With Check Point Identity Awareness, firewall policies can be applied based on the properties of a particular identity. This option—together with the many details that macmon NAC provides—offers completely new possibilities for effective network segmentation that go beyond the classic use of a gateway firewall. In the past, firewall rules were very “fuzzy” with respect to the different network segments, and it was too costly and time-consuming to maintain separate rules for each endpoint. But now, with the seamless macmon NAC integration, these granular rules are main-tained completely automatically.
The integration is designed to take into account all common workflows and the endpoints’ life cycles — right out of the box. Endpoints are logged in and out when entering and leaving the network. Long runtimes, changes due to relocation or changes in properties such as the IP address, name or other details automatically cause the endpoint’s data to be updated. Sessions of endpoints that are always online, such as VoIP telephones or printers, are continuously monitored and documented.
If an endpoint logs out of the company network or carries out an attack such as ARP spoofing, the session is terminated in Identity Awareness. This prevents rights attached to the IP address from being transferred to a new endpoint in the company network. In Check Point Identity Awareness, the always up-to-date information on all endpoints allows you to use very granular access rules with dynamic group members.
Christian Bücker, Managing Director of macmon secure GmbH, reports: “What’s special about the macmon NAC integration with Check Point’s product is the session lifetime concept, which ensures that the endpoint’s entire life cycle within the company network is covered—from login to logout and everything in between. Everything is tracked in Check Point Identity Awareness. This seamless product integration with our new technological partner significantly increases network security, which provides significant added value for our shared customers.”
Dietmar Schnabel, Regional Director Central Europe at Check Point Soft-ware Technologies GmbH adds: “The integration with macmon’s BSI-certi-fied NAC solution provides reliable network protection against unauthorized access — a real benefit to companies. The key feature is endpoint visibility. Companies need first-class tools to help them meet the requirements of mod-ern IT security. Our partnership with macmon secure GmbH enables us to meet this demand.”
About Check Point Software Technologies GmbH:
Check Point Software Technologies GmbH (www.checkpoint.com) is a leading provider of cyber security solutions for public organizations and businesses worldwide. Their solutions protect customers from cyber attacks with an in-dustry-best detection rate for malware, ransomware and other types of at-tacks. Check Point offers a multi-tiered security architecture that protects en-terprise information in cloud environments, networks and on mobile devices, as well as the most comprehensive and intuitive “single point of control” se-curity management system. Check Point protects over 100,000 businesses of various sizes.
The experienced IT experts have been offering manufacturer-independent, BSI-certified solutions since 2003. These solutions protect heterogeneous networks from unauthorized access through immediate network transparency. macmon is quick and easy to implement and offers considerable added value for network security. macmon can be integrated with other security solutions from international technology partners, such as endpoint security or firewall. Customers obtain an immediate network overview with graphical reports and topology. In addition, macmon offers customers and partners an extensive training program and 24/7 support from Germany. This makes macmon a key IT component in the areas of digitization, BYOD or intent-based networking.
For further information, visit: [url=http://www.macmon.eu]www.macmon.eu[/url]
macmon secure GmbH
Alte Jakobstr. 79-80
Telefon: +49 (30) 2325777-0
Telefax: +49 (30) 2325777-200
Telefon: +49 (30) 2325777-0