In this section, we will discuss the best-practice network security provisions of SmartDefense. The Network Security and Application Intelligence technologies are free with SmartDefense. Updates are issued by paid subscription. Check Point clients may gain a benefit from the SmartDefense service, as it provides real-time updates and advisories with additional protection against new and rising threats.

SmartDefense is a management component of Check Point FW-1 and VPN-1 that is designed to allow administrators to organize their network in a manner that allows them to practically defend it from both known and unknown (zero-day) attacks. It presents administrators with the most network and application-level security protection for dynamic Internet threats, including the Cisco IOS Malformed OSPF Denial of Service Attack that resulted in a vulnerable system not being able to respond to ordinary requests.

Check Point SmartDefense is a collection of Active Defense products that actively protect organizations from known and unknown network attacks by using intelligent security technology. SmartDefense blocks attacks by type and class using Check Point s patented Stateful Inspection technology and provides a single, centralized console to deliver real-time information regarding attacks as well as attack detection, blocking, logging, auditing, and alerting.

The following features are included in Check Point s SmartDefense:

• Centralized, type-based attack prevention designed to provide a single location for the control and blocking of both known and unknown attacks using a novel attack-type classification technology.

• Online updates and Web worm prevention which allows for online updates from Check Point s SmartDefense attack...