Check Point Next Generation Firewalls (NGFWs) Features
Security - Unified Threat Management (6)
-
Antivirus
Tools to protect a system from viruses by scanning and quarantining any threats.
-
Whitelists
The ability to green light a specific URL or system to bypass the scanning process.
-
Antispam Filtering
Tools to prevent spam emails and other spam from entering the network.
-
Content Filtering
Tools to filter specific content based on the MME type or file extension.
-
Web Filtering
Tools to block certain websites from being viewed by those in a network.
-
Firewall
Tools to block off a network or system from outside networks or systems to protect the data within.
Administration (25)
-
Reports & Analytics
The ability to digest a large amount of data into visual representations and analytics.
-
Dashboard
The ability to view a large amount of data in one place using customizable widgets.
Data Management
Administrators can access and organize data related to incidents to produce reports or make data more navigable.
Incident Logs
Information on each incident is stored in databases for user reference and analytics.
Reporting
Produces reports detailing trends and vulnerabilities related to bot management and performance.
Workflow Management
Create, design and manage workflows for repetitive tasks
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Configuration Management
Identify component attributes like servers, hardware, software, and manage relationships across all services
Data Storage Management
Manage and store data in a database
Policy Management
Create, manage, and track policies and procedures within an organization
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Web Threat Management
Incident Management
Manage and track all disruptions and incidents
-
Policy Management
Provides network security features to customize network access rules, workflows, and compliance requirements.
-
Logging and Reporting
Captures logs for all firewall functions, storing information, incidents, and activity for user reference and analysis.
-
Application Gateway
Application-level proxy that applies security mechanisms to connect clients to applications while concealing client network and computers.
-
Concurrent Sessions
Determines the number of connections a firewall is able to track and facilitate securely.
Uptime Reporting
Track the availability time for a designated network or website over a given period of time
Web Traffic Reporting
Collect and analyze traffic data about website visitors
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Access Management
Control and manage access to company resources
Incident Management
Manage and track all disruptions and incidents
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Remote Monitoring & Management
Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications
Governance (4)
Access Control
Supports LDAP Protocol to enable access control and governance.
Compliance
Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
Data Visibility
Similifies data identification to increase visibility and management capabilities
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Security (9)
Encryption
Protects data with within and as it leaves your secure or local network.
Endpoint Intelligence
Analysis for users to examine threat intelligence data specific to their endpoint devices.
Activity Monitoring
Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.
Breach Detection
Provides incident alerts for leaks or breaches and provides capabilities to inform administrators of attacks.
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Security Automation
Allows administrative control over automated security tasks.
Application Security
Protects application access and data. Prompts additional authentication for suspicious users.
Workload Protection
Protects computing resources across a network. Prompts additional authentication for suspicious users.
Data Protection
Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.
Network Management (4)
Network Segmentation
Allows administrative control over network components, mapping, and segmentation.
Network Mapping
Allows visual display of networks segmented components and their connected resources.
Security Analytics
Utilizes behavioral analysis to improve security procedures and documentation.
API/Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Identity Management (3)
Adaptive Access Control
Provides a risk-based approcach to determining trust within the network.
Identity Scoring
Calculates risk based on user behavior, permissions, and requests.
User Monitoring
Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.
Monitoring (18)
-
Load Balancing
Monitors traffic and distribute resources and scales infrastructure workloads to match traffic.
-
Continuous Analysis
Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
-
Intrusion Prevention
Enforces security paramaters to prevent unauthorized access.
-
Intrusion Detection
Detects unauthorized access and use of privileged systems.
Intrusion Detection System
Identify and alert about security breaches by third parties
Intrusion Prevention System
System that monitors network traffic to prevent malicious activity.
-
Network Monitoring
Monitor the performance of network resources, such as switches, routers, and servers.
-
Network Discovery
Automatically discover network assets.
-
Network Asset Mapping
Build map of network resources based on dependencies and connections.
Activity Monitoring
Track and report on everything that happens within the system or network
Incident Mapping
Track and visualize the location of incidents
Data Mapping
Track the management and flow of data throughout the organization
On-Demand Mapping
Creating a target map or mapping model that meets the needs and requirements of a user, network, or workflow
Location-Based Mapping
Mapping model based on the geographic location of users
Hierarchical Mapping
Mapping model in which the network map is organized and visualized as a tree-like structure
Visual Discovery
Process of visually navigating data and applying analytics to detect patterns, gain insight, and answer specific business queries.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Continuous Monitoring
Conduct tracking and assessment of application and device behavior without breaks or interruptions
Functionality (10)
-
Virtual Private Network (VPN)
Provides a virtualized network for client network to mask identity, location, and other sensitive information.
-
Antivirus
Provides malware protection capabilities in addition to traditional firewall barrier technology.
