3GSM: Check Point launches GPRS firewall

Check Point Software Technologies will unveil its first product for securing data-centric mobile-phone networks at the 3GSM World...

Check Point Software Technologies will unveil its first product for securing data-centric mobile-phone networks at the 3GSM World Congress in Cannes today.

The software, dubbed FireWall-GX1, protects the Internet Protocol (IP) infrastructure a mobile phone operator needs to offer data services over a GPRS or 3G network. It is the first product in a new Check Point wireless security product family, said Jerry Ungerman, Check Point's president.

"The advent of data services is moving operators to look at security. FireWall-GX1 is to provide the beginnings of what is going to secure wireless networks worldwide," Ungerman said, adding that the firewall product was developed by Check Point in close cooperation with partner and network vendor Nokia.

GPRS is an add-on for GSM mobile-phone networks that allows wireless packet-based data transmissions at about the speed of a conventional PC modem. GPRS networks are being launched around the world. 3G networks, expected to be widely deployed within a couple of years, allow much faster data-transfer rates.

FireWall-1GX prevents malformed and potentially malicious data packets from entering the operator's network, enforces the integrity of connections when handed off between networks, and monitors traffic and provides tracking for troubleshooting and tracing of intrusion attempts, Check Point said. The software is available for Nokia's platform, while support for other platforms will be available soon, Check Point said.

Mobile data networks need protection, as "the threat is the same as in the wired world," according to Ungerman. "So far the wireless world has been voice, now it is becoming data. You've got hackers and data being transferred. That is why operators are looking at security now."

One of the world's largest mobile phone operators has already installed the firewall software on some of its systems, Ungerman said. He declined to name the operator, but hinted that it could be Vodafone. That could mean a swift start in a new market where Check Point has identified 300 prospective customers.

"Our preliminary indications are that there are over 300 wireless carriers in the world that could each buy $1m of product from us, so we are looking at a $300m market initially," Ungerman said. "Spending by carriers will be about $1m on average, and that is a conservative estimate. This is something they can afford, it is a small percentage of their capital spending (for data services)."

Bernt Ostergaard, director at analyst firm Giga Information Group, said a firewall makes sense, but wonders if it will be effective.

"The product announcement sounds logical. We're going to have data transferred on a GPRS network, so we need a firewall. There is no doubt a need for security and some kind of firewalling is needed, but I am not convinced that the architectural decision is right," said Ostergaard. "It is dangerous to make an analogy between fixed systems and wireless systems."

Installing firewall software in front of an operator's IP infrastructure is merely the start, according to Ungerman.

"This is only a piece of the puzzle. There is a lot more technology we will bring to the market that will secure the entire wireless world, including down to the handset," he said. "When we get to 3G and to a true data device with enough bandwidth where you will download data, that's when you will need full-blown security."

Read more on Wireless networking