack information from worldwide network of sensors and industry’s best malware feeds

Prevent damage from malware attacks by stopping them at the gateway

• Stop incoming malicious files with 300x more signatures than previous versions
• Prevent access to malware infested websites
• Receive up-to-the-minute malware intelligence from the ThreatCloud knowledgebase

Integrated into Check Point Software Blade Architecture

• Activate Antivirus Software Blade on any Check Point security gateway
• Saves time and reduces costs by leveraging existing security infrastructure
• View and manage the "big malware picture" with integrated threat reports and dashboards with Anti-Bot Software Blade

Features:

ThreatCloud™ Real-time Security Intelligence Feeds

ThreatCloud is a collaborative network and cloud-driven knowledge base that delivers real-time dynamic security intelligence to security gateways.  That intelligence is used to identify emerging outbreaks and threat trends. ThreatCloud powers the Antivirus Software Blade allowing gateways to investigate always-changing malware signatures.  Since processing is done in the cloud, millions of signatures and malware protection can be scanned in real time.

ThreatCloud’s knowledgebase is dynamically updated using attack information from worldwide gateways, feeds from a network of global threat sensors, Check Point research labs and the industry’s best malware feeds.   Correlated security threat information is then shared among all gateways collectively.

Prevent Access to Malicious Websites

Antivirus scans outbound URL requests and ensures users do not visit websites known to distribute malware.  The constantly updated knowledgebase offers over 300,000 sites from ThreatCloud.

Antivirus offers extensive forensics

Forensics provides administrators and security teams with vital information needed to analyze security events, investigate infections, and assess damages. Antivirus includes:

• Detailed infection information per malware type and/or infected users and machines
• Identified malware names and infection severity
• ThreatWiki – extensive infection information (malware type, description and any available details such as executables run, used protocols etc.)
• Packet capture – view data sent using complete per-session packet capture with SSL/TLS inspection

Stop incoming malware attacks

Antivirus stops incoming malware attacks with 300x more signatures than previous versions. Multiple malware detection engines focused on signature, behavioral, and reputation offer full protection. Check Point security intelligence feeds its ThreatCloud database with real-time data, identifying outbound connections to resources known to contain malicious content.

Integrated malware reports and dashboards

Malware reports and dashboards are integrated in SmartEvent with infection summaries and trends to provide better visibility to organizational malware threats and risks. This allows you to view infected hosts statistics, malware types and activities, trends/changes vs. previous week/month, amount of data sent or received, and more.

Inspect SSL/TLS encrypted traffic

Scan and secure SSL/TLS encrypted traffic passing through the gateway.  When traffic is passed through, the gateway decrypts the traffic with the sender’s public key, inspects, and protects, then re-encrypts, sending the newly encrypted content to the receiver.

To protect user privacy and comply with corporate policies, Antivirus offers granularly define exceptions for SSL/TLS inspection. As some encrypted content passing through the gateway does not need to be inspected, it can be bypassed with a simple administrator policy definition.

Specifications:

Supported Appliance Families
Check Point 2200, 4000, 12000, 21400 and 61000* Appliances Check Point Power-1 Check Point IP Appliances Check Point UTM-1 Check Point IAS
Supported Operating Systems
GAiA SecurePlatform IPSO 6.2 Disk-based* Windows**
Antivirus Protection Protocols
HTTP HTTPS FTP POP3 SMTP

*Supported on R75.40 and above
**2H/2012