Tag Archives: Check Point Software Technologies Ltd.

Curb Costs of Mobile Device Management

our beautiful site

More people are using iPhones, smart phones, and hand-held computers on the job, and if they aren’t now, they want to in the future. But introducing a whole new class of electronic devices into the office isn’t as easy as placing an order with IT, or letting employees bring their own smart phones to work. Ideally, a business should use the same management systems to host, maintain, and safeguard mobile devices that they use for their existing infrastructure of desktop PCs, according to sources in the mobile device management business. But smart phones and PDAs caught on so quickly the default at many companies has been to adopt entirely different tools for managing mobile devices — if they’re using any tools at all, according to the industry sources. That’s an expensive and possibly dangerous way to operate, according to the sources. It’s expensive because by duplicating efforts, companies are spending more time and money than they need to. In fact, duplication is one reason John Girard, a vice president and analyst with Gartner, the Stamford, Conn., technology researcher, estimates that companies spend close to $2,500 for each iPhone and hand-held device their employees use. It’s also dangerous, because if companies aren’t using the same measures to protect data on mobile devices that they use to secure information on desktop machines, they run the risk of allowing sensitive company information to leak out if the devices are lost or stolen. Security has become an even bigger concern recently because more companies are putting important business applications on smart phones, and because more viruses and other malicious software have begun popping up on the devices, says Shari Freeman, a product management director at Sybase iAnywhere, a division of Sybase that makes mobile device management services for large and small businesses. If companies aren’t thinking about merging the management systems they use for mobile and non-mobile devices now, they’ll have to soon enough, Freeman says. “There’s a general trend for employees to have one or more computing devices, so the need to manage those is increasing,” she says. Streamlining suggestions What can companies do? Find areas of duplication and decide what can be eliminated. According to Girard, companies commonly maintain separate systems for user authentication, firewalls, anti-virus, and software distribution for mobile and desktop devices. Determine which programs might be suitable for both and cut out the extras. Use an integrated management software application. A variety of vendors sell software that can manage all types of workplace devices, from desktops to smart phones. Some applications, such as Sybase iAnywhere’s Afaria software, are product agnostic, working with devices from multiple manufacturers and across a variety of functions. Others work with specific product brands or with select functions. They include Microsoft System Center Mobile Device Manager 2008 which integrates Windows Mobile 6.1 devices with Microsoft computer networks, Nokia Intellisync Device Management, which manages mobile devices from multiple manufacturers and Checkpoint Software Technologies, whose firewall and other security products work across all mobile and non-mobile devices. Make sure all types of devices can be accessed remotely. When it comes to security, put hand helds on the same platform as a desktop device, so IT staff can access them remotely to wipe a hard drive should they be lost or stolen, says Freeman, the Sybase iAnywhere executive. Don’t let employees use their own iPhones, smart phones or PDAs at work. Giving people the option of using their own devices or letting them load their own applications onto computer devices opens a can of worms. For starters, IT won’t know what’s on the device and that’s “potentially destructive to the platform, and you won’t have a record that the help desk can use as to what’s changed,” according to Girard. Plus, if they’re not taking adequate safety precautions and the devices are lost or stolen, your important company documents are at risk. According to Freeman, some companies are putting software on their networks that checks any device trying to log in to retrieve email and blocks anything that’s not pre-approved or doesn’t have the appropriate security safeguards.

