SofaWare - News and Updates

We are pleased to announce the release of Embedded NGX 8.0 (GA).

2008-11-19T12:55:00.000+02:00

Embedded NGX 8.0 incorporates a host of new and improved features, including:

 VStream Antispam
 Firewall Monitor
 Enhanced Policy Editors
 Built-in 802.1x and WPA Authenticator
 Built-in RS-232 Terminal Server
 Built-in DNS Server
 BGP Dynamic Routing
 Enhanced SNMP MIB
 New Status Dashboard

You must have a valid software subscription to be eligible to receive the update.

Sagy Kratu
Technical Support Team Manager

We are pleased to announce the release of Embedded NGX 8.0 (GA).

2008-11-19T12:05:00.000+02:00

Embedded NGX 8.0.x Early Availability (EA)

2008-03-18T14:19:00.000+02:00

We are pleased to announce the release of Embedded NGX 8.0.x under the Early Availability Program.
This release is packed with many new features, including:

* VStream Antispam
* Firewall Monitor
* Enhanced Policy Editors
* Built-in 802.1x and WPA Authenticator
* Built-in RS-232 Terminal Server
* Built-in DNS Server
* BGP Dynamic Routing
* Enhanced SNMP MIB
* New Status Dashboard

And more...

Regards
Sofaware technical support team

We are pleased to announce the release of Embedded NGX 7.5.48.

2007-12-24T11:31:00.000+02:00

Issues resolved

Firewall and Smart Defense
• Resolved issue: In certain cases, the appliance may restart when processing SIP IP
telephony packets.
Vstream Anti-Virus
• Resolved issue: Specific EXE files are scanned slowly.
Management and settings
• Resolved issue: When upgrading from firmware, 7.0 VPN sites and SNMP settings
revert to disabled.
• Resolved issue: A potential security vulnerability corrected in the SNMP server.

You must have a valid software subscription to be eligible to receive the update.

Please click the title for the release notes.

We are pleased to announce the release of Embedded NGX 7.5 (GA).

2007-11-25T11:30:00.000+02:00

Embedded NGX 7.5 incorporates a host of new and improved features, including:

- Internet Connection Load Balancing
- Advanced Firewall Rules
- Advanced NAT Rules
- Reusable Network Service Objects
- Service-Based Routing
- Web Rules
- Enhanced SIP VoIP Support

You must have a valid software subscription to be eligible to receive the update.

We are pleased to announce availability of the Check Point Embedded NGX 7.5 documentation.

2007-08-22T11:12:00.000+03:00

Safe@Office v7.5 User Guide

Secure wireless router Z100G v7.5 User Guide

Check Point Embedded NGX CLI Reference Guide

For more information, view the Embedded NGX 7.5 Early Availability Release Notes
Here

To join the Embedded NGx 7.5 Early Availability program, contact SofaWare support,
with your appliance MAC address. You must have a valid software subscription.

Embedded NGX 7.0.48 General Availability (GA)

2007-08-09T13:39:00.000+03:00

We are pleased to announce the release of Embedded NGX 7.0.48 (GA).

New Features

·New SmartDefense Protection: Checksum VerificationWhen this protection is enabled, SmartDefense will identify and drop IP, TCP, or UDP packets with incorrect checksums.

·New SmartDefense Protection: Urgent Flag Clearing The URG flag is used to indicate that urgent data exists in a TCP stream, and that the data should be delivered with high priority. Since handling of the URG flag is inconsistent between different operating systems, allowing the URG flag may enable an attacker to conceal certain attacks.
By default, SmartDefense automatically clears the URG flag to ensure security. To allow the URG flag, in the SmartDefense tree's TCP > Flags node, set the URG Flag field to Allow. To prevent the URG flag from being used, set the URG Flag field to Clear.

Issues resolved

ADSL

·Resolved issue: In certain rare cases, ADSL appliances may reboot unexpectedly, and may revert to their backup ADSL firmware.

Wireless

·Resolved issue: In certain rare cases, the wireless access point may cease to respond following a wireless configuration change or an appliance reboot.

