The identity awareness blade is also new and is used to link user names to systems, so security policies can be applied to user identities regardless of where they log in from. Setup is also wizard driven and you can define AD authentication and use captive portals for guest workers or visitors.
For monitoring and reporting, Check Point uses a central log server that all other appliances send their data to. For standalone deployments this means the appliance will be handling these duties as well.
The SmartView Monitor provides views of activities in real time with traffic graphs for areas such as the top services, destinations, sources and tunnels. Viewing the system counters allows you to keep an eye on processor and memory usage, firewall activity, packet size distributions and so on.
Policy activity for each security blade can be viewed from SmartEvent. The latest v75.20 version of SmartConsole provides a freshly designed interface which includes real time views, graphs and timelines so you can easily see threat trends and anomalies.
You can't view activity for the anti-spam blade in SmartEvent and will need to use the SmartReporter tool for this. SmartReporter provides an extensive selection of reports which can have a range of filters applied and be scheduled to run regularly and emailed to selected recipients.
We did come across some problems though, as the only available anti-spam report is hidden in the Express report section and can only look back over the previous 14 days. We also found some of the URL filtering reports wouldn't generate any data and suspect they still only work with Check Point's older legacy blade.
Check Point's new 2210 appliance has a lot of sophisticated security features for the price. They're not the easiest to deploy and manage, but Check Point's software blades are a great idea as they allow you to customise the appliance precisely to your requirements.
Verdict
Check Point’s SmartConsole management and monitoring tools are geared up towards handling multiple appliances and this makes the 2210 best suited to remote office deployment or offered as a managed security solution. SMBs will find the appliance offers a very impressive range of features that perform well for the price, but as a standalone product it’s not the easiest to deploy and manage.
Chassis: Desktop Memory: 2GB RAM Network: 6 x Gigabit Ethernet Storage: 250GB SATA hard disk Ports: 2 x USB2, RJ-45 console Management: Web browser, CLI, SmartConsole Software: SmartDashboard, SmartEvent, SmartProvisioning, SmartReporter, SmartUpdate, SmartView Monitor, SmartView Tracker
-
‘Give me three years, I’ll have hopefully enough AI savvy people’: Palo Alto Networks CEO Nikesh Arora says it’s up to workers to adapt to AI – and that includes leadershipNews The Palo Alto Networks chief said the company doesn’t employ punitive measures when it comes to embracing AI, but it is pushing for a more ‘savvy’ workforce
-
The agents you use to beef up cybersecurity could be turned against you – ‘Friendly Fire’ attacks can manipulate OpenAI and Anthropic models into running malicious codeNews Research shows agents can be fooled into executing malicious code while performing security reviews of third-party software
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
