topic Re: can Check Point enforce image recognition? in General Topics

can Check Point enforce image recognition?

Thomas_Eichelbu — Mon, 24 Nov 2025 09:34:34 GMT

Hello Check Mates,

Interesting question from a customer, does Check Point allow to enforce policies based on the content of images/pictures?

Can the firewall or any other functionality (Sandblast or HEC) detect the content of a picture or even a video and accept/drop it?
The goal is to block unwanted pictures/video on downloads and mostly within emails!
sometimes people make bad jokes and send disadvantageous pictures of other people around the world created by AI tools 🙂
detecting unlawful or unwanted content within images?

Relaying on URL category is often not sufficient.

is there an AI thing which helps to achieve this goal?
how to deal with False Positive if someone just browses for the newest swimwear on Amazon?

would be great if Check Point has an answer for this usecase!

best regards

Re: can Check Point enforce image recognition?

Chris_Atkinson — Mon, 24 Nov 2025 10:13:11 GMT

HEC uses Optical Character Recognition (OCR) to extract and analyze text from images.
Quishing would be addressed in this way (with URL rewriting), other possibilities might include DLP or even Steganography perhaps, but typically limited to a security context currently I believe.

Re: can Check Point enforce image recognition?

Thomas_Eichelbu — Tue, 25 Nov 2025 14:01:16 GMT

Hello,

Yes thats understood.
nevertheless the customer requests an image recognition and policy enforcement based on images.
mostly for Email, not really for Web Browsing.
Since this is not yet in place its perfect for a RFE 🙂

But a feature like this would be exceptional for Check Point.
I have seen features like this on "CISCO ESA Image Analysis Feature"

ok would say, we are done here.

Re: can Check Point enforce image recognition?

the_rock — Tue, 25 Nov 2025 14:05:11 GMT

Definitely an RFE.