Firewall and SmartDefense

·Resolved issue: Hotspot authentication does not function as expected for networks with Hide-NAT disabled.

·Resolved issue: OfficeMode VPN clients may be unreachable from certain networks unless the client initiate traffic towards this network.

Embedded NGX 7.5.x Early Availability (EA)

2007-07-10T12:34:00.000+03:00

We are pleased to announce the release of Embedded NGX 7.5.x under the Early Availability Program. This release is packed with many new features, including:
* Internet Connection Load Balancing
* Advanced Firewall Rules
* Advanced NAT Rules
* Reusable Network Service Objects
* Service-Based Routing* Web Rules
And more...
For more information, view the Embedded NGX 7.5.x EA Release Notes
To join the Embedded NGx 7.5.x Early Availability program, contact SofaWare support, with your appliance MAC address. You must have a valid software subscription.

Embedded NGX 7.0.45 General Availability (GA)

2007-06-26T16:51:00.000+03:00

We are pleased to announce the release of Embedded NGX 7.0.45 (GA).

New Features

Support Added for EAP-FAST user authentication over RADIUS
Support Added for disabling the WAN hide NAT when using the ADSL port as the WAN connection.
A new CLI command was added in order to configure a delay from the moment the primary Internet connection disconnects until the secondary dial-up connection attempts to connect. The command syntax is: “set net wan demand-connect delay ”

Issues resolved

Firewall and SmartDefense

Resolved issue: A compatibility issue between ZoneAlarm Security Suite 3rd party cookie protection and Embedded NGX diagnostics tools.
Resolved issue: Remote desktop feature does not work when the appliance is behind a NAT device.
Resolved issue: Cross site request forgery may be possible when browsing https://my.firewall and a malicious site simultaneously within a single browser.

VPN

Resolved issue: SecuRemote / SecureClient connecting to the appliance VPN server fails to connect if the site name in the client side includes a space character.
Resolved issue: Tunnel test packets are sent from the appliance LAN IP address, even if this address is not included in the encryption domain of the appliance.

GUI

Resolved issue: "Unknown Sites" checkbox in the URL filtering categories page is not changeable using the GUI.

Embedded NGX 7.0.39 General Availability (GA)

2007-05-08T10:41:00.000+03:00

We are pleased to announce the release of Embedded NGX 7.0.39 (GA).
This release is packed with many new features, including:

Bridge Mode Supported in Z100G and Safe@Office: Bridge mode is now supported in
additional Embedded NGX appliance models (see full release notes).
Bridge Mode in Wireless Wizard: The wireless setup wizard now allows an easy way to
configure the wireless LAN in bridge mode.
DHCP Server: An additional DHCP option was added for Thomson VoIP devices.
Secure HotSpot: When using Secure HotSpot with RADIUS authentication, the RADIUS
server can now return a session timeout value for each user.
High Availability: When using WAN connection High Availability, A virtual MAC Address
is now applied to the WAN ports.
USB Modems: The following additional modems are now supported: Huawei E220,
Novatel Wireless Ovation U720 3G.
USB Modem Test A test button was added to the USB modem configuration page.

Click here for the full release notes

External 3G Modem Module (HSDPA) for Embedded NGX gateways

2007-04-04T11:55:00.000+03:00

We are pleased to announce the availability of the External 3G Modem Module (HSDPA) for Embedded NGX appliances.

This compact, module plugs into the USB port of your Embedded NGX security appliance without the need for a power source (draws power from the appliance), and allows speeds of up to 1.8 Mbps download and up to 384 Kbps upload.

Note: Firmware 7.0 is required.

Versions available:

CPUTM-MODEM-USB-T3G-US - US Version (850 / 1900 Mhz)

CPUTM-MODEM-USB-T3G-EU - EU Version (2100 Mhz)

For more information and online ordering, click here.

Embedded NGX 7.0.33 General Availability (GA)

2007-02-28T15:54:00.000+02:00

We are pleased to announce the release of Embedded NGX 7.0.33 (GA).

Embedded NGX 7.0.31 General Availability (GA)

2007-02-13T16:06:00.000+02:00

We are pleased to announce the release of Embedded NGX 7.0.31 (GA).

