Endpoint Security

Today sales of new laptops exceed desktop computer sales, reflecting changing working patterns and increasingly mobile and distributed work forces.  This means that large amounts of company data such as customer databases, intellectual property and financial information are routinely carried outside the secure office perimeter.

Inevitably the devices containing this data are often lost or stolen, resulting undesirable media coverage of data breaches which can damage corporate reputation and lead to civil litigation or even criminal prosecution.

Act now to encrypt your laptops before your organisation hits the headlines for the wrong reasons!

Check Point's Full Disk Encryption solution is based on Pointsec technology following the acquisition of Pointsec in 2007.  Pointsec's mature technology is proven in enterprises and government agencies around the world, allowing Check Point to offer data encryption for laptop and desktop PCs, access control and centralized fully-enforceable installation and management.

Benefits

• Prevents data breaches resulting from lost or stolen laptops and PCs
• Available for Windows, Mac and Linux platforms to meet compliance objectives
• Scales to any size of enterprise or government agency
• Managed centrally for lower total cost of ownership
• Provides a mandatory, enforceable data security policy

Talk to Metadigm about evaluating the Check Point Full Disk Encryption solution

Download a datasheet on Check Point Full Disk Encryption
Download a white paper Guide to the Total Cost of Ownership of an encryption solution
Download a white paper Guide to the Return on Investment of an encryption solution

 

 

Just as large quantities of data are carried beyond the secure network perimeter on laptop PCs, the same is true of USB and other portable storage devices.

USB flash drives, iPods, Bluetooth devices and removable media allow users to extract data in an instant - making all enterprise computers vulnerable. Indeed, many employees now store and carry the contents of their 'My Documents' folder with them on USB routinely, dramatically increasing the risk of that data going astray.

The ability to copy or move sensitive data onto these personal devices undetected places your organization at serious risk of untraceable data leaks.

Check Point Media Encryption prevents unauthorized copying of sensitive data by combining port and device management, content filtering and centralized auditing with media encryption.

Based on Pointsec technologies, Check Point Media Encryption plugs potential leak points and logs data movement to and from any plug and play devices, providing comprehensive control of security policies.

Benefits

• Controls input and output on all connection ports
• Centrally manages devices individually by type, brand, or model
• Scales to meet the needs of any size enterprise or government agency
• Provides complete audit of device usage
• Integrates transparently with Windows 2000/2003 Active Directory and Novell eDirectory
• Maintains high productivity because the application runs transparently to users

Talk to Metadigm about evaluating the Check Point Media Encryption solution

Download a datasheet on Check Point Media Encryption

Research shows the majority of lost or stolen mobile devices contain confidential company communications and information. Applications such as push email make it even more difficult to keep track of the information stored on these highly mobile smartphones and PDAs.

Pointsec Mobile completely secures enterprise data stored on smartphones and PDAs running Symbian, Pocket PC, Windows Mobile Smartphone and Palm operating systems. Device and memory card data are encrypted automatically without user intervention, providing a user-transparent yet fully-enforceable security policy.

Benefits

• Provides easy-to-remember authentication options
• Offers low-cost deployment and management
• Integrates seamlessly with mobile email Enables easy transfer of encrypted data between devices protected by Pointsec Mobile and other Check Point Endpoint Security clients

Endpoint threats continue to increase rapidly, along with the increase in mobile device usage. For Network Administrators, the number and variety of endpoint security applications and management consoles can be bewildering.

A major advantage of Check Point's approach has traditionally been its consistent and unified approach to the management of multiple security components and applications via its SmartCenter management console. The benefits to operational efficiency and budgets of IT departments is well known.

Check Point's approach is no different when it comes to endpoint security.

The Endpoint Single Agent combines firewall, network access control (NAC), program control, antivirus, anti-spyware, data security for preventing data loss, and a VPN client for remote access in a single solution. It eliminates the need to deploy and manage multiple agents, reducing total cost of ownership.

A single Management Console enables Network Administrators to view and modify endpoint security policy. This is unified with the Check Point security architecture, enabling monitoring, analysis and reporting of endpoint security logs and events from the SmartCenter management station and Eventia management systems.

Benefits:

• Single agent for endpoint security needs
• Eliminates the need to manage multiple security agents
• Erases compatibility issues with separate agents
• Reduces administration time and effort
• Lowers total cost of ownership

Download a white paper on the Check Point Endpoint Single Agent

Features:

Malware Mitigation

Limits destructive processes and blocks malware with both heuristic and behavioral-based antivirus and anti-spyware detection, complimented by effective, automated program control mechanisms and real-time security update services.

Data Protection

Enables Network Administrators to apply security management and control policies for access to and encryption of confidential data stored at all endpoints including laptops and removable media devices.

Compliance policy enforcement

Secures network endpoints prior to granting network access via centralized, comprehensive internal and VPN Network Access Control (NAC) policy.  Performs policy checks to ensure compliance and can automatically quarantine and remediate noncompliant endpoints.

Secure Remote Access

Includes easy-to-use IPSec VPN client which supports multiple authentication schemes and connectivity options.
Simple Management and Control: saves time and Admin overhead

Provides centralized policy configuration, management, monitoring and reporting across all endpoint security functions via a single console. This incorporates a single installer, centralized updates, predefined policy templates and automated scheduled reporting.

Transparent End-User Experience

Deploys and updates without requiring end user involvement, minimizing help desk calls. Small client footprint and low memory utilization does not impact end-user function or performance.