Used in conjunction with the vendor's VPN-1 appliances, the Check Point Integrity SecureClient combines the Check Point VPN-1 SecureClient with Zone Labs' Integrity software in an integrated, single install/configuration package for Windows (XP Pro, 2000 Pro SP4, Server 2003) endpoints. The three-pronged security approach of the client software provides VPN connectivity from remote workstations to VPN-1 enabled corporate networks; malware protection at the endpoint level (blocking endpoint worms or viruses from using trusted applications to send confidential data to the Internet) via a stateful inspection firewall; and policy enforcement capabilities.

The policy enforcement capabilities in particular work in conjunction with the corporate VPN-1 Gateway. Called "Cooperative Enforcement," the technology allows for the identification--and approval--of the endpoint's configuration before allowing it to successfully connect to the corporate network. According to Check Point literature, rules for endpoint approval can be written without requiring complex scripting, and can include such endpoint checks as ensuring the endpoint is running an updated anti-virus scanner; the O/S is properly patched; has the latest versions of critical applications (such as Web browsers); contains appropriate registry keys, etc. The remote machine can also be scanned for the presence of prohibited software such as P2P offerings and denied access if so configured. When an endpoint is denied access because of policy violation, they can be directed to customizable resources allowing them to update their system to a compliant state for entry.

Check Point Integrity SecureClient is available now. Volume discounting is available; representative pricing is $56 per seat for a management and enforcement software server license and 1,000 endpoint licenses.

Contact Check Point Software Technologies for further information.