-
URL Filtering
Provides access control tools to categorize and block traffic and match traffic to firewall policies.
-
Availability
Deploys firewall(s) configured in sync to prevent network failure and provide business continuity.
IP Filtering
Control or restrict network traffic based on the source and destination of IP addresses, protocols and ports.
Content Filtering
Control or restrict access to web content or applications
-
Multi-Network Capability
Provides monitoring capabilities for multiple networks at once.
-
Anomaly Detection
Constantly monitors activity related to user behavior and compares activity to benchmarked patterns.
-
Network Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
-
Scalability
Provides features to allow scaling for large organizations.
Automation (4)
-
Metadata Management
Indexes metadata descriptions for easier searching and enhanced insights
-
Artificial Intelligence & Machine Learning
Facilitates Artificial Intelligence (AI) or Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis.
-
Response Automation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
-
Continuous Analysis
Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Incident Management (3)
-
Incident Logs
Information on each incident is stored in databases for user reference and analytics.
-
Incident Alerts
Gives alerts when incidents arise. Some responses may be automated, but users will still be informed.
-
Incident Reporting
Produces reports detailing trends and vulnerabilities related to their network and infrastructure.
Management (8)
-
Network Automation
Automate how physical and virtual devices are configured, handled, tested, deployed, and operated inside a network.
-
Network Traffic Analyzer
Record and analyze the traffic on network.
-
User Provisioning
Ensure that only certain users have access to a system.
-
Network Analytics
Analyze network data to identify trends and patterns.
-
Resource Maintenance
Infrom user of upgrades and repairs to network resources.
Network Provisioning
Set up and configure network resources to make them accessible for authorized users, devices and servers
Visual Analytics
Interact with data visualization elements, such as charts and graphs, to drill down into data
Cost Tracking
Process to track, record, and analyze expenses that occurred over the entire duration of a given project
Support (5)
-
Real-time alerting
Notify user when network related error arise.
-
Hybrid Infrastructure Support
Supports cloud and LAN, including hybrid infrastructure
-
API Integration
Provide API and custom sensors for easy integration.
Third-Party Integration
Addition of necessary external data, applications, tools, or features
Database Support
Supports common databases such as MySQL and Oracle
Generative AI (4)
-
AI Text Summarization
Condenses long documents or text into a brief summary.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Generation
Allows users to generate text based on a text prompt.
Artificial Intelligence - Firewall (1)
-
AI Firewall
Utilizes AI to monitor network traffic, identify anomalies, and block attacks.
Agentic AI - Firewall Software (3)
-
Autonomous Task Execution
Capability to perform complex tasks without constant human input
-
Adaptive Learning
Improves performance based on feedback and experience
AI/Machine Learning
Software program that continuously adjusts its behavior based on observed data
Agentic AI - Network Management Tools (10)
-
Autonomous Task Execution
Capability to perform complex tasks without constant human input
-
Multi-step Planning
Ability to break down and plan multi-step processes
-
Cross-system Integration
Works across multiple software systems or databases
-
Adaptive Learning
Improves performance based on feedback and experience
-
Natural Language Interaction
Engages in human-like conversation for task delegation
-
Proactive Assistance
Anticipates needs and offers suggestions without prompting
-
Decision Making
Makes informed choices based on available data and objectives
Intrusion Prevention System
System that monitors network traffic to prevent malicious activity.
Intrusion Detection System
Identify and alert about security breaches by third parties
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Agentic AI - Mobile Application Management (7)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Cross-system Integration
Works across multiple software systems or databases
Adaptive Learning
Improves performance based on feedback and experience
Natural Language Interaction
Engages in human-like conversation for task delegation
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (126)
Configuration Management
Identify component attributes like servers, hardware, software, and manage relationships across all services
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Network Analysis
Run tests on a network to find the root cause of network issues
Network Resource Management
Monitor and manage resource utilization for network infrastructure
IT Asset Management
Managing inventories and tracking changes to hardware and software configurations
Policy Management
Create, manage, and track policies and procedures within an organization
Remote Access/Control
Access work applications remotely, for when working away from the office and/or traveling
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Threshold Alerts
Alerts for when traffic utilization or network performance deviates from pre-defined threshold settings
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Response Management
Planning and managing of resources and procedures to mitigate the impact of events and incidents
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Data Visualization
Graphical representation of data
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Dashboard
Assembly of graphs and charts for visualizing and tracking statistics/metrics
Issue Management
Identify and respond to unexpected problems or failures (ie. "negative events")
Security Management
Manage and control the security aspects of an organization's digital assets, resources, and operations
Performance Metrics
A set of indicators that tracks the performance of networks, applications, systems, teams, etc.
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
API
Application programming interface that allows for integration with other systems/databases
Troubleshooting
Take actions to troubleshoot issues for networks, devices, etc.
