Check Point Abra

Check Point GO is a USB drive that combines an encrypted USB flash drive with virtualization, VPN and computer security technologies to turn a PC into a secure corporate desktop. By plugging Check Point GO into the USB port of a Microsoft Windows® OS-based PC or laptop, users can launch a secure virtual workspace that is segregated from the host PC.^[1] This allows users to securely access company files and applications from any remote location, including insecure host environments such as a hotel business center or Internet café.^[2]

Check Point GO uses hardware and software encryption to protect user credentials, documents, and other sensitive data, so that data cannot be compromised in transit or in the event the device is lost. The system uses an authentication process that enforces minimum levels of password strength, as well as certificates and security tokens for multifactor authentication for remote connectivity. The device interfaces with software on a corporate server to support company policies and security updates through security gateways.^[3]

History

^[4] Check Point GO (formerly Abra) was first introduced by Check Point Software Technologies Ltd.^[5] and SanDisk Corporation in March 2010 to address security and compliance issues for companies with remote employees.^[6] Workers have been increasingly demanding remote access to company applications and data.^[7] Personal equipment accessing the network can pose a risk to corporate networks, creating a potential avenue for corporate data loss or allowing unsecure connections.^[8]

The companies cite that the Check Point GO system provides a solution for companies that want to let their employees purchase and manage their own PCs and laptops, for those needing high security (including encryption) for computing devices outside the workplace, as well as contractors/vendors who require access to the company network while working on site.

Since its release, the product has won industry awards including "IT Product of 2010" by Computerworld^[9] and was named one of the “25 Hot Products to Watch” at the 2010 RSA Conference by CRN Magazine.^[10]

Technology Architecture

When Check Point GO is inserted into the USB port of any PC, the user is presented with a login screen. Upon successful login, a new explorer.exe instance is started in the Check Point GO Secure Workspace. All subsequent processes are started as child processes of this new explorer.

Check Point GO uses the software installed on the host PC to run applications such as Microsoft Word and Microsoft Excel, but the user’s documents remain secure in the Check Point GO environment – a virtual workspace that runs parallel to the host environment. All file and registry input/output calls for the secure application inside Check Point GO are redirected to the flash drive.

All applications running on the Check Point GO desktop (including the new explorer) operate in a virtual file system and registry. The virtual files and registry data are instantly written to the flash drive and immediately encrypted.

Currently, Check Point GO does not work on all Windows workstations, due to incompatibility with enterprise client settings.

Specifications

^[11]

Check Point GO Host Platform Support
Operating systems	Windows 7 (32 & 64-bit, Home Premium, Enterprise, Ultimate) Windows Vista (32 & 64-bit, Home and Professional, SP2+) Windows XP (32-bit, Home and Professional, SP3+)
SmartCenter Management Server
Operating systems	Check Point SecurePlatform™ Windows Server 2000/2003 Solaris 8/9/10 Red Hat Linux Enterprise 3.0
SmartCenter GUI
Operating systems	Windows 2000/2003, ME, XP, Vista Solaris 8/9/10
Encrypted USB Drive
SanDisk USB Drive	Available capacities: 4, 8 GB High-speed USB 2.0 interface AES 256-bit hardware encryption FIPS 140-2 Level 2 certified drives available

Versions

Version R65	Installed with:
Security Gateway	R65 HFA60 R65 HFA60 Check Point GO Hotfix
SmartCenter server	R65 HFA60 R65.4 or R66 Connectra plug-in R65 HFA60 Check Point GO Hotfix
SmartDashboard Version	R65.4 with Check Point GO R70.1 update
Version R70.20 or R70.40	Installed with:
Security Gateway	No additions
Security Management Server	No additions
SmartDashboard Version	SmartDashboard for versions with Check Point GO R70.1 update
Version R71.1	Installed with:
Security Gateway	No additions
Security Management Server	No additions
SmartDashboard Version	R71.1 for versions with Check Point GO R70.1 update

Awards

• It was distinguished with "The best international innovation" award at the 2010 Information Security Day (ITBN) conference in Hungary.^[12]
• It Received the Computerworld Czech Republic's annual "IT Product of the Year" in 2010.

^[13]

See also

• Check Point VPN-1
• Circuit-level gateway
• Comparison of firewalls
• Firewall
• List of Linux router or firewall distributions
• Packet
• Sandbox (computer security)
• Screened-subnet firewall
• Unified threat management
• Virtual firewall

References

1. ^ "Check Point unveils Abra mobile". Deccan Herald. April 7, 2010. http://www.deccanherald.com/content/62594/check-point-unveils-abra-mobile.html. 
2. ^ "A virtual Secure workspace". swordshield.com. http://www.swordshield.com/images/abra-white-paper.pdf. 
3. ^ "Check Point launches ABRA". ciol.com. http://www.ciol.com/Technology/Security/News-Reports/Check-Point-launches-ABRA/134488/0/. 
4. ^ "Check Point puts VPN in USB stick". techworld.com. http://news.techworld.com/security/3214138/check-point-puts-vpn-in-usb-stick/. 
5. ^ "Secure Virtual Workspace". http://www.sandisk.com/business-solutions/enterprise/sandisk-and-check-point-abra. 
6. ^ "Check Point and SanDisk Deliver Secure Virtual Workspace" (Press release). Checkpoint.com. March 2, 2010. http://www.checkpoint.com/press/2010/check-point-sandisk-abra-030210.html. 
7. ^ Telework Trendlines 2009, WorldatWork.
8. ^ "Company white paper: Check Point GO – A Virtual Secure Workspace". checkpoint.com. http://www.checkpoint.com/whitepapers/. 
9. ^ "Check Point Abra Named 'IT Product of 2010' by Computerworld Magazine" (Press release). Newswiretoday.com. July 15, 2010. http://www.newswiretoday.com/news/73943/. 
10. ^ "25 Hot Products To Watch At RSA". CRN Magazine. February 26, 2010. http://www.crn.com/slide-shows/security/223100893/25-hot-products-to-watch-at-rsa.htm?pgno=7. 
11. ^ "Abra Specifications". info-safe.com. http://www.info-safe.com/docs/abra_ds.pdf. 
12. ^ "Check Point Abra Recognized Best International Innovation At Hungarian IT Security Day" (Press release). checkpoint.com. 11 October 2010. http://www.checkpoint.com/press/2010/AbraAwardWinITSecurityDayHungary.html. Retrieved 17 November 2010. 
13. ^ "Check Point Abra Recognized Best International Innovation At Hungarian IT Security Day". newswiretoday.com (Budapest, Hungary). 10/11/2010. http://www.newswiretoday.com/news/78827/.