2018 NSS Labs NGFW Results

[Neatsun_Ziv]

Check Point is highly committed to the public testing of its products and solutions because it helps us to continuously improve our products and provide the best technology to our customers to be fully prepared against the 5^th generation of cyber attacks.

We participate in dozens of tests across a spectrum of labs and approaches. Like NSS Labs (18 times tested) , Forrester leader in Endpoint Security & Sandbox, Miercom (Mobile, Secure Web Gateway) and Gartner (Magic Quadrant Leader for 21 years and reviewed by customers in Gartner “Peer Insights“  4.5/5 for product capabilities)

In the most recent NSS Labs Next-Generation Firewall (NGFW) group test, Check Point received in the most critical aspect of the test “exploit block-rate” rating of 100% - blocking successfully all 1,983 advanced exploits targeting vendors like Microsoft, Adobe , Apple, IBM and Oracle.

However, we submitted an early-release version (R80.20) and encountered some stability issues that resulted in automatic “Caution” rating according to NSS Labs Testing methodology .  This version is used by very few of our customers and not the recommended version by Check Point (as stated in sk95746). Upon notification from NSS Labs, we moved quickly to resolve the issue and released an update.  The update was delivered to NSS labs for re-test and confirmed resolution of the stability issue. Due to the late timing of the retest, the improved test results were not included in the Security Value Map. None of our customers are exposed to this stability issue and we verified that the issue does not affect previous versions.

Below find a summary from the latest test (full copy can be downloaded at https://research.nsslabs.com/reportaction/report-642/Marketing)

from the report:

"After working closely with NSS, Check Point updated its software and released Check Point 15600 Next Generation Threat Prevention (NGTP) Appliance R80.20 OS build 2 (IPS signature: package 635184905). The updated device was subjected to testing under the same NGFW Test Methodology v8.0 and appropriately handled 190 out of the 190 evasions it was tested against. Furthermore, the device passed all stability and reliability tests, improving its exploit block rate by 0.45% and improving performance by 635 Mbps."

Check Point remains the company with the highest NSS “Recommended” ratio ever, with 17/18 “recommended” ratings since 2011 and in this test achieved another excellent security score  with 100% exploit block-rate. In the past year alone, Check Point products have earned 4 NSS labs coveted “Recommended” rating (NGFW, NGIPS, BDS, BPS) with near-perfect security, our exact same appliance - the 15600 –scored NSS Labs’ highest rating in their Breach Prevention System (BPS) group test for Security Effectiveness by blocking 100% of exploits, as well as for leading TCO (Total Cost of Ownership) per protected Mbps (Megabit per second.)

We value our partnership with NSS Labs, and are proud of our track record for consistent and rigorous testing to ensure we are delivering the very best security to our customers.

Neatsun Ziv

VP, Threat Prevention Check Point

[RickHoppe]

Thanks for explaining this shocking rating.

I understand the potential commercial value if you submit your newest version to the test, but why did you send an EA? This time it backfired.

The competitors will only show their good rating compared to yours and probably will not include your explanation.

I’m confident this rating will be fixed in the next test but for now the competitors may gain from this.

Sales teams need to be ready to answer some difficult questions from customers who only take a look at the map.

[Moti]

its updated now

[RickHoppe]

Correct, but the Next Generation Firewall (NGFW)
Security Value Map isn't (yet?).

[Moti]

Yes

Will be on partnerMAP soon

[RickHoppe]

Great! Thanks!

[Douglas_Hernand]

https://www.checkpoint.com/partners/resources/downloads/products/competitive-info/Check_Point_NGFW_S...