Discover

'FireWall-1' is a firewall product created by Check Point Software Technologies Ltd.
The FireWall-1 is a stateful firewall which also filters traffic by inspecting the application layer. It was the first commercially available software firewall to use stateful inspection. FireWall-1 functionality is currently bundled within all the Check Point's perimeter security products. The product previously known as FireWall-1 is now sold as an inseparable part of the VPN-1 solutions, which include the VPN functionality.
Check Point was the market leader for firewalls in the late 1990's but by 2002 it had been overtaken in market share by Cisco's PIX firewall. ^[1]
FireWall-1 is one of the few firewall products that is still owned by its creators (Check Point Software Technologies). By contrast, most other commercial firewalls such as Cisco PIX and Juniper NetScreen were acquired by their present owners.

Contents

Platforms

Version History

See also

References

External links

Platforms

Check Point FireWall-1/VPN-1 software is installed on a separate operating system, which provides the protocol stack, file system, process scheduling and other features needed by the product. This is different to most other commercial firewall products like Cisco PIX and Juniper NetScreen where the firewall software is part of a proprietary operating system.
As of NGX R61—R65, FireWall-1 supports the following operating systems:

★ Solaris on SPARC 8, 9 and 10;

★ Windows 2000 Server and 2003 Server;

★ Red Hat Enterprise Linux (RHEL) version 3.0;

★ Check Point SecurePlatform (a Check Point Linux distribution based on Red Hat Linux, often called ''SPLAT'');

★ Nokia IPSO.
Previous versions of Check Point firewall supported other operating systems including HP-UX and IBM AIX. See the table in the ''Version History'' section below for details.
FireWall-1/VPN-1 running on the Nokia platform on IPSO is often called a ''Nokia Firewall'' as if it were a different product, but in fact it runs the same FireWall-1 software as other platforms.

Version History

The FireWall-1 version naming can be rather confusing because Check Point have changed the version numbering scheme several times through the product's history. Initially, the product used a traditional decimal version number such as 3.0, 4.0 and 4.1 (although 4.1 was also called ''Check Point 2000'' on the packaging). Then the version changed to ''NG'' meaning ''Next Generation'' and minor revisions became known as ''Feature Packs''. Then the name changed to ''NG AI'' which meant NG with ''Application Intelligence'', and the minor revisions became known as Rxx e.g. ''NG AI R54''. Most recently, the version name has changed to ''NGX''.
Version 3.0 was also sold by Sun Microsystems as ''Solstice FireWall-1''. This was essentially the same product, but with slightly different packaging and file system layout.
The table below shows the version history. The ''Platforms'' column shows the operating systems that are supported by the firewall product:

Version	Release Date	Platforms	Notes
1.0	April 1994	SunOS 4.1.3, Solaris 2.3	[2] [2]
2.0	Sep 1995	SunOS, Solaris, HP-UX	[4]
2.1	Jun 1996
3.0	Oct 1996
3.0a
3.0b	1997	Windows NT 3.5 and 4.0; Solaris 2.5, 2.5.1 and 2.6; HP-UX 10.x; AIX 4.1.5, 4.2.1
4.0	1998	Windows NT 4.0, Solaris 2.5, 2.5.1, 2.6 and 7 (32-bit); HP-UX 10.x; AIX 4.2.1 and 4.3.0
4.1	2000	Windows NT 4.0 and 2000; Solaris 2.6, 7 and 8 (32-bit); HP-UX 10.20 and 11; Red Hat Linux 6.2 and 7.0 (2.2 kernel); IPSO 3.4.1 and 3.5; AIX 4.2.1, 4.3.2 and 4.3.3	Also known as ''Check Point 2000''
NG	Jun 2001	Windows NT 4.0 and 2000; Solaris 7 (32-bit) and 8 (32 or 64-bit); Red Hat Linux 6.2 and 7.0 (2.2 kernel)	NG stands for ''Next Generation''
NG FP1	Nov 2001	Windows NT 4.0 and 2000; Solaris 7 (32-bit) and 8 (32 or 64-bit); Red Hat Linux 6.2, 7.0 (2.2 kernel) and 7.2 (2.4 kernel), IPSO 3.4.2
NG FP2	Apr 2002	Windows NT 4.0 and 2000; Solaris 7 (32-bit) and 8 (32 or 64-bit); Red Hat Linux 6.2, 7.0 (2.2 kernel) and 7.2 (2.4 kernel), IPSO 3.5 and 3.6, SecurePlatform NG FP2
NG FP3	Aug 2002	Windows NT 4.0 and 2000; Solaris 8 (32 or 64-bit) and 9 (64-bit); Red Hat Linux 7.0 (2.2 kernel), 7.2 and 7.3 (2.4 kernel), IPSO 3.5, 3.5.1 and 3.6, SecurePlatform NG FP3
NG AI R54	Jun 2003	Windows NT 4.0 and 2000; Solaris 8 (32 or 64-bit) and 9 (64-bit); Red Hat Linux 7.0 (2.2 kernel), 7.2 and 7.3 (2.4 kernel), IPSO 3.7, SecurePlatform NG AI, AIX 5.2	The full name is ''NG with Application Intelligence''
NG AI R55	Nov 2003	Windows NT 4.0, 2000 and 2003; Solaris 8 (32 or 64-bit) and 9 (64-bit); Red Hat Linux 7.0 (2.2 kernel), 7.2 and 7.3 (2.4 kernel), IPSO 3.7 and 3.7.1, SecurePlatform NG AI	Version branches: NG AI R55P, NG AI R55W
NG AI R57	April 2005	SecurePlatform NG AI R57	For product ''Check Point Express CI'' (Content Inspection), later ''VPN-1 UTM'' (Unified Threat Management) [2]
NGX R60	Aug 2005	Windows 2000 and 2003; Solaris 8 and 9 (64-bit); RHEL 3.0 (2.4 kernel), IPSO 3.9 and 4.0, SecurePlatform NGX	Version branches: NGX R60A
NGX R61	Mar 2006	Windows 2000 and 2003; Solaris 8, 9 and 10; RHEL 3.0 (2.4 kernel), IPSO 3.9, 4.0 and 4.0.1, SecurePlatform NGX
NGX R62	Nov 2006	Windows 2000 and 2003; Solaris 8, 9 and 10; RHEL 3.0 (2.4 kernel), IPSO 3.9 and 4.1, SecurePlatform NGX
NGX R65	Mar 2007	Windows 2000 and 2003; Solaris 8, 9 and 10; RHEL 3.0 (2.4 kernel), IPSO 4.1 and 4.2, SecurePlatform NGX

See also

★ VPN-1 Edge

References

1. Firewall and VPN Top Level Selected Products: Directory & Buyer’s Guide
2.
3.
4.
5.

External links

★ www.checkpoint.com — Check Point Software Technologies web site

★
★ FireWall-1 — information about the product although it is not being sold separately anymore.

★
★ VPN-1 UTM — UTM product version for small and medium business

★
★ VPN-1 Power — version for enterprise business

★
★ VPN-1 UTM Power — UTM product version for enterprise business

★ Check Point IPsec IKE Implementation details