The Check Point Advanced Networking simplifies network security deployment and management within complex and highly utilized networks, while maximizing network performance and security in multi-Gbps environments. This combination is ideal for high-end enterprise and datacenter environments where performance and availability are critical.
Organizations looking to implement scalable, fault-tolerant, secure networks can use the Advanced Networking Software Blade to run industry-standard dynamic routing protocols including BGP, OSPF, RIPv1 and RIPv2 on security gateways. OSPF, RIPv1 and RIPv2 enable dynamic routing over a single autonomous system - like a single department, company, or service provider - to avoid network failures. BGP provides dynamic routing support across more complex networks involving multiple autonomous systems - such as when a company uses two service providers or divides a network into multiple areas with different administrators responsible for the performance of each.
Multicast protocol support
The Advanced Networking Software Blade also integrates multicast protocol support in IP appliances, including IGMP, PIM-DM and PIM-SM.
Quality of Service prioritization for both encrypted and unencrypted traffic
Advanced Networking lets you prioritize business-critical traffic such as ERP, database, and Web services traffic over less time-critical traffic. It also allows you to guarantee bandwidth and control latency for streaming applications such as Voice over Internet Protocol (VoIP) and video conferencing. In addition, with highly granular controls, Advanced Networking enables guaranteed or priority access to specific employees - even if they are remotely accessing network resources through a VPN tunnel.
ISP redundancy assures reliable Internet connectivity by allowing a single or clustered security gateway to connect to the Internet through redundant Internet Service Provider (ISP) links. This feature does not require costly networking hardware or specialized knowledge to operate.
Flexible server load balancing
Each connection request is directed to a specific server based on one of five pre-defined load balancing algorithms. The server load algorithm prevents any server from handling a disproportionately high volume of traffic. Each incoming connection request is directed to the server experiencing the lightest load.
Security acceleration with patented SecureXL
Patented Check Point security acceleration technology, SecureXL, removes latency associated with intense security processing by creating a special device layer that can make security decisions earlier. In both servers and dedicated appliances, performance is affected negatively by memory, system-bus, and CPU speed as traffic passes through a system. By creating a SecureXL device layer, the Check Point security gateway enables security decisions to be made at a lower application level to remove performance bottlenecks.
Multi-core CPU support with patented CoreXLProduct Highlights
Multi-core CPU support enables Check Point Security Gateways to share traffic among cores of a single system, providing superior price/performance on a single server. The combination of multi-core CPUs and multi-threaded SecureXL security application technology is the foundation for the next generation of security acceleration - application - layer security.
- ISP redundancy for reliability and fault-tolerance
- QoS prioritization guarantees bandwidth and controls latency
- Application load balancing manages server workloads during high volume traffic
- SecureXL accelerates multiple intensive security operations
- CoreXL multicore acceleration increases deep inspection throughput
- ClusterXL provides high availability and load sharing for business continuity
- Fully integrated with existing Check Point security policy management products
- Activate advanced networking and clustering on any Check Point security gateway
- Saves time and reduces costs by leveraging existing security infrastructure