Check Point Smart-1 Cloud
Security Management Architecture delivered from the Cloud

Features:

Lower the complexity of managing your security

When it comes to security management, Check Point has a solution. From zero-touch gateway provisioning to security policy management to threat visibility and analytics to compliance and reporting to large scale multi-domain management to central deployment of software updates to codifying security management using RESTful APIs - Check Point has you covered.

• One Console to Manage Them All
  With one console, security teams can manage all aspects of security from policy to threat prevention - across the entire organization - on both physical and virtual environments. Consolidated management means increased operational efficiency.
• Unified Policy
  In addition to a unified console, a unified access control policy for users, applications, data and networks simplifies policy management.
• Next Generation Policy Management
  Check Point’s next generation policy makes it extremely easy to segment policy into manageable sections with inline shared policies. Create rules in sub-policies aligned to specific business function like control of safe Internet use. Then delegate authority of the policy and share it across teams, ensuring consistency and freeing key security personnel to handle other tasks.
• Delegation and Collaboration
  Work without conflict. Session-based object locking enables multiple administrators and the same administrator to work simultaneously on the same rule base. Granular administrator delegation enables access based on role such as SOC analyst, auditor and security administrator.
• Threat Management
  Threat Management is fully integrated, with logging, monitoring, event correlation and reporting in one place. Visual dashboards provide full visibility into security across the network, helping you monitor the status of your enforcement points and stay alert to potential threats.
• Compliance Reports
  Security can be complex, but there are industry and security best practices to guide you. Real-time compliance monitoring and reporting is built-in, showing admins how their policy compares with Security Best Practices and regulations such as GDPR, HIPAA and PCI DSS.
• APIs Enable Operational Efficiency
  With too much work and too little staff, security teams need to work smarter. Automation and granular delegation are key to helping alleviate operational overhead. With RESTful APIs, security teams can automate any task.
• Zero-touch Deployment
  An intuitive web-based user interface, enables large enterprises to provision security efficiently. Apply a template describing device configuration settings to your inventory of new security gateways. When powered on Check Point gateways get their configuration from the cloud and are ready for a security policy.

Lower your Startup Time, Costs, Maintenance….

Smart-1 Cloud answers the evolving needs of enterprise security management today. Businesses are up to date with the latest security and are able to manage the latest threats across devices and workloads via a single management console. Security management delivered from the cloud scales as environments grow without having to worry about limited physical storage space or log storage capacity. With Smart-1 Cloud organizations save time on startup, infrastructure and maintenance costs.

In minutes, have the latest Security Management release with the full functionality running as a service and have all your gateways connected. Connecting a gateway is easy. Create an HTTPS tunnel from the gateway to the service using a unique authentication key. Once the gateway object is created, all that is left is to initiate the Secure Internal Communication (SIC). Then focus on managing your organizations security and analyzing the logs and events.

Always the Latest Security Management

Security is a process. As threats evolve so do the security processes and technologies designed to address these threats. This includes security and threat management. New releases include new capabilities and new tools like threat analytics for improved threat visibility. With cloud delivered security management, organizations don’t have to worry about finding a change window to update the security management server to the latest, new software release.

On-demand Expansion

Like other Software-as-a-Service models, Smart-1 Cloud is available for a yearly subscription. Start with management for 5 gateways with 200 GB of log storage to store up to 5 GB of logs per day. As your business grows and you add additional gateways, you get 50 GB of additional log storage to store up to 1 GB of logs per day. Easily expand on-demand, adding more gateways and storage as you see fit.

Zero Maintenance

Check Point maintains the infrastructure and software. Until now, you had to plot your windows of maintenance, run testing, and then roll out an upgrade campaign to all selected candidates to get them up to date. Today, with Smart-1 Cloud, this is automatically updated for you. In addition we do daily backups and monitor systems and disk space for any issues.

