What's New in NGX

Check Point releases a major upgrade to its core FireWall-l/ virtual private network-1 (VPN-1) product every two or three years and version NGX is the latest in this line. The core product in the new version is called “VPN-1 Pro.” Although the upgrade from 4.0/4.1 to next generation (NG) was a complete revamping of the product, the subsequent upgrades to versions NG AI and now to NGX are more modest in scope. SmartPortal is a welcome addition, allowing administrators to extend browser-based connectivity to the SmartCenter Server. Users without the SmartConsole graphical user interface (GUI) clients and administrators not at their primary workstations can connect through HTTPS. SmartDefense and Web Intelligence have received moderate upgrades in NGX. This is still a fascinating set of tools for the network security administrator to understand and configure against all sorts of higher-level attacks. Dynamic Routing adds some risk and complexity and is now available to those larger organizations who wish to fully integrate the underlying router in their Check Point firewalls into their existing dynamic routing configuration. SecurePlatform continues to evolve and improve. The product line is now split, with the addition of SecurePlatform Pro that offers Dynamic Routing and support for RADIUS authentication for firewall administrators. VPN-1 Edge devices are simpler and cheaper than full-blown VPN-1 Pro installations and are best for telecommuters (by choosing the S series) and branch offices (by choosing the X series). Network and Host Object Cloning is a small but useful enhancement to the SmartDashboard user interface.