Configuring Check Point NGX VPN-1/FireWall-1

Since the release of NG Feature Pack 2, Check Point has added a new component that can verify packet integrity up to and including layer 7 from the Open Systems Interconnection (OSI) model. To further concentrate on Web attacks, Check Point has separated Web Intelligence from SmartDefense and has made Web Intelligence a component of NG AI (R55W). SmartDefense and Web Intelligence are two distinct products that are licensed separately. SmartDefense is licensed as an annual maintenance fee per number of VPN-1 Pro Gateways that your SmartCenter Server manages. Having the proper SmartDefense license within the Check Point UserCenter enables you to download new SmartDefense and Web Intelligence signatures from the Check Point Web site.
SmartDefense and Web Intelligence combine to provide network, application, and Web server protection for your architecture. This chapter discusses both basic and advanced concepts for network security and reveal how Check Point s technologies supply relief for current threats. In addition, we walk through specific exercises to block particular threats.