Using Smartdefense; Overview; Configuring Smartdefense - Nokia IP60 User Manual

Chapter 13
This chapter explains how to use Check Point SmartDefense Services.
This chapter includes the following topics:

Overview .................................................................................................. 269

Configuring SmartDefense ....................................................................... 269

SmartDefense Categories ......................................................................... 274
Resetting SmartDefense to its Defaults .................................................... 308
Overview
The IP60 appliance includes Check Point SmartDefense Services, based on Check Point Application
Intelligence. SmartDefense provides a combination of attack safeguards and attack-blocking tools that
protect your network in the following ways:
Validating compliance to standards
Validating expected usage of protocols (Protocol Anomaly Detection)
Limiting application ability to carry malicious data
Controlling application-layer operations
In addition, SmartDefense aids proper usage of Internet resources, such as FTP, instant messaging, Peer-to-
Peer (P2P) file sharing, file-sharing operations, and File Transfer Protocol (FTP) uploading, among others.
Configuring SmartDefense
You can configure SmartDefense using the following tools:
SmartDefense Wizard. Resets all SmartDefense settings to their defaults, and then creates a
SmartDefense security policy according to your network and security preferences. See Using the
SmartDefense Wizard on page 269.
SmartDefense Tree. Enables you to fine tune individual settings in the SmartDefense policy. You
can use the SmartDefense tree instead of, or in addition to, the wizard. See Using the
SmartDefense Tree on page 273.
Using the SmartDefense Wizard
The SmartDefense Wizard allows you to configure your SmartDefense security policy quickly and easily
through its user-friendly interface.
Chapter 13: Using SmartDefense

Using SmartDefense

Overview
269