This release is packed with many new features, including:

VStream Embedded Antivirus: Support added for additional ZIP compression methods.
SmartDefense: Support added for non standard HTTP request headers.
ADSL: A configuration parameter was added to the CLI to control upstream bit swap on the ADSL line (“set port adsl upbitswap”).
Dynamic Routing: Support was added for the OSPF not-so-stubby-area (NSSA).
Connectivity: Connect-on-demand is now supported in all PPP modes.
Wireless: Enhanced auto-adaptation of the signal strength and wireless transmission rate according to the RF noise levels.

Staff recommendation: Anti Phishing

2007-01-17T14:31:00.000+02:00

Q. What is Phishing?

A. Phishing is an attempt to fraudulently acquire sensitive information, such as passwords and credit card details, by masquerading as a trustworthy web site.

Q. How can I protect my self against phishing?

A.

Never rely on links provided in email messages; always make sure you have reached
the correct URL (address), be highly suspicious of emails requiring you to
enter personal information (including passwords).
Educate your users! Knowledge is power and no matter how many countermeasures
you put up - the weakest link is always the human element.
Use VStream to keep your Embedded NGX appliance geared up to detect and fight Phishing.
As an addon I personally use and would like to recommend, a free service called OpenDNS - http://www.opendns.com

The service consists of replacement DNS servers, which can be used instead of your ISP DNS servers to protect against phishing.

Important Note: SofaWare and Check Point are not affiliated with this service. Any usage of this service is at the sole responsibility of the user.

OpenDNS offers a primary and secondary DNS server, however I personally use OpenDNS's primary DNS server and enter my ISP's (Internet Service Provider) primary DNS server as the secondary.

Sounds confusing? Let's break it down step by step:

OpenDNS primary DNS: 208.67.222.222

OpenDNS secondary DNS: 208.67.220.220

Go to my.firewall > Network > Internet, and click "Edit" near your Internet connection.

Uncheck "Obtain Domain Name Servers automatically" (under "Name Servers")

Enter the information shown below:

Primary DNS Server: 208.67.222.222

Secondary DNS Server: Either your ISP's primary DNS server IP, or OpenDNS's secondary DNS IP.

Don't forget to click "Apply"

That's it - Stay safe!! ;-)

Erez Kalman

Technical Support Team

Sofaware Technologies

New in the Newsletter

2006-12-25T08:53:00.000+02:00

In this holiday-season edition of the SofaWare newsletter, we offer you a number of fresh articles...

- Embedded NGX 7.0 Overview

- Feature Focus - Wireless Distribution System

- Feature Focus - Clientless Remote Desktop

- Ask the Expert - Print Server Setup

Safe@Office Embedded NGX 7.0 General Availability (GA)

2006-12-25T08:49:00.000+02:00

We are pleased to announce the release of Safe@Office Embedded NGX 7.0 (GA).

This release is packed with many new features, including:

* Bridge Mode
* WDS (Wireless Distribution System) & Wireless Roaming
* Remote Desktop
* USB Dialup & Cellular Modem Support

You must have a valid software subscription to be eligible to receive the update.

Release notes
Safe@Office User Guide
VPN-1 Edge User Guide
CLI Reference Guide

External 56K Dialup Modem Module for Embedded NGX gateways

2006-12-11T10:25:00.000+02:00

We are pleased to announce the availability of the External 56K Dialup Modem for Embedded NGX appliances.

This compact, matchbox sized module plugs into the USB port of your Embedded NGX security appliance, and allows 56K dialup (PSTN) connections to be used.

Note: Firmware 7.0 (currently in Early Availability) is required.

For more information and online ordering, click here.

ICSA Certification for VPN-1 Edge

2006-11-22T15:55:00.000+02:00

We are pleased to announce the successful certification of VPN-1 Edge UTM W unified threat management appliance under the latest and most stringent, Corporate version 4.1 of Firewall Certification from ICSA labs.