Curb Costs of Mobile Device Management

our beautiful site

More people are using iPhones, smart phones, and hand-held computers on the job, and if they aren’t now, they want to in the future. But introducing a whole new class of electronic devices into the office isn’t as easy as placing an order with IT, or letting employees bring their own smart phones to work. Ideally, a business should use the same management systems to host, maintain, and safeguard mobile devices that they use for their existing infrastructure of desktop PCs, according to sources in the mobile device management business. But smart phones and PDAs caught on so quickly the default at many companies has been to adopt entirely different tools for managing mobile devices — if they’re using any tools at all, according to the industry sources. That’s an expensive and possibly dangerous way to operate, according to the sources. It’s expensive because by duplicating efforts, companies are spending more time and money than they need to. In fact, duplication is one reason John Girard, a vice president and analyst with Gartner, the Stamford, Conn., technology researcher, estimates that companies spend close to $2,500 for each iPhone and hand-held device their employees use. It’s also dangerous, because if companies aren’t using the same measures to protect data on mobile devices that they use to secure information on desktop machines, they run the risk of allowing sensitive company information to leak out if the devices are lost or stolen. Security has become an even bigger concern recently because more companies are putting important business applications on smart phones, and because more viruses and other malicious software have begun popping up on the devices, says Shari Freeman, a product management director at Sybase iAnywhere, a division of Sybase that makes mobile device management services for large and small businesses. If companies aren’t thinking about merging the management systems they use for mobile and non-mobile devices now, they’ll have to soon enough, Freeman says. “There’s a general trend for employees to have one or more computing devices, so the need to manage those is increasing,” she says. Streamlining suggestions What can companies do? Find areas of duplication and decide what can be eliminated. According to Girard, companies commonly maintain separate systems for user authentication, firewalls, anti-virus, and software distribution for mobile and desktop devices. Determine which programs might be suitable for both and cut out the extras. Use an integrated management software application. A variety of vendors sell software that can manage all types of workplace devices, from desktops to smart phones. Some applications, such as Sybase iAnywhere’s Afaria software, are product agnostic, working with devices from multiple manufacturers and across a variety of functions. Others work with specific product brands or with select functions. They include Microsoft System Center Mobile Device Manager 2008 which integrates Windows Mobile 6.1 devices with Microsoft computer networks, Nokia Intellisync Device Management, which manages mobile devices from multiple manufacturers and Checkpoint Software Technologies, whose firewall and other security products work across all mobile and non-mobile devices. Make sure all types of devices can be accessed remotely. When it comes to security, put hand helds on the same platform as a desktop device, so IT staff can access them remotely to wipe a hard drive should they be lost or stolen, says Freeman, the Sybase iAnywhere executive. Don’t let employees use their own iPhones, smart phones or PDAs at work. Giving people the option of using their own devices or letting them load their own applications onto computer devices opens a can of worms. For starters, IT won’t know what’s on the device and that’s “potentially destructive to the platform, and you won’t have a record that the help desk can use as to what’s changed,” according to Girard. Plus, if they’re not taking adequate safety precautions and the devices are lost or stolen, your important company documents are at risk. According to Freeman, some companies are putting software on their networks that checks any device trying to log in to retrieve email and blocks anything that’s not pre-approved or doesn’t have the appropriate security safeguards.

Curb Costs of Mobile Device Management

our beautiful site

More people are using iPhones, smart phones, and hand-held computers on the job, and if they aren’t now, they want to in the future. But introducing a whole new class of electronic devices into the office isn’t as easy as placing an order with IT, or letting employees bring their own smart phones to work. Ideally, a business should use the same management systems to host, maintain, and safeguard mobile devices that they use for their existing infrastructure of desktop PCs, according to sources in the mobile device management business. But smart phones and PDAs caught on so quickly the default at many companies has been to adopt entirely different tools for managing mobile devices — if they’re using any tools at all, according to the industry sources. That’s an expensive and possibly dangerous way to operate, according to the sources. It’s expensive because by duplicating efforts, companies are spending more time and money than they need to. In fact, duplication is one reason John Girard, a vice president and analyst with Gartner, the Stamford, Conn., technology researcher, estimates that companies spend close to $2,500 for each iPhone and hand-held device their employees use. It’s also dangerous, because if companies aren’t using the same measures to protect data on mobile devices that they use to secure information on desktop machines, they run the risk of allowing sensitive company information to leak out if the devices are lost or stolen. Security has become an even bigger concern recently because more companies are putting important business applications on smart phones, and because more viruses and other malicious software have begun popping up on the devices, says Shari Freeman, a product management director at Sybase iAnywhere, a division of Sybase that makes mobile device management services for large and small businesses. If companies aren’t thinking about merging the management systems they use for mobile and non-mobile devices now, they’ll have to soon enough, Freeman says. “There’s a general trend for employees to have one or more computing devices, so the need to manage those is increasing,” she says. Streamlining suggestions What can companies do? Find areas of duplication and decide what can be eliminated. According to Girard, companies commonly maintain separate systems for user authentication, firewalls, anti-virus, and software distribution for mobile and desktop devices. Determine which programs might be suitable for both and cut out the extras. Use an integrated management software application. A variety of vendors sell software that can manage all types of workplace devices, from desktops to smart phones. Some applications, such as Sybase iAnywhere’s Afaria software, are product agnostic, working with devices from multiple manufacturers and across a variety of functions. Others work with specific product brands or with select functions. They include Microsoft System Center Mobile Device Manager 2008 which integrates Windows Mobile 6.1 devices with Microsoft computer networks, Nokia Intellisync Device Management, which manages mobile devices from multiple manufacturers and Checkpoint Software Technologies, whose firewall and other security products work across all mobile and non-mobile devices. Make sure all types of devices can be accessed remotely. When it comes to security, put hand helds on the same platform as a desktop device, so IT staff can access them remotely to wipe a hard drive should they be lost or stolen, says Freeman, the Sybase iAnywhere executive. Don’t let employees use their own iPhones, smart phones or PDAs at work. Giving people the option of using their own devices or letting them load their own applications onto computer devices opens a can of worms. For starters, IT won’t know what’s on the device and that’s “potentially destructive to the platform, and you won’t have a record that the help desk can use as to what’s changed,” according to Girard. Plus, if they’re not taking adequate safety precautions and the devices are lost or stolen, your important company documents are at risk. According to Freeman, some companies are putting software on their networks that checks any device trying to log in to retrieve email and blocks anything that’s not pre-approved or doesn’t have the appropriate security safeguards.

