CheckPoint Software Unveils New Version of Market-leading FireWall-1; Integrates User-based Authentication and Anti-Spoofing; Provides Built-in Security for Over 100 Internet Protocols and Services.

LAS VEGAS--(BUSINESS WIRE)--March 28, 1995--Networld + Interop/CheckPoint Software Technologies, Ltd., the leading vendor of Internet security products, today announced CheckPoint FireWall-1(tm) version 1.2, a significant enhancement to the award-winning Internet security solution. The new release reinforces FireWall-1's position as the most comprehensive and reliable network security solution available, with integrated user-based authentication and anti-spoofing support, integration with popular enterprise management tools, and built-in support for over 100 Internet protocols, services, and applications. FireWall-1 version 1.2 enables corporations to protect their most important corporate asset, their information, from unauthorized access, tampering or theft, and from "IP spoofing" techniques used by computer hackers, while allowing employees to utilize the Internet's vast resources, transparently.

"CheckPoint FireWall-1 version 1.2 extends our lead over other Internet security solutions," said Gil Shwed, president and chief executive officer of CheckPoint Software Technologies, Ltd. "In less than a year since its introduction, FireWall-1 has become the best-selling firewall solution and is fast emerging as the industry standard for Internet security. With FireWall-1 version 1.2, the choice is even clearer: we've raised the bar for Internet security solutions."

With FireWall-1 version 1.2, users can be authenticated using one-time password schemes, such as Security Dynamics' SecurID(tm) as well as soft token authentication, implemented by the S/key public domain software, assuring that users gaining access to an enterprise network actually are who they claim to be. User-based authentication is fully integrated into FireWall-1's intuitive graphical user interface, allowing the administrator to control access by user, location, time, application, and even specific commands. Users are easily defined by profile templates, which can be combined into groups for rapid, flexible configuration. Each communication attempt is authenticated at the application level and can be logged for tracking and review. Unwanted attempts generate automatic alerts.

Sophisticated and Secure Yet Simple to Manage

FireWall-1's GUI simplifies the previously complex process of developing a company's enterprise-wide security policy and implements a "prohibited unless expressly permitted" rules-based policy. With FireWall-1, an entire enterprise's network security policy can be created, monitored and maintained from a single workstation. The addition of SNMP v2 support in FireWall-1 version 1.2 allows enterprise-wide management of multiple FireWall-1 installations from the most popular enterprise management tools, including SunSoft's SunNet Manager and Hewlett-Packard's OpenView.

Unique, Patent-Pending Technology

FireWall-1 enables an organization to access the Internet's vast resources, transparently, without compromising internal network security. While other firewall solutions, such as application gateways, proxy servers, routers and packet filters force organizations to choose between transparent Internet connectivity and security, FireWall-1 eliminates that trade-off by implementing a unique, patent-pending "multi-layer packet inspection" technology. Called "multi-layer" because it inspects data packets at all six logical layers of the ISO Seven Layer Model, the protocol-independent technology ensures security for over 100 Internet protocols, services, and applications automatically, including TCP, IP, UDP, RPC, FTP, Web browsers such as NCSA Mosaic and Netscape Navigator(tm), Gopher, Archie, NFS, DNS, X11 and Mbone, all without degrading network performance.

FireWall-1 inspects each communication attempt and promptly blocks any unauthorized access. It inspects each data packet twice: once at entry to the network and once at exit. Using a programmable filter module to inspect each packet, FireWall-1 accesses the data, extracts it, and stores it in dynamic tables, keeping updated state and context information. The extensibility of the technology makes adding current or future Internet protocols quick and easy.

Pricing and Availability

CheckPoint FireWall-1 version 1.2 will be available on May 1, 1995. The base system price is U.S. $4,990 for small networks (up to 50 nodes) and U.S. $18,900 for larger networks. Upgrades to the new version are free for users of FireWall-1 version 1.0 who have purchased a technical support contract. FireWall-1 is available through CheckPoint Software's worldwide distribution network including CompuServe, Forval Creative, Inc., I-Net, Integralis, Internet Security Corporation (ISC), The Qualix Group, and SunSoft, Inc. and its authorized resellers and distributors including Access Graphics, Merisel, and Sun Microsystems Computer Corporation (SMCC).

FireWall-1 version 1.2 supports SunOS 4.1.3 and Solaris(r) 2.4 for SPARC and Intel 80x86 and Pentium-based systems. FireWall-1 version 1.2 also automatically generates router access lists for Bay Networks' Wellfleet version 8 and Cisco version 9 and 10.

About CheckPoint

CheckPoint Software Technologies, Ltd. is the leading vendor of Internet security software. The company is committed to providing advanced, market-driven network security products and technologies. CheckPoint's award-winning FireWall-1 product is the emerging standard for enterprise-wide network security. FireWall-1 provides full Internet connectivity with security for hundreds of Fortune 1000 and smaller companies and organizations worldwide. CheckPoint's products are sold through distributors, resellers and Internet service providers worldwide. Based in Ramat-Gan, Israel, the company is privately-held and has offices in Lexington, Mass. and San Francisco, Calif. For more information call [phone], e-mail [e-mail] or on the WWW http://www.checkpoint.com.

-0-

Note to Editors: (c) 1995 CheckPoint Software Technologies, Ltd. CheckPoint FireWall-1 is a trademark of CheckPoint Software Technologies, Ltd. Sun Microsystems, SunSoft and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. SecurID is a trademark of Security Dynamics Technologies Inc. Navigator is a trademark of Netscape Communications Corporation. All other product names mentioned herein are trademarks of their respective owners.

CONTACT: Copithorne & Bellows

Emily Cohen or Jim Calhoun, 415/975-2225 or 415/975-2238