ICSA Labs, an independent division of TruSecure Corporation, offers vendor-agnostic testing and certification of security products. The end-users of security technologies rely on ICSA Labs to authoritatively set and apply objective testing and certification criteria for measuring product compliance and reliability. The organization tests 95% of products in key technology categories such as anti-virus, IPSec, VPN, firewall, PC firewall, cryptography, intrusion detection and content security.

Check Point VPN-1 UTM Edge Appliance Simplifies Remote Office Security With USB Modem Support and Wireless Roaming

2006-11-15T14:48:00.000+02:00

UTM Appliance Adds Consistent Security for Branch Offices All Delivered From a Single Box

REDWOOD CITY, Calif.--(BUSINESS WIRE)--Check Point® Software Technologies Ltd. (Nasdaq:CHKP), the worldwide leader in securing the Internet, today announced Check Point VPN-1® UTM Edge 7.0, an upgrade to its branch office offering, delivering powerful new protection with USB Modem Support, Wireless Roaming, and Bridge Mode capabilities. Version 7.0 provides comprehensive and easy-to-use options that help organizations become more secure and ensure constant connectivity to critical information. With USB Modem Support, customers can now have an affordable high-availability option for times when a main Internet link is down. VPN-1 UTM Edge 7.0 will automatically detect the dead link and fail over to the modem, enabling continuous communications and the flow of critical information.

“With the adoption of voice over IP and the flow of critical supply chain information, keeping branch offices connected and secure is more and more critical. VPN-1 UTM Edge 7.0 addresses the need for continuous connectivity and security at branch offices, which is something that existing UTM appliances have not provided,” said Dave Burton, director of product marketing, Check Point Software Technologies. “This latest release enables our customers to stay ahead of emerging threats without complicating the management process and policy updates.”

VPN-1 UTM Edge is a unified threat management appliance that integrates the market-leading stateful inspection firewall, industrial strength intrusion prevention, gateway antivirus, and IPSec VPN into a single, easy-to-deploy solution. VPN-1 UTM Edge also provides ADSL and WLAN protocols to provide enterprises with the most flexibility and manageability during deployment. Security management is made easy through Check Point SMART (Security Management Architecture) management, enabling administration of corporate policies from a single console -- providing complete control and visibility into the entire enterprise.

New features in VPN-1 UTM Edge include:

Continuous Branch Office Connectivity — USB Modem Support provides customers with an affordable high availability option for when the main Internet link is down. VPN-1 UTM Edge will automatically detect the dead link and fail over to the modem, eliminating any gaps in connectivity. Supported USB Modem types include analog, ISDN, and GPRS/EVDO cellular.
Wireless Roaming — Support enables employees to move freely between access points without losing Internet connectivity. Wireless Roaming in VPN-1 UTM Edge is standards-based and supports multiple deployment options.
Transparent Security Layer — Bridge Mode allows administrators to add a security layer to an existing network without requiring the time or expense of changing existing IP configuration.

Pricing and Availability

VPN-1 UTM Edge 7.0 starts at $600 USD and can be ordered immediately. For more information, please visit http://www.checkpoint.com.

For more information about VPN-1 UTM Edge and the complete portfolio of perimeter, internal, Web and endpoint security solutions from Check Point, please visit http://www.checkpoint.com.

New: ZoneAlarm Z100G Secure Wireless Router

2006-11-08T11:42:00.000+02:00

We are pleased to announce a new wireless security router for home users, the ZoneAlarm Secure Wireless Router Z100G.

The new ZoneAlarm Secure Wireless Router will be sold as a standalone appliance, or bundled with five copies of the award-winning ZoneAlarm Internet Security Suite software. Availability is expected in late November. List price for the standalone appliance will be $199.95. A special promotional rate of $149.95 is available through December 31, 2006.

For more information, see www.zonealarm.com/z100g

Safe@Office Embedded NGX 7.0 Early Availability Program

2006-11-07T15:49:00.000+02:00

We are pleased to announce the release of Safe@Office Embedded NGX 7.0 under the Early Availability Program.