Network Defense: Intrusion Prevention Systems

our beautiful site

Here’s a quick network security quiz: When it comes to detecting and stopping IT threats, is it better to position intrusion prevention systems: On the network At particularly important devices on the network All of the above For small businesses, the correct answer is “All of the above,” according to IT security specialists, who say more small businesses are figuring that out and installing IPS accordingly. Network intrusion prevention systems (IPS) are hardware appliances that sit on a company’s intranet to inspect incoming Internet traffic and block anything malicious, be it a worm, virus, or spyware. IPS can also block attacks that originate inside an intranet. IPS complements firewalls, anti-virus software, and other security measures small businesses take to keep their networks safe, says Elisa Lippincott, a spokeswoman for TippingPoint, an Austin, Texas, IPS maker. “We have some customers using our box to protect their firewall,” Lippincott says. By contrast, host IPS works at the device level, doing its job from inside a server, desktop or other machine attached to a network. Although large companies have long relied on IPS for network security, more small businesses are starting to use it. They’re being propelled by technical upgrades that prevent the false alarms that previously dogged the appliances, as well as other improvements, such as behavior-based IPS that looks for traffic patterns that could signal an attack, according to security industry sources. Small and mid-sized businesses are also being pushed to using IPS by industry regulations that require it, such as the PCI Security Standards Council’s Data Security Standard, security measures any company that processes credit card payments have to follow, according to security industry sources. An updated version of the council’s standard is expected to debut this month. “We’ve seen tremendous interest down market driven by PCI” standards, says Michele Perry, chief marketing officer at Sourcefire, a Columbia, Md., network IPS vendor. Depending on the size of the business, small companies either buy and set up IPS themselves, or subscribe to it as an add on from their firewall vendor. They can also purchase it from a regional or national managed security services provider (MSSP) such as or  Clone Systems, or from a business broadband carrier such as Verizon Business. Network IPS and host IPS Which ever way they go, small businesses should consider using both network and host IPS. Network IPS should come first because it casts the widest net, says Greg Young, research vice president with Gartner, the Stamford, Conn., technology researcher. With network IPS, if a virus is detected, the system will block traffic long enough to allow IT staff to make sure anti-virus software is up-to-date on individual workstations, says Lippincott, the TippingPoint spokeswoman. Another advantage of network IPS: since it’s installed on the network it doesn’t slow down individual devices’ computing speed the way host-based IPS could, Lippincott says. However, host IPS is a smart option for machines where critical information is stored, or for devices that have to reside outside a company’s firewall, such as servers used to handle online credit-card transactions. Host IPS is the only way to protect devices like laptops that leave the network, says Sean Martin, a vice president at SkyRecon Systems, a French maker of host IPS solutions. Host IPS also makes sense in situations where a company can’t put new devices on a network but can change what’s on a server, Gartner’s Young says. But put it on the network first, he says. “Threats come through the network first so stop them there first.” IPS prices range from free open source products such as Snort, which has been downloaded 3 million times, to tens of thousands of dollars for applications for mid-sized businesses running multiple Internet traffic-intensive applications for hundreds of users. Or companies can pay by the month or annually for IPS from a MSSP or other third party. Whether it’s network-based or host-based, small businesses need IPS, maybe even more than larger companies, Young says. “Worms don’t discriminate.” Sidebar: Intrusion Prevention Systems for Small Businesses The following vendors offer network or host IPS for small businesses as stand-alone products or part of a multifunction security solution: Check Point Software Technologies — The UTM-1 product line includes firewall, VPN, IPS, gateway antivirus, anti-spam, URL filtering, and IM and peer-to-peer blocking and is marketed primarily to the top end of mid-sized companies and branch offices of large companies. Cisco ASA Advanced Inspection and Prevention Module — An IPS hardware appliance for Cisco routers. According to Gartner’s June 2008 report on multifunction firewalls for small and mid-sized businesses, Cisco has struggled to adapt enterprise-scale hardware to small businesses, but the report says a long-term road map for an improved small business console “is encouraging.” Fortinet — A multifunction firewall appliance with antivirus, anti-spam, URL filtering, and IPS services offered by annual subscription after the first year. Secure Computing SnapGear — A multifunction network security device for small and mid-sized businesses. In late September, Secure Computing agreed to merge with McAfee, which offers the McAfee Network Security Platform. http://www.skyrecon.com/>SkyRecon Systems — Offers host IPS as part of a unified endpoint security solution. SonicWall — The multifunction network device maker offers IPS as an add-on to its TZ series for small and mid-sized businesses. Sourcefire — The commercial version of a pioneering open-source network IPS created by programmer Martin Roesch in 1998. “Snort is the engine and Sourcefire is the whole car put together,” says Perry, Sourcefire’s chief marketing officer. TippingPoint — Offers a behavior-based network IPS hardware appliance. WatchGuard Technologies — Offers a subscription antivirus, IPS service for its X Core E-Series multifunction network security devices for small and mid-sized businesses.

