Check Point Proactively Protects against Denial of Service Vulnerability in Cisco Devices; Check Point Customers Already Protected Against Denial of Service Vulnerability

Business Wire, August 20, 2004

REDWOOD CITY, Calif. -- Further Proof Point for Proactive Protection Against Unknown Attacks

Check Point Software Technologies Ltd. (Nasdaq:CHKP), the worldwide leader in securing the Internet, today announced that its industry-leading VPN-1(R) Next Generation(TM) with Application Intelligence and InterSpect(TM) product lines provide defenses against potential vulnerabilities detected in Cisco devices running Internetwork Operating System (IOS) and enabled for the Open Shortest Path First (OSPF) protocol. If exploited, the vulnerability could allow a Denial of Service (DoS) attack. Check Point has provided a defense against OSPF and other dynamic routing protocol vulnerabilities since July 21, 2004.

OSPF is an IP routing protocol. A Cisco device receiving a malformed OSPF packet will reset and may take several minutes to become fully functional. This vulnerability may be exploited repeatedly, resulting in an extended DoS attack. Users of VPN-1 Next Generation with Application Intelligence and InterSpect who implemented the July 21, SmartDefense(TM) Service Update (CPSA-2004-03) regarding Dynamic Routing protocols are automatically protected against this vulnerability.

SmartDefense is a management feature set included with Check Point firewalls and VPNs that enables customers to configure their network to proactively protect against known and unknown attacks. It provides customers with the best network- and application-level security protection for dynamic Internet threats, such as the Cisco IOS Malformed OSPF Denial of Service vulnerability. Additionally, Check Point customers can benefit from the SmartDefense Service, which enables real-time updates and advisories that provide additional protection against these new and emerging threats.

A detailed description of the threat and defense is available to subscription customers of the SmartDefense Service. For more information on the Cisco IOS Malformed OSPF Denial of Service vulnerability, please see advisory CPSA-2004-37 at http://www.checkpoint.com/securitycenter/advisories/index.html.> About Check Point SmartDefense Service

SmartDefense Advisories are included with the SmartDefense Subscription service and are available to licensed customers. The SmartDefense Service capabilities are available for Check Point products including VPN-1 Pro(TM), Check Point Express(TM), InterSpect and Connectra(TM).

About Check Point Software

Check Point Software Technologies (www.checkpoint.com) is the worldwide leader in securing the Internet. It is the confirmed market leader of both the worldwide VPN and firewall markets. Through its Next Generation product line, the company delivers a broad range of intelligent Perimeter, Internal and Web security solutions that protect business communications and resources for corporate networks and applications, remote employees, branch offices and partner extranets. The company's Zone Labs (www.zonelabs.com) division is one of the most trusted brands in Internet security, creating award-winning endpoint security solutions that protect millions of PCs from hackers, spyware and data theft. Extending the power of the Check Point solution is its Open Platform for Security (OPSEC), the industry's framework and alliance for integration and interoperability with "best-of-breed" solutions from over 350 leading companies. Check Point solutions are sold, integrated and serviced by a network of more than 2,300 Check Point partners in 92 countries.

(C)2004 Check Point Software Technologies Ltd. All rights reserved.

Check Point, Application Intelligence, Check Point Express, the Check Point logo, AlertAdvisor, ClusterXL, Cooperative Enforcement, ConnectControl, Connectra, CoSa, Cooperative Security Alliance, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, IMsecure, INSPECT, INSPECT XL, Integrity, InterSpect, IQ Engine, Open Security Extension, OPSEC, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureKnowledge, SecurePlatform, SecurRemote, SecurServer, SecureUpdate, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, Smarter Security, SmartDashboard, SmartDefense, SmartLSM, SmartMap, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, TrueVector, UAM, User-to-Address Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 VSX, Web Intelligence, ZoneAlarm, Zone Alarm Pro, Zone Labs, and the Zone Labs logo, are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726 and 6,496,935 and may be protected by other U.S. Patents, foreign patents, or pending applications.