Check Point CloudGuard Connect
Branch Cloud Security: Securely Connect your Branch to the Cloud

Features:

Check Point SandBlast Agent extends the proven protections of SandBlast Zero-Day Protection to endpoint devices and web browsers. Threat Extraction reconstructs downloaded files in seconds, eliminating potential threats and promptly delivering a safe version to users. At the same time, Threat Emulation discovers malicious behavior and prevents infection from new malware and targeted attacks by quickly inspecting files in a virtual sandbox.

Malware is detected during the exploit phase, even before hackers can apply evasion techniques attempting to bypass the sandbox. This innovative solution combines cloud-hosted CPU-level inspection and OS-level sandboxing to prevent infection from the most dangerous exploits, and zero-day and targeted attacks.

The Check Point solution also includes Application Control and URL Filtering to enforce safe web use. IPS, Anti-Bot and Antivirus protect customers from known threats. HTTPS inspection safeguards companies from threats trying to hide inside encrypted HTTPS channels.

Furthermore, Check Point is a fully consolidated and connected cyber security architecture protecting on premises, cloud and branch networks as well as endpoint and mobile devices from advanced persistent threats. Threats identified on one device can be automatically propagated as an IoC (Indicator of Compromise) to protect branch, mobile and cloud-hosted assets from the same zero-day threat.

Cloud Connectors: entry points for all IPsec or GRE tunnels into the cloud infrastructure, Cloud Connectors are grouped in clusters across different datacenters offering redundancy and elasticity. Connecting to a near-by location ensures low latency.
Cloud Gateways: cloud delivered security enables separate policies for each subscribed tenant where capacity automatically expands as demand increases. Hardware or software updates are completely transparent, providing maintenance-free security.
Web Portal: adding sites, setting site-wide security policy and viewing logs and reports is easy with the web portal. The Infinity cloud portal is also integrated with SaaS, a CASB solution protecting SaaS and other cloud-hosted assets.

Simple and Intuitive Web Management

Simplified central management provides an intuitive, simple on-boarding process, security policy configuration and monitoring. Powered by Check Point SmartEvent see the most important threats with a single view across the entire infrastructure. Take control of security events with real-time forensic and event investigation, compliance and reporting. Respond to security incidents immediately, reducing the time spent remediating incidents. Optimize WAN

Security

CloudGuard Connect has been fully tested and integrates with leading SD-WAN vendors. The solution enables flexible, automated service chaining from SD-WAN platforms to CloudGuard Connect to optimize traffic to the Internet and cloud applications. The initial configuration of automated service chaining can be centrally managed. Application security policies are defined once and programmed to all sites in contrast to the branch firewall security model requiring device-by-device management. Centralized management not only reduces the time to deploy and IT resource costs but also provides more consistent policies, reducing risk across the enterprise.

Specifications:

¹ the expected additional latency for a branch in the same CloudGuard Connect region

Video:

Protect your Branch Office Cloud Connections from Cyber Attacks

Learn how to protect your branch office internet connections with top-rated threat prevention, branch cloud security, OpEx savings up to 40%, and flexibility to deploy security in minutes in the cloud or on-premise.

Documentation:

Download the Check Point Cloudguard Connect Datasheet (PDF).