Check Point UTM-1 Edge Series Industrial Appliances
Robust network security designed for the production floor

Check Point UTM-1 Edge Series Industrial Overview:

VPN-1® UTM Edge™ Industrial is a unified threat management (UTM) appliance that combines antivirus, firewall, intrusion prevention, and VPN technologies to protect networked industrial equipment from unauthorized access and attack. VPN-1 UTM Edge Industrial appliances comply with industrial mechanical specifications for dust, heat, and vibration, maximizing durability in harsh environments.

Your Challenge:

You need to establish secure and scalable communications with the machines on the production floor using traditional data networks. However, you are concerned about the security for critical equipment and need a reliable security gateway that can withstand exposure to varying temperatures and vibrations while stopping attacks.

Our Solution:

VPN-1® UTM Edge™ Industrial unified threat management (UTM) appliances combine antivirus, firewall, intrusion prevention, and VPN technologies to protect networked industrial equipment on the production floor from unauthorized access and attack. VPN-1 UTM Edge Industrial appliances comply with industrial mechanical specifications for dust, heat, and vibration, maximizing durability in harsh environments. And they can be managed by Check Point SMART™ (Security Management Architecture) management solutions, including SmartDefense™ Services, which protect against new threats by providing real-time defense updates and configuration advisories.

Features & Benefits:

Product Features:

• Integrated antivirus, intrusion prevention, firewall, and VPN
• Centralized, large-scale management
• Industrial enclosure with flexible mounting and power input options

Product Benefits:

• Provides robust security and connectivity
• Simplifies deployment and management
• Maximizes durability in extreme industrial environments

Robust Mechanical Design:

The solid-state design of VPN-1 UTM Edge Industrial appliances has no moving parts that could wear out over time, and it has flexible mounting options such as DIN rail, rack, and wall mounting. VPN-1 UTM Edge Industrial appliances also support 110-220V AC, 24V DC, and 5V DC power input, which allow the device to be easily integrated into most industrial environments.

Reliable Security for Industrial Networks:

VPN-1 UTM Edge Industrial appliances secure all common IP services with Check Point-patented Stateful Inspection and Application Intelligence™ technologies. More than 150 predefined applications, services, and protocols are also supported out-of-the-box, including instant messaging, multimedia services, peer-to-peer applications, Voice over Internet Protocol (VoIP), and Web applications. The appliances include 802.1x port-based authentication, enabling organizations to control network access to machines based on endpoint security policy compliance and user access privileges.

High Availability:

VPN-1 UTM Edge Industrial appliances support dual WAN connections to ensure constant connectivity. With support for dialup backup, these gateways can fail over to a standby dialup or cellular network connection by using an external serial or USB modem, in case the primary connection goes down. For complete redundancy, automatic failover is also supported across two VPN-1 UTM Edge Industrial gateways.

Dynamic Networks:

In addition to acting as full-feature firewall routers, VPN‑1 UTM Edge Industrial appliances can operate in transparent bridge mode, allowing a network segment or machine on the production floor to be isolated from other networks within minutes, without reconfiguring IP addresses. By supporting the Spanning Tree Protocol (IEEE 802.1d), multiple VPN-1 UTM Edge Industrial bridge devices can work together and interoperate with Ethernet bridges and switches in a fully redundant topology.

In addition, port- and tag-based VLANs can be defined, enabling the securing of multiple isolated network zones by a single security device.

For complex routed networks, VPN-1 UTM Edge Industrial appliances support Open Shortest Path First (OSPF) dynamic routing. This enables easy deployment across multiple sites and reduces the configuration cost of keeping manufacturing sites current with frequent corporate network changes.

Preemptive Defenses Against Attacks:

VPN-1 UTM Edge Industrial appliances include SmartDefense, Check Point’s integrated intrusion prevention capability, to provide preemptive network- and application-layer security for machines. This ensures that critical equipment is protected from worms, viruses, DoS and DDoS assaults, and other known and unknown attacks. SmartDefense prevents the critical equipment from having to be taken offline or becoming damaged due to worms or viruses entering the network. It also minimizes the need to invest in standalone intrusion prevention systems (IPS) at the edge of the network. With the SmartDefense wizard, administrators can ensure correct configuration simply and effectively.

Integrated Gateway Antivirus for In-depth Defense:

Integrated gateway antivirus protection is included with VPN-1 UTM Edge Industrial appliances to provide an extra layer of defense against worms and viruses before they can enter the network. VPN-1 UTM Edge Industrial appliances provide streaming antivirus protection that can accommodate files of unlimited size without affecting network performance. Machines can be configured to automatically receive antivirus signature updates, along with real-time security updates and configuration advisories from SmartDefense Services.

VPN Connectivity, Communities:

With corporations turning to virtual private networks (VPNs) to link manufacturing sites and offices, VPN-1 UTM Edge Industrial appliances ensure communications privacy with hardware-accelerated IPSec VPN, which offers strong encryption and authentication.

Check Point simplifies VPN setup with VPN communities, enabling organizations to add new sites easily with reduced deployment time and errors. By defining a VPN community, organizations can quickly configure all gateways within a VPN in one step.

Smart Management:

VPN-1 UTM Edge Industrial appliances can be managed via Provider-1®, SmartCenter™ UTM, or SmartCenter Power, which includes SmartLSM™ template-based management for quick, large-scale deployment. These management applications are part of the Check Point SMART security management architecture.

SMART provides unified security architecture for enterprises down to mid-size businesses. It also enables convenient and consistent security definition for the entire network—perimeter, internal, Web, and endpoint security—from a single, centralized management console.

Specifications:

Documentation:

Download the Check Point UTM-1 Edge Industrial Datasheet (PDF).

Support Options:

Check Point UTM-1 Total Security 1-Year Model Support Options:

• Standard Support available at 10% of list per year
• Premium Support available at 15% of list per year

Check Point UTM-1 Total Security 3-Year Model Support Options:

• Standard Support available at 6% of list per year
• Premium Support available at 10% of list per year