Check Point SandBlast Mobile
Protect Corporate Data on Mobile Devices

Overview:

The world has gone mobile. And so have hackers. Mobile attacks more than doubled in 2019, according to Gartner. Only SandBlast Mobile, the market-leading mobile threat defense solution, will keep your organization and your sensitive data safe.

Smartphones and tablets give us unprecedented access to the critical business information we need to work faster and more accurately. Providing employees with access to that information on mobile devices has many benefits, but it also puts businesses at risk, and exposes them to loss of sensitive information.

Check Point SandBlast Mobile prevents mobile threats before they start. Whether data is at-rest on a device or in-motion, SandBlast Mobile protects against vulnerabilities and attacks that put data at risk.

A new paradigm for preventing mobile threats

SandBlast Mobile offers enterprise mobile security that protects against threats to the OS, apps and network. Leveraging Check Point’s best-of-breed threat prevention technology, SandBlast Mobile offers the highest threat catch rate in the industry without impacting device performance or user experience.

Advanced Mobile Threat Prevention

• App Analysis
  Known and unknown malicious apps are detected using threat emulation, advanced static code analysis, app reputation, and machine learning, to prevent malware from infiltrating employees’ devices.
• Device Assessments
  Real-time risk assessments are used to detect attacks, vulnerabilities, configuration changes, and advanced rooting and jailbreaking, to ensure devices are not exposed to compromise.
• Network-based Attack Prevention
  Network protections prevent phishing attacks, credential theft, Man-in-the-Middle attacks, communications with command-and-control servers, and malicious URLs and websites.
• Dynamically Remediate Threats
  When SandBlast Mobile detects an attack it blocks the device from accessing corporate applications and data, and immediately remediates the threat. Threats are eliminated on the device without any user action, or reliance on mobile management platforms.
• Market-leading Threat Intelligence
  Powering SandBlast Mobile is Check Point ThreatCloud, the world’s largest threat database. ThreatCloud is dynamically updated daily in real time with intelligence contributed by a network of more than 100,000 security gateways, 100 million endpoints, Check Point Research labs, and threat feeds from dozens of sources. ThreatCloud identifies both known and unknown threats and powers and helps block phishing attacks, malware and malicious Wi-Fi networks.

Full Visibility into Mobile Risks

SandBlast Mobile provides real-time threat intelligence and visibility into the mobile threats that could impact your business. With the cloud-based management console you’ll be able to:

• Configure security policies in granular detail
• Deploy easily and integrate with SIEM and UEM solutions
• Get detailed reports of incoming threats

Features:

Enterprise-Grade Mobile Security

Protection from Malicious Apps
Check Point’s unique Behavioral Risk Engine (BRE) runs applications in a cloudbased environment to scan for threats. The BRE uses machine learning and AI, sandboxing, advanced static code flow analysis, anomaly detection, and app reputation among other techniques to determine if an app is malicious. Additionally, in case the device is offline, there are on-device mechanisms to provide the same protections. Every time a user downloads an app, they will see a detailed analysis of the app and its access privileges. SandBlast Mobile also blocks downloading apps from unknown sources or third-party app stores, relieving the dangers associated with sideloading apps.

Protection from OS and Device-based Risks
SandBlast Mobile uses real-time risk assessments of the device to reduce the attack surface by detecting attacks, vulnerabilities, changes in configurations, as well as advanced rooting and jailbreaking. With better visibility into these threats, administrators can granularly configure security and compliance policies for devices at risk.

Protection from Network-Based Attacks
SandBlast Mobile’s unique network security infrastructure – On-device Network Protection (ONP) – allows businesses to stay ahead of emerging threats by extending Check Point’s industry-leading network security technologies to mobile devices. The SandBlast Mobile app continually validates traffic on the device without routing data through a cloud or on-premise gateway. This ensures user and data privacy is protected, while allowing for a seamless browsing experience.

SandBlast Mobile offers a broad range of network security capabilities, which include:

• Anti-Phishing with Zero-Phishing: Blocks phishing attacks across all apps, both from known and unknown zero-day phishing sites, and sites that use SSL
• Safe Browsing: Blocks access to malicious sites from any web browser, leveraging the dynamic security intelligence provided by Check Point ThreatCloud™
• Conditional Access: Blocks infected devices from accessing corporate applications and data, independent of UEM solutions
• Anti-Bot: Detects bot-infected devices and automatically blocks communication to command and control servers
• URL Filtering: Allows websites to be blacklisted and whitelisted, preventing access on any browser to websites deemed inappropriate by an organization’s corporate policies
• Wi-Fi Network Security: Detects malicious network behavior and Man-in-the-Middle attacks, and automatically disables connections to malicious networks

Market-Leading Threat Intelligence and Full Mobile Risk Visibility

SandBlast Mobile’s cloud-based dashboard makes managing supported devices and controlling mobile threats fast and easy. It provides real-time threat intelligence and visibility into the mobile threats that could affect your business or users.

Powering the solution is Check Point ThreatCloud, the world’s largest cyber intelligence network. ThreatCloud is dynamically updated daily with intelligence contributed by a network of more than 100,000 security gateways, 100 million endpoints, Check Point Research labs, and threat feeds from dozens of industry sources. ThreatCloud identifies both known and unknown threats and helps block phishing attacks, malware, and malicious Wi-Fi networks.

Privacy by Design and Best User Experience

SandBlast Mobile never analyzes files, browser histories, or application data. The solution uses state and context metadata from operating systems, apps, and networks to determine if a device is compromised. It anonymizes the data it uses for analysis in order to keep it protected. The analysis is performed in the cloud to avoid impacting device performance, and since protection runs in the background, users are protected without having to learn anything new.

SandBlast Mobile Fits in Your Current Environment

SandBlast Mobile supports any device-ownership program (BYOD, COPE), and integrates with any mobile management solution (UEM, EMM, MDM). This makes the solution highly scalable, and delivers operational and deployment efficiencies for managing mobile security within a broader security infrastructure. The integration with mobile or endpoint management solutions allows the solution to restrict secure container access, or make real-time, risk-based policy adjustments on compromised devices that UEMs can’t deliver. SandBlast Mobile also integrates with SIEM solutions such as ArcSight and Splunk, and fully supports Android Enterprise deployments.

Video:

Secure your Mobile Phone Now | Introducing Check Point SandBlast Mobile

Protecting your enterprise from mobile threats and cyber attacks.

Documentation:

Download the Check Point SandBlast Mobile Datasheet (PDF).