Check Point CCME key terms

A security architecture that connects on-premises, cloud, and remote environments through multiple enforcement points managed as one fabric, so policies follow workloads and users instead of staying tied to a single perimeter device.

A Check Point enforcement device or virtual instance that inspects traffic, applies access and threat-prevention policy, and enforces identity-based rules at a network location such as a branch, data center, or cloud VPC.

Any component that actually applies a security rule to traffic or access, including gateways, cloud-native firewalls, and endpoint agents, as distinct from the management plane that defines the rules.

A single console and policy repository for defining, distributing, and auditing rules across on-premises gateways, cloud environments, and remote users, reducing inconsistent configurations and duplicated rule sets.

A set of gateway inspection blades covering intrusion prevention, application control, antivirus, anti-bot, and reputation services, applied to traffic after access rules allow it, to block known and zero-day attacks.

An inline inspection capability that detects and blocks malicious traffic patterns and exploit attempts in real time, using signatures and behavioral protections rather than only alerting after the fact.

A policy capability that identifies applications regardless of port or protocol and allows, blocks, or limits them, including granular actions for risky categories and specific application features.

A Check Point architecture that pools multiple security gateways under a single virtual system, distributing traffic across them and scaling inspection capacity horizontally without redesigning the security policy.

A technology that lets one physical gateway host many independent virtual security systems, each with its own policy and administrator, commonly used for multi-tenant or segmented environments.

Check Point's virtual security gateway offering for public and private clouds, providing firewall and threat prevention inside cloud networks and integrating with cloud-native constructs such as VPCs and load balancers.

Continuous assessment of cloud configurations against benchmarks and best practices to find exposed storage, permissive identities, and missing logging before attackers exploit them.

Runtime and image-level security for virtual machines, containers, and serverless functions, covering vulnerability scanning, behavioral threat detection, and response actions inside cloud environments.

Secure Access Service Edge converges network connectivity and security services such as secure web gateway, firewall as a service, and zero trust access into a cloud-delivered model that follows users wherever they work.

An access model that grants users and devices the least privilege needed for a specific application after continuous identity and posture checks, rather than trusting anyone based on network location.

A cloud or on-premises service that inspects and filters outbound web traffic, enforcing acceptable-use policy and blocking malicious sites, phishing, and data exfiltration attempts for users on any network.

Check Point's endpoint protection product combining antivirus, anti-ransomware, exploitation prevention, and forensic investigation on laptops and servers, managed from a cloud console.

Continuous monitoring of endpoint activity with behavioral analytics, alerting, and response actions such as isolating a host or killing a process, used to contain incidents that evade preventive controls.

A cloud email and collaboration security service that inspects messages, attachments, and links before delivery, blocking phishing, malware, and account takeover attempts targeting productivity suites.

A unified web interface for managing Check Point security estates, including gateways, cloud accounts, endpoints, and subscriptions, giving administrators consolidated visibility and policy control across products.

A consolidated security platform that brings prevention, visibility, and management together across network, cloud, and user environments, positioned as the central pillar of Check Point's product portfolio.

Check Point's network security appliance and virtual gateway family for data centers and branches, delivering firewall, threat prevention, and secure connectivity in a range of performance tiers.

The practice of continuously discovering, prioritizing, and remediating exploitable weaknesses across attack surfaces, combining asset visibility, vulnerability context, and threat intelligence to focus effort on risks that matter most.

Discovery and monitoring of an organization's internet-facing assets, including unknown or shadow IT systems, to find exposed services and misconfigurations before adversaries do.

Ranking findings by exploitability, business criticality, and threat activity so remediation teams address the exposures most likely to be used against them instead of working from raw severity scores alone.

Curated data about adversaries, campaigns, infrastructure, and vulnerabilities that is fed into security controls and analyst workflows to improve detection and blocking decisions.

Check Point's collaborative threat intelligence network that aggregates data from deployed sensors and research teams, distributing protections and reputation data to subscribed products worldwide.

Observable artifacts such as malicious file hashes, domains, IP addresses, or registry keys that suggest an intrusion, used to detect, block, and hunt for adversary activity across environments.

Protecting artificial intelligence systems and their data from prompt injection, model theft, poisoning, and unsafe output, while also using AI to accelerate detection and response in security operations.

A model in which products share locally observed threat data with a global service and receive protections generated from other customers' encounters, shortening the window between attack discovery and blocking.

The vendor's professional and support offerings, including design and deployment assistance, health checks, managed security services, and technical support tiers that map to customer environments and response needs.

Structured learning paths and exams that validate administrator and engineer skills across Check Point products, from entry-level security administration to advanced architecture and troubleshooting credentials.

A team and facility responsible for continuous monitoring, triage, and response to security events, typically relying on correlation, threat intelligence, and automation to reduce mean time to respond.