You have many kinds of users who need remote access to your information resources. While you can install and update client software for employees, you have no control at all over the PCs and laptops of external users like partners. That presents a big security problem. The solution?
Let them connect through a Web browser. Connectra provides Web connectivity with unmatched security. Connectra has Web Intelligence to rapidly inspect all Web traffic and protect your entire Web environment of operating systems, networks, and servers.
Benefits
- Increases mobility and productivity of remote users
- Lowers remote access support costs by providing access through any Web browser
- Ensures Web server and application security from insecure endpoints
- Stops ID, password, and data theft
- Simplifies extranet deployment
Connectra as Problem Solver
Connectra combines both Web connectivity and security in a single platform to allow you to deploy SSL VPNs safely and confidently. Integrating SSL VPN with Check Point's Application Intelligence, Web Intelligence, and SMART (Security Management Architecture) technology, Connectra provides Web connectivity with unmatched security.
Features
As a unified Web Security Gateway, Connectra is the only product to make SSL VPN secure, providing:
- Secure Web-Based Connectivity
- Integrated Server Security
- Adaptive Endpoint Security
- One-Click Remote SSL Access
Secure Web-Based Connectivity
Connectra is a gateway between end users and internal resources, enabling SSL connectivity to these resources through end user Web browsers. Through an integrated Web Portal, users can access Web applications and resources, file sharing servers, and email.
For client/server applications, Connectra provides SSL Network Extender for secure network-level connectivity over the Web. SSL Network Extender is a Web plug-in that tunnels traffic from endpoint applications over SSL. It supports any IP-based application, including TCP and UDP, without requiring complex configuration to support each application. And because SSL Extender is capable of tunneling any IP application, it supports applications such as FTP and VoIP that cause unique challenges because of their use of dynamic ports.
Integrated Server Security
Connectra provides pro-active protections for internal servers and applications exposed to potentially insecure endpoints. The integrated Web Intelligence provides protections for Web-based attacks traveling over SSL, such as directory traversal, SQL injection, and worms embedded in HTTP. For endpoints using network-level connectivity over SSL, Connectra provides SmartDefense to defend against network-based attacks. And Connectra comes with a one-year subscription to SmartDefense Updates to ensure protections are up-to-date.
Adaptive Endpoint Security
Connectra delivers a comprehensive set of endpoint security features to accommodate a diverse set of connectivity scenarios. With this integrated capability, Connectra can adapt the access rights of the end user based on the trust and security of the endpoint.
Connectra provides clientless endpoint inspection capabilities that check for malicious process running on the endpoint. By disabling spyware and enforcing baseline security requirements before it grants remote access, Connectra stops ID and password theft, and prevents data loss.
An organization's resources have varying levels of sensitivity. With Connectra, access to these resources can be restricted based on the trust level of the endpoint. For example, one set of resources can be defined with a "high" sensitivity level and access only allowed if a remote endpoint provides strong authentication such as token-based authentication.
One-Click Remote SSL Access
One-click Remote SSL Access delivers a simple structure and process for creating extranet remote access. Through the integrated Web portal in Connectra, extranet users have Web-based access to shareable resources. By defining an extranet group and associating applications, servers, and other resources, Connectra will automatically build a unique Web portal for each extranet partner. This capability provides a much simpler solution than configuring individual servers for remote access or building special extranet zones on the network.
Performance Options
Connectra is designed specifically for SSL remote access and is available in three models to support the performance needs of different remote access deployments. With the high level of flexibility, you can map performance targets to user requirements, budget demands, and business objectives.
Bottom Line
By combining both Web connectivity and security in a single platform, Connectra allows organizations to deploy SSL VPNs safely and securely.
More Information
• Frequently Asked Questions
• SSL Network Extender
• Web Intelligence
• IPSec and SSL VPN Deployment Considerations [PDF]
