Check Point Software Technologies will unveil its first product for
securing data-centric mobile-phone networks at the 3GSM World
Congress in Cannes today.
The software, dubbed FireWall-GX1, protects the Internet Protocol
(IP) infrastructure a mobile phone operator needs to offer data
services over a GPRS or 3G network. It is the first product in a
new Check Point wireless security product family, said Jerry
Ungerman, Check Point's president.
"The advent of data services is moving operators to look at
security. FireWall-GX1 is to provide the beginnings of what is
going to secure wireless networks worldwide," Ungerman said, adding
that the firewall product was developed by Check Point in close
cooperation with partner and network vendor Nokia.
GPRS is an add-on for GSM mobile-phone networks that allows
wireless packet-based data transmissions at about the speed of a
conventional PC modem. GPRS networks are being launched around the
world. 3G networks, expected to be widely deployed within a couple
of years, allow much faster data-transfer rates.
FireWall-1GX prevents malformed and potentially malicious data
packets from entering the operator's network, enforces the
integrity of connections when handed off between networks, and
monitors traffic and provides tracking for troubleshooting and
tracing of intrusion attempts, Check Point said. The software is
available for Nokia's platform, while support for other platforms
will be available soon, Check Point said.
Mobile data networks need protection, as "the threat is the same as
in the wired world," according to Ungerman. "So far the wireless
world has been voice, now it is becoming data. You've got hackers
and data being transferred. That is why operators are looking at
security now."
One of the world's largest mobile phone operators has already
installed the firewall software on some of its systems, Ungerman
said. He declined to name the operator, but hinted that it could be
Vodafone. That could mean a swift start in a new market where Check
Point has identified 300 prospective customers.
"Our preliminary indications are that there are over 300 wireless
carriers in the world that could each buy $1m of product from us,
so we are looking at a $300m market initially," Ungerman said.
"Spending by carriers will be about $1m on average, and that is a
conservative estimate. This is something they can afford, it is a
small percentage of their capital spending (for data
services)."
Bernt Ostergaard, director at analyst firm Giga Information Group,
said a firewall makes sense, but wonders if it will be effective.
"The product announcement sounds logical. We're going to have data
transferred on a GPRS network, so we need a firewall. There is no
doubt a need for security and some kind of firewalling is needed,
but I am not convinced that the architectural decision is right,"
said Ostergaard. "It is dangerous to make an analogy between fixed
systems and wireless systems."
Installing firewall software in front of an operator's IP
infrastructure is merely the start, according to Ungerman.
"This is only a piece of the puzzle. There is a lot more technology
we will bring to the market that will secure the entire wireless
world, including down to the handset," he said. "When we get to 3G
and to a true data device with enough bandwidth where you will
download data, that's when you will need full-blown security."