Curb Costs of Mobile Device Management

our beautiful site

More people are using iPhones, smart phones, and hand-held computers on the job, and if they aren’t now, they want to in the future. But introducing a whole new class of electronic devices into the office isn’t as easy as placing an order with IT, or letting employees bring their own smart phones to work. Ideally, a business should use the same management systems to host, maintain, and safeguard mobile devices that they use for their existing infrastructure of desktop PCs, according to sources in the mobile device management business. But smart phones and PDAs caught on so quickly the default at many companies has been to adopt entirely different tools for managing mobile devices — if they’re using any tools at all, according to the industry sources. That’s an expensive and possibly dangerous way to operate, according to the sources. It’s expensive because by duplicating efforts, companies are spending more time and money than they need to. In fact, duplication is one reason John Girard, a vice president and analyst with Gartner, the Stamford, Conn., technology researcher, estimates that companies spend close to $2,500 for each iPhone and hand-held device their employees use. It’s also dangerous, because if companies aren’t using the same measures to protect data on mobile devices that they use to secure information on desktop machines, they run the risk of allowing sensitive company information to leak out if the devices are lost or stolen. Security has become an even bigger concern recently because more companies are putting important business applications on smart phones, and because more viruses and other malicious software have begun popping up on the devices, says Shari Freeman, a product management director at Sybase iAnywhere, a division of Sybase that makes mobile device management services for large and small businesses. If companies aren’t thinking about merging the management systems they use for mobile and non-mobile devices now, they’ll have to soon enough, Freeman says. “There’s a general trend for employees to have one or more computing devices, so the need to manage those is increasing,” she says. Streamlining suggestions What can companies do? Find areas of duplication and decide what can be eliminated. According to Girard, companies commonly maintain separate systems for user authentication, firewalls, anti-virus, and software distribution for mobile and desktop devices. Determine which programs might be suitable for both and cut out the extras. Use an integrated management software application. A variety of vendors sell software that can manage all types of workplace devices, from desktops to smart phones. Some applications, such as Sybase iAnywhere’s Afaria software, are product agnostic, working with devices from multiple manufacturers and across a variety of functions. Others work with specific product brands or with select functions. They include Microsoft System Center Mobile Device Manager 2008 which integrates Windows Mobile 6.1 devices with Microsoft computer networks, Nokia Intellisync Device Management, which manages mobile devices from multiple manufacturers and Checkpoint Software Technologies, whose firewall and other security products work across all mobile and non-mobile devices. Make sure all types of devices can be accessed remotely. When it comes to security, put hand helds on the same platform as a desktop device, so IT staff can access them remotely to wipe a hard drive should they be lost or stolen, says Freeman, the Sybase iAnywhere executive. Don’t let employees use their own iPhones, smart phones or PDAs at work. Giving people the option of using their own devices or letting them load their own applications onto computer devices opens a can of worms. For starters, IT won’t know what’s on the device and that’s “potentially destructive to the platform, and you won’t have a record that the help desk can use as to what’s changed,” according to Girard. Plus, if they’re not taking adequate safety precautions and the devices are lost or stolen, your important company documents are at risk. According to Freeman, some companies are putting software on their networks that checks any device trying to log in to retrieve email and blocks anything that’s not pre-approved or doesn’t have the appropriate security safeguards.

