Protocol/Application Support | 500 plus protocol types |
VoIP Protection | SIP, H.323, MGCP and SIP with NAT support |
Network Address Translation | Static/hide NAT support with manual or automatic rules |
DHCP Gateways | Security gateways can have dynamic IP addresses |
VLAN | Up to 256 VLANs per interface |
Link Aggregation | 802.3ad passive and 802.3ad active |
Bridge Mode / Transparent Mode | Inspect traffic without interfering with the original IP routing |
Extensive Set of Policy Objects | Individual node, networks, groups, dynamic objects |
IP Versions | IPv4 and IPv6 |
Fail-Safe Protections | Default filter provides protection during boot time and prior to initial policy |
Secure Internet Communications (SIC) | Certificate-based secure communications channel among all Check Point distributed components belonging to a single management domain |
Authentication |
Multiple Authentication Methods | User authentication, client authentication, session authentication |
Local Users | Local database user store included |
RADIUS and RADIUS Groups | Multiple servers and MS-CHAPv2, MS-PAP methods |
LDAP and LDAP Groups | Microsoft Active Directory, Novell Directory Server, Red Hat Directory Server, OPSEC certified LDAP server |
TACACS+ | Supported |
RSA SecurID | Supported |
X.509 Certificates | Supported using the included Certificate Authority or third party CAs |
Customizable Authentication Messages | Supported |