{"id":33572,"date":"2019-10-31T21:53:22","date_gmt":"2019-10-31T18:53:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-check-point-getting-started-r80-20-threat-prevention-policy\/"},"modified":"2019-10-31T21:53:22","modified_gmt":"2019-10-31T18:53:22","slug":"11-check-point-getting-started-r80-20-threat-prevention-policy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/11-check-point-getting-started-r80-20-threat-prevention-policy","title":{"rendered":"11. Check Point Getting Started R80.20. Threat Prevention Policy","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"11.
\n
\nWelcome to lesson 11! If you remember, in lesson 7 we mentioned that Check Point has three types of Security Policy. These are: <\/p>\n

    \n
  1. Access Control; <\/li>\n
  2. Threat Prevention;<\/li>\n
  3. Desktop Security.<\/li>\n<\/ol>\n

    \nWe have already covered most of the blades in the Access Control policy, the main task of which is to control traffic or content. The Firewall, Application Control, URL Filtering, and Content Awareness blades reduce the attack surface by blocking unnecessary elements. In this lesson, we will discuss the policy Threat Prevention<\/b>, which aims to inspect the content that has already passed through Access Control.<\/a><\/noindex><\/p>\n

    Threat Prevention Policy<\/h3>\n

    \nThe Threat Prevention policy includes the following blades:<\/p>\n

      \n
    1. IPS<\/b> \u2014 intrusion prevention system;<\/li>\n
    2. Anti-Bot<\/b> \u2014 botnet detection (traffic to C&C servers);<\/li>\n
    3. Anti-Virus<\/b> \u2014 file and URL scanning;<\/li>\n
    4. Threat Emulation<\/b> \u2014 file emulation (sandbox);<\/li>\n
    5. Threat Extraction<\/b> \u2014 cleaning files of active content.<\/li>\n<\/ol>\n

      \nThis topic is VERY extensive and unfortunately our course does not include a detailed examination of each blade. This is already beyond the scope for beginners. Although for many, Threat Prevention might be one of the main topics. However, we will cover the process of applying the Threat Prevention policy. We will also conduct a small, yet very useful and demonstrative test. Below, as usual, is the video lesson.
      \nFor a more detailed understanding of the blades in Threat Prevention, I recommend our previously published courses for review:<\/p>\n