This release is packed with many new features, including:

Bridge Mode
WDS (Wireless Distribution System) & Wireless Roaming
Remote Desktop
USB Dialup & Cellular Modem Support

To join the Embedded NGX 7.0 Early Availability program, contact SofaWare support, with your appliance MAC address. You must have a valid software subscription.

For the full release notes - click here

The Sofaware Team

Check Point Rackmount Shelf Kit

2006-10-30T15:42:00.000+02:00

We are happy to announce the availability of a new accessory for Embedded NGX appliances - the Check Point Rackmount Shelf kit [SKU: CPUTM-EDGE-XG-IND-RM-KIT]

The new kit allows mounting up to two Check Point security appliances with their power supplies in a standard 19" rack.

For pricing and ordering, click here.

The SofaWare Team

Release notes for NGX 6.5.43 firmware

2006-10-11T12:12:00.000+02:00

Safe@Office and VPN-1 Edge NGX v6.5.43 release notes are available for download!
Embedded NGX 6.5.43 Release Notes

The Sofaware Team

GLESEC's Launches SMB - Small to Medium Business Offering with Check Point to Include Turnkey and Cost-Effective Information Security Protection

2006-09-18T10:55:00.000+03:00

PRINCETON, N.J.--(BUSINESS WIRE)--Sept. 13, 2006--GLESEC today announced the launch of its SMB (Small to Medium Business) Division with the introduction of a new Internet security solution including the Safe@Office Internet security platform from Check Point Software Technologies Ltd. (Nasdaq: CHKP) at its core. This offering is to include a combination of products and services in order to provide a turnkey security solution to small and medium-size companies.

This solution includes perimeter security, including firewall and Intrusion Prevention technologies (IPS), content security (gateway anti-virus and URL filtering) and an optional integrated wireless access point makes it ideal for home-offices and small offices.

The security challenges facing companies today, such as threats, vulnerabilities and the application of security best practices and risk-management, do not differ based upon the size of an organization. However, smaller organizations may not have the resources to implement all the countermeasures available to large organizations. The GLESEC SMB Service is meant to address this disparity in resources while still supporting the needs of all organizations.

"GLESEC's strength has always been in supporting medium-to-large organizations' information security needs in the U.S. and internationally. This experience is now being applied to smaller organizations which face the same security threats as large organizations," said Sergio Heker, GLESEC's chief executive officer.

The GLESEC SMB program will provide clients with options for selecting the type of Safe@Office system that meets their needs and two servicing options, one with GLESEC's SSP (or Security Support Program) and the other with GLESEC's MSS (or Managed Security Service).

Both the SSP and the MSS services provide clients with the advantages of outsourcing at different levels depending on the structure of their business operations. This flexibility is important to GLESEC clients who are located across the Americas. Clients receive Web access to the management systems as well as detailed security reports with analysis of the security activities on a monthly basis.

Check Point's Safe@Office line of security appliances offer the power of Check Point's renowned enterprise technologies tailored to meet the needs of SMBs. The all-in-one UTM solution is a single platform for protection against today's most malicious threats, including viruses, spyware and more.

"Partners like GLESEC are increasingly valuable to our end-users said Jonathon Harris, director of sales for Check Point's consumer and small business division. "Attacks are becoming more and more sophisticated while also becoming more stealth, and a hand-on reseller like GLESEC can provide a customized solution to both protect an SMB and help them optimize their network for employee productivity. We are excited about the launch of their new program and look forward to supporting their efforts."

SofaWare Newsletter - September 2006 Edition

2006-09-05T17:27:00.000+03:00

Check out the new SofaWare newsletter with technical and non-technical articles about what’s new and what’s hot in Check Point Embedded NGX appliances.

The latest addition to the Safe@Office 500 UTM product line: Safe@Office 500/500W ADSL. A true all-in-one solution for the small business network, Safe@Office 500/500W ADSL features an integrated ADSL2/ADSL2+ modem, in addition to the growing list of security and networking features of Safe@Office 500 UTM.
The latest Embedded NGX 6.5 firmware release with a wealth of new advanced security features and improvements to existing features.
Technical Feature Focus –802.1x Network Access Control
RoHS Compliance