Network Defense: Intrusion Prevention Systems

our beautiful site

Here’s a quick network security quiz: When it comes to detecting and stopping IT threats, is it better to position intrusion prevention systems: On the network At particularly important devices on the network All of the above For small businesses, the correct answer is “All of the above,” according to IT security specialists, who say more small businesses are figuring that out and installing IPS accordingly. Network intrusion prevention systems (IPS) are hardware appliances that sit on a company’s intranet to inspect incoming Internet traffic and block anything malicious, be it a worm, virus, or spyware. IPS can also block attacks that originate inside an intranet. IPS complements firewalls, anti-virus software, and other security measures small businesses take to keep their networks safe, says Elisa Lippincott, a spokeswoman for TippingPoint, an Austin, Texas, IPS maker. “We have some customers using our box to protect their firewall,” Lippincott says. By contrast, host IPS works at the device level, doing its job from inside a server, desktop or other machine attached to a network. Although large companies have long relied on IPS for network security, more small businesses are starting to use it. They’re being propelled by technical upgrades that prevent the false alarms that previously dogged the appliances, as well as other improvements, such as behavior-based IPS that looks for traffic patterns that could signal an attack, according to security industry sources. Small and mid-sized businesses are also being pushed to using IPS by industry regulations that require it, such as the PCI Security Standards Council’s Data Security Standard, security measures any company that processes credit card payments have to follow, according to security industry sources. An updated version of the council’s standard is expected to debut this month. “We’ve seen tremendous interest down market driven by PCI” standards, says Michele Perry, chief marketing officer at Sourcefire, a Columbia, Md., network IPS vendor. Depending on the size of the business, small companies either buy and set up IPS themselves, or subscribe to it as an add on from their firewall vendor. They can also purchase it from a regional or national managed security services provider (MSSP) such as or  Clone Systems, or from a business broadband carrier such as Verizon Business. Network IPS and host IPS Which ever way they go, small businesses should consider using both network and host IPS. Network IPS should come first because it casts the widest net, says Greg Young, research vice president with Gartner, the Stamford, Conn., technology researcher. With network IPS, if a virus is detected, the system will block traffic long enough to allow IT staff to make sure anti-virus software is up-to-date on individual workstations, says Lippincott, the TippingPoint spokeswoman. Another advantage of network IPS: since it’s installed on the network it doesn’t slow down individual devices’ computing speed the way host-based IPS could, Lippincott says. However, host IPS is a smart option for machines where critical information is stored, or for devices that have to reside outside a company’s firewall, such as servers used to handle online credit-card transactions. Host IPS is the only way to protect devices like laptops that leave the network, says Sean Martin, a vice president at SkyRecon Systems, a French maker of host IPS solutions. Host IPS also makes sense in situations where a company can’t put new devices on a network but can change what’s on a server, Gartner’s Young says. But put it on the network first, he says. “Threats come through the network first so stop them there first.” IPS prices range from free open source products such as Snort, which has been downloaded 3 million times, to tens of thousands of dollars for applications for mid-sized businesses running multiple Internet traffic-intensive applications for hundreds of users. Or companies can pay by the month or annually for IPS from a MSSP or other third party. Whether it’s network-based or host-based, small businesses need IPS, maybe even more than larger companies, Young says. “Worms don’t discriminate.” Sidebar: Intrusion Prevention Systems for Small Businesses The following vendors offer network or host IPS for small businesses as stand-alone products or part of a multifunction security solution: Check Point Software Technologies — The UTM-1 product line includes firewall, VPN, IPS, gateway antivirus, anti-spam, URL filtering, and IM and peer-to-peer blocking and is marketed primarily to the top end of mid-sized companies and branch offices of large companies. Cisco ASA Advanced Inspection and Prevention Module — An IPS hardware appliance for Cisco routers. According to Gartner’s June 2008 report on multifunction firewalls for small and mid-sized businesses, Cisco has struggled to adapt enterprise-scale hardware to small businesses, but the report says a long-term road map for an improved small business console “is encouraging.” Fortinet — A multifunction firewall appliance with antivirus, anti-spam, URL filtering, and IPS services offered by annual subscription after the first year. Secure Computing SnapGear — A multifunction network security device for small and mid-sized businesses. In late September, Secure Computing agreed to merge with McAfee, which offers the McAfee Network Security Platform. http://www.skyrecon.com/>SkyRecon Systems — Offers host IPS as part of a unified endpoint security solution. SonicWall — The multifunction network device maker offers IPS as an add-on to its TZ series for small and mid-sized businesses. Sourcefire — The commercial version of a pioneering open-source network IPS created by programmer Martin Roesch in 1998. “Snort is the engine and Sourcefire is the whole car put together,” says Perry, Sourcefire’s chief marketing officer. TippingPoint — Offers a behavior-based network IPS hardware appliance. WatchGuard Technologies — Offers a subscription antivirus, IPS service for its X Core E-Series multifunction network security devices for small and mid-sized businesses.