Requirement of an Application to be marked as Low or High Risk by Check Point

[BigHec]

Hi All,

I would like to understand what are the requirements of an Application to be categorized as low or high risk application by Check Point.

What does Check Point depends on and consider an Application as low or high risk.

Thank you

[Chris_Atkinson]

I'm fairly certain we don't publish the specific technical parameters other than the descriptions below.

With that said you can check example apps / sites and request recategorization here: https://urlcat.checkpoint.com/urlcat/main.htm

https://appwiki.checkpoint.com

Risk Level

5 - Critical: Can bypass security or hide identities.

4 - High: Can cause data leakage or malware infection without user knowledge.

3 - Medium: Can be misused and cause data leakage or malware infection.

2 - Low: Potentially not business related, but low risk.

1 - Very Low: Usually business related with no or very low risk.

Comparatively for other Threat Prevention blades we have:

sk116254: IPS, Anti-Bot, and Anti-Virus Protections' Severity, Performance, and Confidence Levels

https://threatwiki.checkpoint.com

[the_rock]

Great links @Chris_Atkinson . By the way, I could not find link with it, so just curious... : - )

Andy

This is part I was referring to

Risk Level

5 - Critical: Can bypass security or hide identities.

4 - High: Can cause data leakage or malware infection without user knowledge.

3 - Medium: Can be misused and cause data leakage or malware infection.

2 - Low: Potentially not business related, but low risk.

1 - Very Low: Usually business related with no or very low risk.

[Chris_Atkinson]

The same descriptions are also in SmartConsole for each category. 🙂

[the_rock]

Never mind, got it, have to sharpen my searching skills lol

https://dl3.checkpoint.com/paid/cd/cd525b890ff128416dfba6a955255714/CP_APPI_SelfHelp_Guide.pdf?HashK...

Andy