Check Point road map 2011 - CPUG: The Check Point User Group · 3D Security Enforcement! Policy! People! Wednesday, September 14, 2011 CPUG 2011 Chur Switzerland (c) Valeri Loukine

CPUG 2011 Chur Switzerland (c) Valeri Loukine 2011

Check Point Road Map

What do we know about it?

Wednesday, September 14, 2011

(c) Valeri Loukine 2011CPUG 2011 Chur Switzerland

About authorValeri Loukine

• CCMA 0019

• Ex-Check Point

• Senior Security Consultant - Dimension Data

• Email: [email protected]

• Blog: http://checkpoint-master-architect.blogspot.com/

2



To discuss

• Last year promises

• New and already known products

• Appliances

• What else?

3


CPUG 2011 Chur Switzerland (c) Valeri Loukine 2011CPUG 2011 Chur Switzerland (c) Valeri Loukine 2011

Before we even start



Check Point Road Map

• Where to get it?



Ideas

• Check Point site

• CPX

• Open press

• Local office



The answer is...

Nowhere



Because

• Check Point site has nothing

• CPX materials - Road map is not published

• Open press - Zero information

• Local office - They do not know



Remember 2010?



Promises

• Identity Control

• Application Control

• Gaia



Products

• ABRA

• DLP



We talk today

about promises keptand future to come



3D Security

Enforcement!

Policy!

People!



3D Security

• Application Control

• Identity Control Awareness

• Visibility



Application Control

Delivered



Identity Control

Delivered as Awareness



Also part of3D security

• ABRA

• DLP

• Mobile Access Blade

17



Missing features

SSL inspection



SSL inspection

• Comes with R75.20

• Covers IPS, Application Control and DLP

• No SFTP for DLP



More on R75.20

• URL Filtering unified with Application Conrol

• DLP performance boost

• DLP Exchange client agent

• Multi Certificate for Mobile Access Blade (thanks, Gil!!!)



More on Identity Awareness

• IPSO

• API for all blades including IPS



Visibility and control

• Event Analysis

• SmartWorkflow

• Provisioning



Visibility and control

• Do you see any progress?

• I do not



Gaia



CPX 2010

25



Actual situation

• Nothing ready is out yet.

• 1st and 2nd stages are merged

• Rumors - to be expected soon (EA September, delivery - end of the year)



VSX



No progress this year

• Still VSX R67 - R65 based

• Lot’s of missing functionality



Why?

• VSX to be based on Gaia

• VSX to be part of the maintrain

• VSX to be based on the next version (R76? R80?)



Dorit Dor on CPX

• VSX R67 with IPv6 Q3 2011

• VSX maintrain 2012 (no IPv6)

• VSX maintrain + IPv6 middle 2012



Appliances



HW rumors

• Check Point to expand appliance lines

• SG80-like with WiFi (End of Safe@?)

• Would it be Highest End?



Final quote

• Gartner 2010:

Check Point remains secretive about its road map and longer- term strategies, sometimes leaving its customers guessing and vulnerable to replacement by competitors.

33

Wednesday, September 14, 2011CPUG 2010 Chur SwitzerlandCPUG 2010 Chur Switzerland

Questions And Answers


CPUG 2010 Chur SwitzerlandCPUG 2010 Chur Switzerland

Thank You For Your Time!


Documents

Check Point road map 2011 - CPUG: The Check Point User Group · 3D Security Enforcement! Policy! People! Wednesday, September 14, 2011 CPUG 2011 Chur Switzerland (c) Valeri Loukine