Download PDF

CheckPoint Software > Case Studies > SE2 Enhances Data Security with Check Point SandBlast

SE2 Enhances Data Security with Check Point SandBlast

Technology Category

Cybersecurity & Privacy - Intrusion Detection
Cybersecurity & Privacy - Malware Protection

Applicable Industries

Glass
National Security & Defense

Applicable Functions

Maintenance
Quality Assurance

Use Cases

Intrusion Detection Systems
Tamper Detection

Services

Testing & Certification

The Challenge

SE2, a third-party administration services provider to major insurance carriers globally, faced a significant challenge in protecting its clients' highly sensitive financial data from being leaked, exfiltrated, or held for ransom. The company was also tasked with proactively preventing unknown malware and zero-day threats. The task of keeping up with new threats was a constant challenge, consuming a significant portion of the security team’s time. They monitored logs, reviewed events, and simultaneously tried to advance new security projects. However, their efforts seemed insufficient. The existing sandboxing solution took up to 10 minutes to alert the team after malware hit a workstation, which was too late to stop, resulting in additional effort to remediate any impact.

About The Customer

SE2 is a third-party administration services provider to major insurance carriers around the globe. The company is headquartered in Topeka, Kansas, and provides services to life and annuity insurance carriers, helping them launch products rapidly, improve efficiencies, and maximize profits while improving the customers’ experience and enabling a shift to a variable cost model. As part of their services, they maintain large stores of sensitive client information, financial data, and proprietary analysis information.

The Solution

SE2's security team evaluated several solutions, including Check Point SandBlast. After running the solutions simultaneously in detect mode, they found that SandBlast outperformed the competition by catching all instances of threats. With SandBlast zero-day protection deployed, SE2 gained superb threat prevention capabilities. The solution uses OS-level inspection to examine a wide range of file types and catch threats before they are deployed. In addition, patented deep CPU-level inspection stops even the most dangerous attacks before they can escape detection. SandBlast also provides centralized visibility, allowing the team to filter and see all traffic and malware that it is preventing. The team can dive into the sandbox analysis capability and see specific details—such as screenshots of what was opened, registry keys, and malware command-and-control addresses.

Operational Impact

The deployment of Check Point SandBlast has resulted in a significant improvement in SE2's security operations. The solution's superb threat prevention capabilities have reduced the time spent on tracking down alerts, as machines are not being infected as frequently. The need to activate the incident response plan has also become rare. The solution has provided SE2 with clearer, centralized visibility into threats, with detailed reporting capabilities. This has simplified management by consolidating everything under a single pane of glass, eliminating the need to manage multiple appliances and policies.

Quantitative Benefit

Significant reduction in time spent tracking down alerts due to effective threat prevention
Rare need to activate the incident response plan due to reduced infections and attacks
Real-time threat detection and prevention, compared to the previous 10-minute delay