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Mobile Access
Access software remotely via mobile devices
Configurable Workflow
Configure existing workflows to meet your organization's needs
Data Extraction
Automatically retrieve and pull information from documents, websites, images, data sets, and other sources
Risk Assessment
Initiate collection and analysis of known risks
Charting
Manage patient documentation describing all clinical interactions, diagnoses, procedures, medications, etc.
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Self-Updating Maps
Dynamic maps that update whenever network changes are made
IT Asset Tracking
Monitor the movement of one or more IT assets throughout the organization
Dependency Tracking
Track and manage task relationships and dependencies
Data Import/Export
Import and export data to and from software applications
Data Connectors
Connect to big data sources
Drag & Drop
Assemble applications and processes by dragging over and arranging pre-built components
Map Exporting
Export a map or layout to share
Color Codes/Icons
A way to visually represent data where different categories of items are marked with different colors
Uptime Reporting
Track the availability time for a designated network or website over a given period of time
Document Storage
Store and organize documents in a centralized system
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Scheduling
Plan availability and assign specific time slots for tasks and resources
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Mobile Alerts
Notifications via mobile devices
Alerts/Escalation
System alerts about the need to escalate an issue or request
Customizable Reports
Alter the layout and content of reports
Bug/Issue Capture
The creation of a bug/issue ticket, submitted by a team member, customer or end user
Mobile Network Troubleshooting
Issue Auditing
Inspecting the issue resolution process for compliance with related systems and regulatory guidelines
Customizable Dashboard
Alter the layout and content of dashboards
Email Alerts
Receive and/or send email notifications for urgent updates, requests, or other information
Anti Virus
Prevents, detects and removes malware
Diagnostic Tools
Access client's system information, including hardware and software configuration, to perform diagnostics
Remote Update/Installation
Deploy updates or install new software remotely
Personally Identifiable Information Protection
Prevent unauthorized access to personally identifiable information
Data Discovery
Discover and connect variety of data sources to the application for analysis
Behavior Tracking
Track visitors'/audience's responses across web pages and other optimized content
Remote Wipe
Remotely delete data from devices without needing physical access
Risk Analysis
Analyze potential risks across the organization
Insider Threat Protection
Prevent malicious actions by individuals connected to the organization, such as current and past employees, contractors, or associates
Anti Virus
Prevents, detects and removes malware
Whitelisting/Blacklisting
Control system access and/or deliverability for applications and email addresses
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Watermarking
Add a digital mark to show ownership of an image, video, document, etc.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
API
Application programming interface that allows for integration with other systems/databases
Ransomware Protection
Protects systems from ransomware attacks and mitigates attack risks
Multi-Factor Authentication
Request two or more credentials to prove user's identity before granting access to systems
Automatic Backup
Data is backed up automatically to prevent data loss
Multi-Device Support
Support multiple types of devices
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Real-Time Analytics
Analyze and gain insights into data in real-time
Secure Data Storage
Securely stores data to prevent data loss or breaches
Data Recovery
Ability to restore deleted, hidden, or lost data from an email server/system
Activity Tracking
Track and document all activities across devices, networks, and other systems
External Storage Device Blocking
Restrict data transfer to and from external storage systems such as USB and disk drives
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
File Quarantining
Isolate suspicious files to prevent harm to computer systems
Disaster Recovery
Plan and implement business continuity measures in case of unforeseen events
Intellectual Property Protection
The process of discovering content on the web that is same or similar to logos, trademarks or other proprietary content
Alerts/Escalation
System alerts about the need to escalate an issue or request
Risk Assessment
Initiate collection and analysis of known risks
Sensitive Data Identification
Identify sensitive or personal information collected from users
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Data Classification
Grouping log entries based on similar attributes.
Data Replication
Process of copying and storing data in more than one site or node
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
File Transfer
Move files across different systems or networks
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Spam Blocker
Filters used to determine different types of malware threats
Alerts/Escalation
System alerts about the need to escalate an issue or request
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
Visual Analytics
Interact with data visualization elements, such as charts and graphs, to drill down into data
Customizable Reports
Alter the layout and content of reports
Real-Time Analytics
Analyze and gain insights into data in real-time
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Activity Tracking
Track and document all activities across devices, networks, and other systems
Hardware Integration
Hardware components included as part of the software system
Summary Reports
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Real-Time Data
Receive data and information in real time
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Log Access
Collection, search, and analysis of access logs and audit logs
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Multi-Location
Manage and support multiple locations
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Behavior Tracking
Track visitors'/audience's responses across web pages and other optimized content
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
API
Application programming interface that allows for integration with other systems/databases
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Single Sign On
Allow users to access multiple services after entering their login credentials once
Dashboard Creation
Creation and customization of dashboards
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user