Smart-1 Cloud Shared Responsibility Model

Use Cases:

Smart-1 Cloud On-boarding, the Fastest On-ramp to Check Point Security Management

Smart-1 Cloud is an ideal platform for anyone interested in quickly provisioning a Check Point security management server. When compared with an on-premises or CloudGuard IaaS deployment the ramp-up process is simpler and the ramp-up time is much quicker. Smart-1 Cloud deployments do not require expertise in specifying a hardware platform meeting the recommend system requirements. Likewise users do not need to have the cloud expertise to provision one of Check Point’s public or private cloud CloudGuard IaaS offerings. Additionally, with the web-based SmartConsole in Smart-1 Cloud, there’s no need for an additional Windows host to run the SmartConsole GUI client.

Simply register at the Check Point Infinity Portal, the portal to all of Check Point’s SaaS offerings, and you have 30 days to trial Smart-1 Cloud. The free trial includes the full Smart-1 Cloud feature set. When ready, purchase a 30 day or yearly Starter Pack.

Startups and Small Enterprises

In companies where employees wear many hats, Smart-1 Cloud is an option. IT staff at these companies may not have the time to acquire and provision new hardware or software. Smart-1 Cloud with its fast ramp-up time, no maintenance, always up to date security and scalability may be the ideal solution. If the company is geographically distributed, and doesn’t’ require sharing objects and rules, admins at the different locations can have their own tenant or domain. Customers can have multiple environments on the same Infinity Portal account and registered under the same email address. Switching between the different environments in the portal is easy. Simply select the environment name from the drop down list at the top of the Infinity Portal window. The login from the portal to the web SmartConsole uses the portal's credentials, allowing Single Sign-on (SSO) to the web SmartConsole.

Migrating from a Standalone to a Distributed Deployment

If you started your Check Point journey with one NGFW with security management and are now adding additional gateways to better segment your network or protect additional remote offices or virtual gateways, then Smart-1 Cloud is an option. In the distributed deployment model security management runs on its own separate system. This frees the standalone gateway to handle more traffic and additional security features. Additionally central management of more than one gateway is a linear OPEX savings for each additional gateway added. And you minimize errors introduced when repeating tasks on multiple management servers.

Refreshing an Existing Security Management Server or Adding HA Management

Maybe you have an existing management server and it’s time to consider adding more capacity or you want to add an additional HA (Highly Available) management server to reduce your risk. Smart-1 Cloud is an option. When you’re ready to migrate to Smart1 Cloud we offer a Migration Tool to save time and facilitate the migration process. Run the export tool on your existing management server and then import the configuration into Smart-1 Cloud.

Smart-1 Cloud is highly available. You may be familiar with the existing Check Point management HA functionality which syncs objects and policy to a backup server so that backup server is ready if and when the primary server goes offline. Smart-1 cloud does not offer full HA functionality, but with an SLA of three nines (99.9%) is highly available. In addition Smart-1 Cloud is backed up every 12 hours. If you need to revert to a backup this is available by contacting our support staff.

The Managed Security Service Provider (MSSP) Solution

Smart-1 Cloud’s per-tenant pricing and business model, management APIs and ability to easily scale to accommodate future growth is an ideal solution for MSPs and MSSPs interested in growing their business. Managed Security Services Providers step in and fill an essential service for businesses facing IT security skills shortages and resource constraints. MSSPs can customize Check Point’s broad offering of integrated security products to fit the needs of these resource constrained businesses. Furthermore Check Point provides the APIs needed to deliver these security services with operational efficiency, increasing the profit margin of tech-savvy MSSPs.

Specifications:

Manage One Enterprise Gateway or 5 SMB Gateways

Note: 2 and 3 year SKUs are available in the online product catalog, Manage up to 100 enterprise gateways or 500 SMB gateways in a single Smart-1 Cloud environment. 5 SMB (1500) gateways are equivalent to 1 Enterprise gateway (all other models). Add more environments as needed.

Manage 5 Enterprise Gateways

Note: 2 and 3 year SKUs are available in the online product catalog, In the 3Y SKUs, SmartEvent and Compliance are included for the 1st year. Manage up to 100 gateways in a single Smart-1 Cloud environment. Add more environments as needed.

Documentation:

Download the Check Point Smart-1 Cloud Security Management Datasheet (PDF).