Britestream Applied: Solution for Check Point Web Intelligence

	Key Benefits Frees valuable server resources for Malicious Code Protection with Web Intelligence by offloading 100% of SSL processing Provides a seamless end-to-end encryption solution for multiple web applications Eliminates encryption latency Tamper resistant, hardware-based solution protects encryption keys and certificates

For applications needing the added security of Check Point’s Web Intelligence with Malicious Code Protection, Britestream hardware technology offers hardened security while improving application response time by offloading 100% of SSL processing. The Britestream solution removes all barriers and penalties to deploying—and ensuring—secure transmissions.

Scalable Performance and Easy Integration for Check Point Web Intelligence

The Web Intelligence firewall technology is designed to provide protection for the entire web environment, using SSL encryption as the default method to secure transmissions across the web. The Britestream SSL security NIC offloads 100% of the processor intensive SSL functions, freeing the Web Intelligence server to concentrate on its routing of sessions and data.   With Britestream’s 100% offload SSL Solution processing up to 10,000 SSL transactions per second and Check Point’s Web Intelligence support for up to 24 distinct web servers on a single NGS platform, highly secure websites now can turn SSL security on by default in more server applications.

Advanced Encryption for Check Point Web Intelligence

Britestream and Check Point together offer numerous advanced cryptographic functions including various RSA key sizes and a variety of encryption algorithms without requiring less secure software-based cryptographic libraries to slow performance.  Private keys are not stored in software, but on the card in secure non-reliable hardware.  The Britestream solutions provide tamper-resistant storage of keys and utilize a hardware-based random number generator for maximum privacy for keys and certificates.  Britestream provides additional host attack protection with secure storage of keys / certificates and TCP port blocking.      

Enhanced Security

The Britestream BN1200 SSL security NIC allows private keys and certificates to be stored within tamper-resistant hardware.  It also supports advanced cryptographic functions by allowing the use of 1K, 2K or 4K RSA key sizes and supporting a variety of encryption algorithms, including AES-256.  And for environments that process only secure traffic on specific ports, the BN1200 can essentially reject traffic on any other port, thereby preventing the host application from having to deal with it.