FORM 20-F - Check Point

endpoint devices, such as personal computers. Endpoint security includes personal-firewall, Network Access
Control (NAC), program control, antivirus, anti-spyware, data security, URL filtering, anti-spam and remote
access features that have been specifically designed for remote personal computing devices.
Lost or stolen computers can end up in the wrong hands, intentionally or unintentionally. Companies of
all sizes and government agencies face the consequences of losing sensitive data from lost laptop computers,
removable media or plug-and-play storage devices. This drives the need for a complete data protection solution
that secures data on all common platforms, deploys easily, scales to any size organization and meets strict
compliance requirements related to privacy laws and regulations. For example, a number of publicized cases
involving large corporations losing unencrypted laptops and exposing millions of customers and employees to
potential identity theft have prompted a surge in data protection legislation and regulatory compliance laws
worldwide. The relative ease with which data may be lost makes data security a major concern for organizations.
To mitigate this risk, organizations are looking to extend security beyond the network infrastructure, to the data
itself.
The primary means of protecting data that resides on endpoints are: full-disk encryption of the hard drive
with access control (rendering the data useless to unauthorized parties), media encryption and port protection (to
prevent unauthorized copying of sensitive data to USB flash drives, writable CDs and DVDs, etc.) and mobile
device and memory card data encryption (to prevent sensitive data from being accessed on lost or stolen PDAs
and smartphones).
Products and Services
Our products, services and technologies provide the following protection:
1. Network and gateway security:
Our wide range of network security gateways allows our customers to implement their security
policies on network traffic between internal networks and the Internet as well as between internal networks
and private networks used with partners. These gateways are available as either software solutions or
integrated into complete solutions including hardware and can scale to meet the requirements of
organizations of many sizes. Versions of our software include the following technologies to secure traffic:
� Firewall – Inspects traffic as it passes through security gateways, classifying it based on various criteria
such as source and destination of connection, protocol, services and application used. This provides a
means to allow, block and log each connection based on the organization’s security policy. Our firewall
technology is based on several key differentiated technologies, including:
o Patented Stateful Inspection technology that allows flexible and programmable classification
of network traffic.
o Application Intelligence technology that contains various means to detect the correct use of
application protocols and can block attacks that attempt to utilize such exploits in specific
applications.
o Network Address Translation – Allows hiding of internal addresses so internal users are not
exposed to external threats, as well as connecting private networks that use “generic”
addresses using publicly defined external addresses.
o Specific technologies to prevent denial-of-service (DoS) attacks on networks. These attacks
include various ways of overloading applications and networks in multiple requests that try
to slow and stop their response.
22