Check Point UTM-1™ Edge appliances deliver proven, best-in-class security with reduced cost and complexity, right out of the box! Small- and medium-size businesses can quickly and easily deploy comprehensive protection—including firewall, IPS and anti-malware—at branch and small offices starting at just $600. Robust performance, powerful central management and advanced wireless options provide unmatched value in a simple, all-in-one solution. New UTM-1 Edge N Series appliances deliver gigabit firewall performance with enhanced security and connectivity.

Product Features:

• Best-in-class integrated firewall and intrusion prevention system (IPS)
• Anti-malware, messaging security, Web filtering and network access control (NAC)
• Seamless 802.11n WiFi and 3G wireless connectivity
• Comprehensive traffic management parameters guarantee quality-ofservice (QoS)
• Manage up to thousands of remote appliances from a single, central console

Product Benefits:

• Comprehensive, enterprise-class security for SMBs and branch offices in a single appliance
• Gigabit firewall performance starting at $1400
• High-availability options ensure that security functions keep pace with business-critical applications
• Quick and easy provisioning for rapid deployment with minimal IT resources

Features:

Security:

Best-in-class Integrated Firewall and IPS - UTM-1 Edge appliances include the industry’s most proven firewall technology, based on the same Check Point technologies that secure the Fortune 100. Comprehensive network access control (NAC) allows blocking of unwanted applications such as IM and P2P, while an advanced intrusion prevention system (IPS) ensures protection of remote sites from both known and unknown threats, such as Denial-of-Service, post scans and buffer overflows.

Secure Connectivity - IPSec VPN connectivity secures communications between site-to-site and remote locations. Support for multiple VPN clients - such as Check Point Endpoint Connect, SecureClient, SecuRemote and L2TP - offers flexibility for users.

Anti-malware and Messaging Security - Malware protection is integrated at the gateway, blocking worms and viruses before they enter the network. On-the-fly decompression of unlimited file sizes enables thorough scanning. Check Point Messaging Security blocks spam and provides comprehensive protection for an organizations’ messaging infrastructure.

• IP reputation anti-spam - Checks the sender's reputation against a dynamic database of known-bad IP addresses, blocking spam and malware at the connection level.
• Content-based anti-spam - Blocks known spam by comparing a ’fingerprint’ of each incoming email with a dynamic database containing millions of known spam signatures.
• Block/allow list anti-spam - Blocks email offenders while allowing trusted senders. Can block or allow entire domains.
• Mail antivirus - Blocks worms and viruses at the gateway. Supports standard email protocols (POP3, IMAP, and SMTP), including Web-based email.
• IPS email server protection - Protects against a broad range of threats, including denial-of-service attacks that target the messaging infrastructure itself.

Web Filtering - Best-of-breed URL filtering services allow companies to define Web access policies. Access to potentially malicious Web sites containing spyware and viruses, as well as inappropriate Web content can be blocked.

Network Access Control (NAC) - 802.1X port-based authentication allows NAC based on user privileges and policy compliance at branch offices. Built-in support for the extended authentication protocol (EAP) enables WPA Enterprise and 802.1X access control without an external RADIUS server. This makes NAC easier to use, even in small networks.

Networking:

Secure Hot Spot Support - Administrators can easily enable guest access to networks by creating Web-based secure hot spots. User authentication and/or terms-of-use can be required before granting access to corporate resources.

High Availability - High-availability options ensure that security functions keep pace with business-critical applications and other network activity. UTM-1 Edge appliances support WAN redundancy and load-balancing to ensure persistent connectivity and service availability. Should the broadband connection become unavailable, dialup support can provide a backup Internet connection.

Quality–of–Service (QoS) - Comprehensive traffic management parameters - such as weighted priorities, bandwidth guarantees and bandwidth limits – can guarantee QoS for business-critical or latency-sensitive traffic over a single Internet connection. Wireless Multimedia QoS allows companies to prioritize traffic from multiple audio, video and voice applications.

Management:

Centralized, Large Scale Management - Administrators can define security policy for the entire network - including internal security, main sites, and remote sites – from a single, centrally located Check Point Security Management or Provider-1 console. With the addition of SmartProvisioning™, a profile-based management add-on designed for large-scale VPN and security installations, administrators can define a single security profile and apply it simultaneously to thousands of UTM-1 Edge appliances - dramatically reducing deployment time and administrative overhead.

Quick and Easy Setup - UTM-1 Edge appliances can be set up in less than 10 minutes, offering truly simple deployment to sites that have minimal IT resources. Even non-technical staff can easily perform initial setup and configuration

Centralized, Automatic Updates - Optional Check Point Update Service provide updates for IPS protections, antivirus signatures, anti-spam database and Web filtering services. Updates can be downloaded automatically and distributed to remote locations at preset intervals. Configuration and ‘best practices’ security policies are also included.

Hardware:

Secure Wireless Connectivity - UTM-1 Edge W appliances integrate a WiFi access-point (802.11b/g/n) supporting multiple security protocols, including 802.1x, IPSec over WLAN, RADIUS, WEP, WPA and WPA2 authentication. They also have dedicated WLAN interfaces from which you can set specific security rules for WLAN segments. In addition, the wireless interface can be segmented into as many as four virtual access points, each with separate security policies and encryption methods.

Integrated ADSL Modem - UTM-1 Edge appliances are available with integrated, high-speed ADSL modems, eliminating the need for external ADSL modems and providing administrators with simple deployment options. The latest standards, including ADSL v2/2+, Annex A and Annex B are supported.

UTM-1 Edge Industrial - The UTM-1 Edge Industrial appliance protects Industrial Ethernet environments, as well as supervisory control and data acquisition (SCADA) equipment, from unauthorized access and attacks. These solid-state appliances are built for use in harsh environments and comply with industrial specifications for dust, heat and vibration. Placement is flexible with DIN rail, rack and wall mounting options.