Integration and Configuration of CVP/UFP

This chapter describes the methods of implementing content-level inspection, specifically scanning e-mail for viruses. It also highlights other Content Vectoring Protocol (CVP)/Uniform Filtering Protocol (UFP)-based Operations security (OPSEC) products. To combat the threat of virus infection, Check Point Firewall-1 provides content level filtering via the CVP that allows utilizing any OPSEC-certified product to perform such tasks as virus scanning, e-mail content screening, and U1KL filtering via the Uniform Filtering Protocol (UFP). These vendors also develop tools that can be used through CVP to enhance the ability of firewall to combat content-related threats. Although any thorough security policy should include virus protection at the desktop level, it is important to scan incoming e-mail for viruses to prevent malicious code from reaching the personal computer. The combination of these two levels of virus scanning further reduces the chances of a virus infection to network. Check Point's Content Vectoring Protocol is a powerful tool that allows scanning e-mail for viruses to prevent malicious code from ever arriving in a user's mailbox. Due to the flexible nature of CVP, OPSEC vendors are free to develop applications to solve any number of problems related to content.