CHKP Sales Quiz

Yes

No

A web application firewall built on the 2012 appliance platform

A bundle of software blades on 2012 appliances which includes AppCtrl, URLF & AV in addition to local management and reporting capabilities.

A new web application firewall appliance

Per Virtual System

Per Virtual Firewall

Per Gateway/Chassis

is a post-infection tool, designed to discover bot infections and prevent damage caused by botnets inside cusotmer networks

can prevent bot infections, but is unable to detect "command-and-control" traffic, which is used by attackers to control the bots

is a tool which customers can use to control their own botnets

Application Control and URL Filtering are really expensive

SWG includes local management and reporting

Only proxy

HTTPS inspection yes, Proxy no

Yes to both

.. is rather dated, and is soon going to be replaced with a superior Java based CLI interface

.. is a key selling point of our products and competitive differentiator, which provides unparalleled visibility and control over a number of essential security functions.

.. is a key selling point of our products and competitive differentiator, which provides unparalleled visibility and control over a number of essential security functions. But is rather dated, and is soon going to be replaced with a superior Java based CLI interface.

A benefit provided by the Check Point IPS Blade, where IPS enabled-gateways are able to prevent exploit attacks against unpatched, potentially vulerable target systems

a patch-deployment tool on Check Point gateways which can be used to schedule and deploy new patches to desktops, servers and laptops

Something which my Grandmother used to do

An umbrella term for a solution based on a number of different products, including ME, DLP, Document Security and Mobile Access.

The new name for endpoint

A new license that will be launched with R76 to provide a secure sandbox container for mail / calender / contacts on iOS

Provides inferior protection compared to “Best-Of-Breed” IPS solutions, such as those offered by TippingPoint, McAfee and Sourcefire

Creates huge performance issues and should never be enabled

Provides integrated IPS functionality for new and existing Check Point gateways, and can be administered and managed using the same, single, integrated management solution

upto 10,000

upto 5000

upto 20,000

Hypervisor mode

Network Mode

Both

Isolate Business Data

Encrypt Business Data

Encrypt the Smart Device completely

Secure access to corporate resources

2012 Appliances

Open Servers

Power-1 Appliances

All of the above

They each have their own management

Through a WebUI

With Smart Dashboard / Security Management / MDM

$32,000

$30,000

$70,000

$42,000

R65 HFA75

E80.39

R80 HFA10

R75.40

R76

Downloads new malware to infect servers and endpoints which don’t have anti-virus protection installed

Builds new Trojans and Viruses using secure-sandpit technology, and then uploads them to ThreatCloud™

executes and analyses suspicious files inside a virtual sandbox environment, in order to detect and prevent new types of malware

injects new malware into customer gateways

is a Global collaborative intelligence network, which shares real-time updates to fight new malware and threats

is a yearly licensed subscription on a per gateway basis

No

Yes

The ability to run software blades

Ability to use extra CPU cores and memory

Better performance with VSLS

All of the above

True

False

only available with Provider-1 / Multi-domain management

a software blade that brings extended management capabilities

the event management UI with the "donuts"

an essential component of our management infrastructure and included in every Check Point Security Management environment

150

500

250

Fortinet, Palo Alto

Imperva, Barracuda, Akamai

Bluecoat, Websense