Check Point Introduces New Adaptive Security Solution for Converged Carrier Communications.

Check Point VPN-1 MASS Solution Supports Carrier-Class Convergence Through UMA and I-WLAN

REDWOOD CITY, Calif. -- Check Point[R] Software Technologies Ltd. (Nasdaq:CHKP), the worldwide leader in securing the Internet, today announced VPN-1 MASS, a new solution designed to secure the converged carrier IP and voice infrastructures.

Check Point VPN-1 MASS (Multi-Access Security Solution) delivers secure fixed-mobile convergence (FMC), enabling carriers to deliver advanced communication products and services to customers without compromising the security of the carrier network. With support for 3G Wireless Interworking (3G I-WLAN) and Unlicensed Mobile Access (UMA, also known as Generic Access Network), VPN-1 MASS scales to provide remote access for up to 100,000 secure voice channels and massive data connections.

The dual-mode technology used for FMC enables mobile telephones to switch between cellular signals and WLAN networks to provide end-users with the best quality of service and connection regardless of location, dramatically increasing the coverage area and services carriers can offer. Carriers providing always-available communications using dual-mode technologies expose their networks to common Internet attacks that can compromise their systems, reducing availability and damaging their reputation. VPN-1 MASS is an open solution that enables carriers and infrastructure providers to integrate proven network security with fixed-mobile convergence platforms to ensure information privacy and uninterrupted service.

VPN-1 MASS provides secure roaming between cellular and WLAN networks using Check Point's market leading IPSec VPN technology - including the latest standards such as IKEv2 and EAP-SIM. It encrypts data and voice communications traveling through an IP network to ensure privacy and integrity. As an integral part of the solution, Check Point's flagship FireWall-1 technologies provide a proven defense against Internet attacks as well as shielding the carrier network from infected clients.

"Technology moves at a rapid pace and the convergence of fixed and mobile platforms is on the horizon," said Dave Burton, director of product marketing, Check Point Software Technologies. "The benefits to end-users with this impending convergence are tremendous but the potential benefits must also include measures to protect against potential malicious activities targeting this new technology if UMA is to be widely adopted. Check Point VPN-1 MASS enables carriers to deliver the benefits promised, while also providing robust security from a trusted security brand."

Features found in Check Point VPN-1 MASS include:

* Scalable IPSec VPN Tunnel Termination: Prepares infrastructure for full IMS implementation and supports the latest IPSec standards including IKEv2.

* Carrier-class protection of the converged network: Ensures carrier network stays secure against network attacks to protect the reputation of the carrier against billing fraud.

* Comprehensive SIP support for current VoIP and future IMS applications: Integrates into multiple vendor VoIP gear and eliminates vendor lock-in.

* Integrates with UMA and I-WLAN architectures: Ensures maximum flexibility to support today's GSM/UMTS networks and the shift to UMA and I-WLAN.

* Easy integration with service provider authentication and billing: Reduces complexity of deployment and delivers transparent security.

"The Check Point VPN-1 MASS offering provides best in class security and our support for it on the Nokia IP560 security platform complements the Nokia vision of connecting people using any device, over any network, to any resource," said David Dorosin, director of marketing for Security and Mobile Connectivity, Nokia. "As companies continue to adopt enterprise mobility in greater numbers, moving from ad hoc mobility deployments to integrated, standards-based solutions, Nokia is committed to providing secure access without compromise - for end users, for enterprises, and for service providers."

Availability

Check Point's VPN-1 MASS product is available immediately as a software solution or appliance. For more information on Check Point VPN-1 product line, please visit http://www.checkpoint.com.

About Check Point Software Technologies Ltd.

Check Point Software Technologies Ltd. (www.checkpoint.com) is a leader in securing the Internet. It is a market leader in the worldwide enterprise firewall, personal firewall and VPN markets. Through its NGX platform, the company delivers a unified security architecture for a broad range of perimeter, internal, Web, and endpoint security solutions that protect business communications and resources for corporate networks and applications, remote employees, branch offices and partner extranets. The company's ZoneAlarm product line is the highest rated personal computer security suite, comprised of award-winning endpoint security solutions that protect millions of PCs from hackers, spyware and data theft. Extending the power of the Check Point solution is its Open Platform for Security (OPSEC), the industry's framework and alliance for integration and interoperability with "best-of-breed" solutions from over 350 leading companies. Check Point solutions are sold, integrated and serviced by a network of more than 2,200 Check Point partners in 88 countries and its customers include 100 percent of Fortune 100 companies and tens of thousands of businesses and organizations of all sizes.

[c]2003-2007 Check Point Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor, Application Intelligence, Check Point Express, Check Point Express CI, the Check Point logo, ClusterXL, ConnectControl, Connectra, Connectra Accelerator Card, Cooperative Enforcement, Cooperative Security Alliance, CoSa, DefenseNet, Eventia, Eventia Analyzer, Eventia Reporter, Eventia Suite, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, IMsecure, INSPECT, INSPECT XL, Integrity, Integrity Clientless Security, Integrity SecureClient, InterSpect, IQ Engine, MailSafe, NG, NGX, Open Security Extension, OPSEC, OSFirewall, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureClient Mobile, SecureKnowledge, SecurePlatform, SecurePlatform Pro, SecuRemote, SecureServer, SecureUpdate, SecureXL, SecureXL Turbocard, SiteManager-1, SmartCenter, SmartCenter Express, SmartCenter Power, SmartCenter Pro, SmartCenter UTM, SmartConsole, SmartDashboard, SmartDefense, SmartDefense Advisor, Smarter Security, SmartLSM, SmartMap, SmartPortal, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, Stateful Clustering, TrueVector, Turbocard, UAM, UserAuthority, User-to-Address Mapping, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Express, VPN-1 Express CI, VPN-1 Power, VPN-1 Power VSX, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 UTM, VPN-1 UTM Edge, VPN-1 VSX, Web Intelligence, ZoneAlarm, ZoneAlarm Anti-Spyware, ZoneAlarm Antivirus, ZoneAlarm Internet Security Suite, ZoneAlarm Pro, ZoneAlarm Secure Wireless Router, Zone Labs, and the Zone Labs logo are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. ZoneAlarm is a Check Point Software Technologies, Inc. Company. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726, 6,496,935, 6,873,988, and 6,850,943 and may be protected by other U.S. Patents, foreign patents, or pending applications.