Checkpoint vSEC for Microsoft Azure
Extends security to the Azure cloud infrastructure with the full range of protections of the Check Point Software Blade architecture

Check Point vSEC for Microsoft Azure extends security to the Azure cloud infrastructure with the full range of protections of the Check Point Software Blade architecture. vSEC Microsoft Azure cloud security prevents network attacks and data breaches while enabling secure connectivity to Azure public cloud environments.

Comprehensive threat prevention for your Microsoft Azure cloud

• Full protections of the Check Point Software Blade architecture
• Safeguard against data and infrastructure breaches
• Securely connect enterprise and mobile users
• Advanced protection against malware and zero-day attacks

Easily extend security to your Microsoft Azure cloud

• Available in the Azure Marketplace with hourly on-demand (PAYG) and Bring Your Own License (BYOL) options
• Rapid, one-click deployment
• Tailor security protections to your specific business needs

Unified management of public cloud and hybrid environments

• Single pane-of-glass management
• Consistent policy and threat visibility across public and private cloud infrastructures
• Simplify compliance reporting for on-premise and cloud assets

Features

Full protections with Check Point Software Blades

Check Point vSEC for Microsoft Azure provides the full protections of the Check Point Software Blade architecture.

• Firewall, IPS, Antivirus, Anti-Bot Software Blades protect services in the public cloud from unauthorized access and attacks.
• Application Control Software Blade helps prevent application layer denial of service attacks and protects your cloud services.
• IPsec VPN Software Blade allows secure communication into cloud resources.
• Mobile Access Software Blade allows mobile users to connect to the cloud using an SSL encrypted connection with two factor authentication and device pairing.
• Data Loss Prevention Software Blade protects sensitive data from theft or unintentional loss.
• SandBlast Zero-Day Protection Blades provide the most comprehensive protection against malware and zero-day attacks.

Centralized Management for cloud and on-premise infrastructure

Manage vSEC for the Azure Cloud using your existing on-premise Check Point Unified Security Management Solutions. Enforce a consistent security policy for corporate assets in both the Azure Cloud and on-premise infrastructure from a single console.

Consolidated logs and reporting for hybrid cloud environments

Get visibility and enforcement across your cloud and on-premise infrastructures using the SmartEvent Software Blade. Simplify compliance and audits with unified logs and reporting.

Supported Releases	R77.10 - R77.30
Supported Cloud Platform	Microsoft Azure
License Model	Pay As You Go (PAYG), Bring Your Own License (BYOL)

Performance

Compute Instance Type / Test Case	D2_v2 (2 virtual core)	D3_v2 (4 virtual core)	D4_v2 (8 virtual core)	D5_v2 (16 virtual core)
Firewall + IPS	500 Mbps	1.0 Gbps	1.5 Gbps	2.0 Gbps
NGFW (Firewall + IPS + Application Control)	350 Mbps	550 Mbps	850 Mbps	1.0 Gbps
NGTP (Firewall + IPS + Application Control + URL Filter + Anti-Virus + Anti-Bot)	200 Mbps	400 Mbps	650 Mbps	715 Mbps
Notes	- Performance can be limited by the network bandwidth allocated by Azure to the VM - Test environment uses Check Point real world traffic blend and vSEC for Azure Gateway R77.30

Pricing Notes:

• Pricing and product availability subject to change without notice.
• vSEC VE Gateway is licensed by the number of virtual cores (vcores) assigned to the virtual machine running it
• This license supports vSEC VE Gateways running on VMware´s ESX/ESXi/vCloud Air, Microsoft Azure/Hyper-V, Amazon´s AWS and KVM
• Check Point vSEC VE Gateway license is pool based :
  • You can add additional licenses to the pool
  • The license pool is deployed on Check Point management server and will be automatically assigned to vSEC VE gateways
• Renewal:
  • The license is composed of a perpetual software license and services renewal license
  • The renewal subscription license should match the number of cores in the perpetual license
• Software Blades :
  • Regardless of the numbers of vcores allocated, every VE Gateway provides
    – local management license for up to 2 gateways
    – 5 mobile access users
    – Customer can purchase addition software blades and deploy them on specific vSEC VE Gateways
  • For NGTX license: NGTX cloud inspection quota is 10k files/vcore/month