To help you combat these types of threats (and more) and enable you to employ a more comprehensive perimeter defense, Check Point introduced its Application Intelligence (AI) technology a few versions ago. Since then, Check Point has split this advancement into two distinct technologies. The first is SmartDefense. This offering the original product, which was all inclusive concentrates on several layers of the OSI model. Although the concept is to protect and ensure data (and application) confidentiality, availability, and integrity, some of these attacks reside outside of the applications layer. The second offering is Web Intelligence, which focuses on protecting Web servers and Web-based applications. Both Web Intelligence and SmartDefense operate with the knowledge of known attacks, and also possess the capability to recognize potential risk even if it does not fit an established attack profile.

The following sections examine why these two technologies are pertinent to securing your network. Further discussion reveals the classes or protections for each of these technologies. In addition, these sections cover the options that SmartDefense and Web Intelligence offer. We also walk through examples of how to block peer-to-peer communications and how to prevent SQL Injection attacks.

The remainder of this chapter stands to dispense specific details about how you can utilize your NGX gateway to protect your network, standard applications (FTP, SMTP, etc.), and Web-based applications. As you have learned throughout the course of this text, Check Point demonstrates a keen understanding of ease-of-use by designing simple, logical GUIs. You will again...