All of the Juniper NAC work together more completely to provide more NAC functionality as well a granularity for setting and maintaining policies.įor guest access, CheckPoint doesn’t have a captive-portal option, which is pretty standard across competing products.

While you can tell from the relatively clean management interface that CheckPoint is pushing to manage all these necessary NAC pieces in an integrated fashion, but the company in not fully there yet. We also tested Integrity’s integration with the Cisco’s IPSec VPN connections for remote-access ties. Check Point's scheme means that the Integrity client software can combine with network-access devices, such as an enterprise firewall, a remote-access VPN concentrator or an 802.1X-supported switch to block physical network access if the endpoint is not in compliance.įor testing, we opted for cooperative enforcement and installed Integrity on a Windows 2003 server and integrated it with a Check Point NG firewall for LAN access. To that end, Check Point offers what it calls “cooperative enforcement” (all other vendors just refer to this process as plain, old enforcement). This is not ideal, however, because you likely don’t want all your security blocking capabilities sitting out on an endpoint that could be compromised. From there, you can then have the Integrity client do the NAC enforcement by perhaps putting in desktop firewall rules to block network access. In both cases the Integrity client conducts all of your endpoint assessment. You’ve got some options with this product.

Check Point Integrity NGX brings to fruition the integration of the endpoint-security technology purchased with Check Point's ZoneLabs acquisition and Check Point’s signature firewall-product line.

Checkpoint endpoint management