EndpointSecuirty终端安全解决方案-DataSecurity

©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndpointSecurity2©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityAgendaEndPoint产品概述EndPoint产品卖点和对比EndPoint产品结构及原理Q&A3©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurity终端安全市场的发展EndpointSuiteSalesSources:IDC,“WorldwideEndpointSecuritySoftware2008-2012Forecastand2007VendorShares:StillChuggingAlong”企业终端市场的年平均增长约10%($B)*$0.0$0.5$1.0$1.5$2.0$2.5$3.0$3.5$4.0$4.52009201020112012CheckPoint终端市场占有率5©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurity终端安全必须的六个要求安全需求防护手段防病毒,防间谍,防火墙,程序控制保护终端数据执行企业安全策略远程安全访问简单的管理流畅的用户体验降低恶意软件侵害磁盘加密,介质加密,端口控制VPN客户端,灵活的认证和连通方式统一系统管理,单一管理界面单客户端，对系统影响小，用户端透明NAC,策略检查,自动修复6©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndpointSecurity产品概述（一）全面的终端安全保护减轻了终端设备面临的多种风险唯一满足终端安全必须的要素的解决方案唯一能够提供数据安全和远程VPN访问的解决方案数据安全保护网络访问控制VPN统一管理用户端透明防病毒防间谍防火墙程序控制7©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndpointSecurity产品概述（二）防火墙领域15年的行业领导地位基于备受赞誉的ZoneAlarm业界领先的Pointsec®技术remoteaccessVPN领域12年的领导地位单一的客户端解决方案统一管理•减轻了终端设备面临的多种风险•唯一满足终端安全必须的要素的解决方案•唯一能够提供数据安全和远程VPN访问的解决方案防病毒防间谍软件DataSecurityRemoteAccess防火墙/NAC程序控制8©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurity单一客户端，单一界面-提高终端管理的效率-简化终端软件部署-保障终端保护技术的兼容性业界最佳的产品技术组合Industryleadingfirewall-15年技术领先Antivirus/anti-spyware–基于久负盛名的ZoneAlarmDatasecurity–基于业界领先的PointsecRemoteaccess-12年的VPN领先技术CommonCriteria–获得业界最广泛的认证最具有竞争力的终端安全方案-全方位降低了终端安全的风险-用户根据需求选择功能模块-唯一具有remoteaccess和datasecurity主要的卖点–单一客户端UniquetoCheckPoint!9©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityEndpointSecurityNextStepSingleManagement•SingleManagementArchitecture•Singlemanagementserver•Singlepolicy•Singleclientdeployment•CheckPointmanagementarchitectureEndpointSecurityInnovation•Localization•SecureBrowsing•Secure,Managed,VirtualWorkspaceonUSB•SingleLogin•Federation/Distributedservers•NextGenVPN10©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndPointSecurity概述（二）磁盘加密网络访问控制（NAC）VPN防病毒防间谍防火墙程序控制端口管控/介质加密SecureAccessFullDiskEncryptionMediaEncryption11©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndPointDataSecuritySolutions12©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndpointDataSecurity13©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityAbilityToExecuteCompletenessofVision连续8年被Gartner’s评为MobileDataProtection的领导者2001~2008SafeBootCredantTechnologiesUtimacoSafewareAGWinMagicInformationSecurityCorp.BluefireSecurityTechnologiesSybaseReflexEntrustTrustDigitalMobileArmorJPMobileMicrosoftBeCryptPCGuardianPointSec移动数据安全行业的领导者14©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurity业界最广泛的和最高级别的产品认证FIPS140-1&FIPS140-2(FederalInformationProcessingStandards)•CertificationforentirePCproductreceivedMarch22,2002•NISTListing–Certification#208•NISTListing–AESCertification#17•NISTListing–Certification#237CSEPre-QualifiesPointsecPC4.1UnderITSCommonCriteriaEAL4(CertificationAwardedFebruary2004)•ExecutivelysponsoredbytheDEABITSTested&ComplianceUKCSIAClaimsTested(CCT)MarkExport–MassMarketStatusUnderCCATS–ECCNAllProductsDCSSICertification(FrenchAuthority)–ApprovedToFurnish&ImportCryptographicProducts•n43589.PSPCv4.2andhigher.AustralianGovernmentDepartmentofDefensePointsecProtectorCertifications•CommonCriteriaEAL2(CertificationAwardedApril2005)•Novell“Yes”Certification•CertifiedattheFIPS197level•SubmissionofcryptolibrariesforFIPS140-2•MicrosoftNAPpartnership•CSIAClaimsTested(CCT)MarkforUKGovernment15©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityCheckPointEndpointSecurity——FullDiskEncryption16©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurityMasterBootRecordMandatoryAccessControlModifiedPartitionBootRecordOperatingSystemSystemFiles(PWSwapetc.)WholeDiskEncryptionPointsecPCDataUserDataUnprotectedHighlySensitiveFilesBootRecordsMBRPBRDataOperatingSystemSystemFiles(PWSwapetc.)FileEncryptionMBRPBRDataOperatingSystemSystemFiles(PWSwapetc.)彻底的数据安全保护方案SecuredInformationOpenInformationCheckPoint提供业界最彻底和全面的终端数据安全保护!17©2003-2007CheckPointSoftwareTechnologiesLtd.Allrightsreserved.Proprietaryandconfidential.puresecurity简单的部署模式部署服务器SMS,Tivoli,ZenWorks,Altiris,OneBridge,XTNDConnect,AfariaXcellenet•预定义安全策略•单临时用户•静默安装（无需用户参与）•Wake-on-LAN•IBMRescue&Recovery•PointsecRecoveryMedia(Floppies,CDs,USBKeys)EndUser管理控制台文件服务器部署非常快捷单配置文件&利用现有软件部署策略18©2003-2007CheckPointSof