“Firewalls have been the cornerstone of network security and are now poised to take on new roles, given the emerging trends in Web 2.0 and other business dynamics,” says Rick Moy, president of NSS Labs. “In our tests, we’ve employed the same strategies cybercriminals use to attack firewalls. NSS Labs’ Next-Generation Firewall Test is unique and offers businesses a rigorous and completely unbiased analysis.”
NSS Labs, a leader in independent security product testing and certification, offers tests recognized as the most comprehensive in the industry, providing its users—businesses, government agencies, and organizations of all sizes—with research and analysis tools based on real-world experience. For these tests, NSS Labs subjected the Check Point Power-1 11065 to the Next Generation Firewall Test methodology, which includes 1,179 vulnerabilities and a wide variety of traffic volumes, protocols, and workloads. According to the report, “Check Point’s management interface design is good and intuitive. For multi-gigabit environments considering upgrading from a current firewall to a next-generation one, the Check Point Power-1 11065 offers an excellent level of protection and an outstanding total cost of ownership (TCO) over three years.”
The report's key findings highlight Check Point's exceptional next-generation firewall capabilities, including:
100% pass rate on traditional firewall tests – successfully meeting the most demanding security and policy enforcement requirements. Furthermore, the Check Point Power-1 11065 also achieved a 97.3% block rate for its integrated IPS1, and its default configuration achieved an 86.6% protection rate in a recent NSS Labs IPS test.
100% pass rate on application identification and enforcement tests – correctly identifying and enforcing policies on a range of applications, including SSH applications, social networking apps, instant messaging apps, Skype, and other Web 2.0 widgets.
100% of user and group identity detection tests passed – Successfully identifying users and enforcing firewall policies with direct integration with Active Directory.
100% of evasion tests passed – Successfully locating and blocking attacks using evasion and obfuscation techniques.
Low CTP level – Offering an incredible price/performance ratio of $49 per Mbps protected.
“Internet usage in the office has changed radically since the rise of social media and Web 2.0 applications. To ensure the level of protection required by modern corporate environments, IT administrators should not limit themselves to blocking a series of specific ports or protocols, but rather apply granular application control techniques to gain better visibility and increase the level of protection without impacting business operations,” says Oded Gonda, vice president of enterprise security solutions at Check Point Software Technologies. “The NSS Labs results validate our leadership position in the next-generation firewall industry, as well as our ability to deliver innovative, high-performance, and reliable network security solutions to the market.”
“Attacks like Operator Aurora, Koobface, and Stuxnet have changed how the industry approaches security. And while the attack landscape has evolved dramatically in recent years, we have always strived to make the internet a safer place where businesses can operate seamlessly. We remain committed to providing our customers with the tools and protection they need to stay prepared for future threats,” Gonda concludes.
Thanks to Check Point's latest software version, Release R75, based on the Software Blade Architecture, organizations can now take full advantage of easy access to multi-gigabit Application Control, Identity Detection, and Intrusion Prevention features in a single solution. The NSS results highlight Check Point's ability to deliver a robust combination of security technologies, user detection, and comprehensive application control to its customers—all essential for organizations using Web 2.0 tools without compromising business security. Furthermore, customers benefit from an unparalleled knowledge base, thanks to Check Point AppWiki, the world's largest application library, offering over 100,000 Web 2.0 applications and social media widgets.
