
Subscribe to
Computerworld
or
Other Security Stories
May 12, 2003 (IDG News Service) -- A new generation of firewall technology from Check Point Software Technologies Ltd. will protect against attacks directed at applications in addition to safeguarding networks, the company announced today.
Check Point Next Generation with Application Intelligence adds new capabilities to Check Point's FireWall-1 product, enabling it to actively protect applications behind the firewall such as Web servers, e-mail servers and Domain Name System servers. The new application intelligence features will be available June 3 and are included with the SmartDefense product, which comes with FireWall-1.
The new features enable FireWall-1 to thwart attacks concealed in common application protocols such as HTTP, FTP and SMTP, Check Point said.
Incoming traffic can be validated for compliance to protocol standards and typical usage, and traffic can be blocked from forbidden network programs such as instant messaging or peer-to-peer file-sharing systems. In addition, the new application intelligence features can stop targeted application attacks containing malicious commands or data, such as those used by worms or in cross-site scripting attacks.
The SmartDefense user interface has been modified to include features for managing applications across a network, in addition to perimeter defenses. Application defenses can be grouped by categories such as "Web," "FTP" and "Mail." Within a category, security administrators can drill down, adding or modifying filters to weed out particular types of traffic or protections for specific servers.
The new features will put competitive pressure on other companies selling firewall products, said Mark Kraynak, a marketing manager at Check Point. He compared the addition of application intelligence features to the company's introduction of stateful inspection technology in FireWall-1 in the early 1990s. Stateful inspection technology is a firewall architecture that tracks packet contents passing through a firewall, in addition to tracking packet header information. It became standard in other firewall products.
The new version of FireWall-1 got high marks from Mike Chenetz, a network security analyst at computer consulting company Dynamic Strategies Inc. in Cranberry, N.J.
Chenetz is evaluating the product for one of his firm's clients. He used the new FireWall-1 for about two months in a test environment made up of a number of PCs connected to a router.
|
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
|
|
|
All Zones Application Performance Zone Business Continuity Zone Data Center Management Zone Enterprise-Class Security Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone Business Intelligence and Analytics Zone |
|
|
| ||||||||
| ||||||||
| ||||||||
|


Security Management ZoneSecurity management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Visit the CDW Security Management Zone now See All Zones
|
Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.New baits |

"Security Directions" virtual trade show2008's Code-Red Security Issues for Protecting the EnterpriseWebcasts, white papers, demos, and more. Presented in a unique 3-d environment. Enter our show right now! Click here to enter
|

In SecuritySecurity's important, and risk must be addressed, right? Sure, but watch for four signs your policies go a bit overboard. Click here to read the latest column by Jon Espenschied |
| About Us Advertise Contacts Editorial Calendar Help Desk Jobs at IDG Privacy Policy Reprints Site Map |
|
CIO The Industry Standard |