Check Point Announces Immediate Availability of Integrity Clientless Security 3
New Release Defeats Spyware and Preserves Confidentiality for Enterprise Network Users Relying Upon Browser-based Network Access Points

Redwood City, CA - November 17, 2004—Check Point Software Technologies® Ltd. (NASDAQ: CHKP), the world leader in securing the Internet, today announced the immediate availability of Check Point Integrity™ Clientless Security 3, the latest version of the company's innovative solution for securing new network access methods and applications like SSL VPNs and web-based email. Integrity Clientless Security 3 makes security and privacy for new access methods even more manageable with new deployment and automated update features.

Without requiring installation of client software, Integrity Clientless Security 3 is unique in providing the four pillars of vital protection: detect and disable spyware, ensure session confidentiality, enforce security policy compliance before granting remote access, and help users and IT remediate security issues. As a result, Integrity Clientless Security prevents identity and password theft as well as the loss of sensitive or proprietary data.

"New IT tools that provide 'anywhere/anytime' access increase the productivity of enterprise users but they also increase the risk profile for the enterprise," said Frederick Felman, vice president of marketing, Check Point's Zone Labs® division. "With its ability to enforce corporate security policy, as well as to detect and disable spyware as a condition of network access, Integrity Clientless Security 3 makes SSL VPN and web application technology trustworthy."

New features in Integrity Clientless Security 3 that decrease the inherent risks of browser-based network access of the corporate infrastructure include:

• Simple Deployment and Maintenance Now provides automatic updates of its spyware removal engine, detection heuristics, and signatures.
• Complete Session Confidentiality Introduces a 'quarantine browser', the Integrity Secure Browser, which prevents sensitive and proprietary data exposure through file encryption and session cache cleaning. This is an especially useful safeguard for users of public PCs or kiosks.
• Cross-browser support Adds support for a wider variety of browsers with Mozilla, Netscape, and Opera joining existing support for Internet Explorer.

Together with the client-based solutions in Check Point's Integrity product family, Integrity Clientless Security delivers Total Access Protection (TAP) for the enterprise. With Total Access Protection, all enterprise network endpoints--employee and guest PCs, remote and local PCs, wired and wireless PCs--can be protected by Check Point's market-leading security solutions. Pricing, Availability and System Information

Integrity Clientless Security 3 is available now for immediate purchase. Pricing for Integrity Clientless Security varies depending upon volume purchased, configuration and application, with pricing beginning at $20 per user. In addition, Integrity Clientless Security is integrated with Check Point Connectra for secure and easy-to-deploy SSL VPN and is available for immediate purchase. Integrity Clientless Security 3 supports Windows-based servers running IIS and select third party SSL VPNs.

For more information about Integrity Clientless Security 3, Connectra and the complete portfolio of Perimeter, Internal and Web security solutions that Check Point offers, please visit www.checkpoint.com.

About Check Point Software
Check Point Software Technologies (www.checkpoint.com) is the worldwide leader in securing the Internet. It is the confirmed market leader of both the worldwide VPN and firewall markets. Through its Next Generation product line, the company delivers a broad range of intelligent Perimeter, Internal and Web security solutions that protect business communications and resources for corporate networks and applications, remote employees, branch offices and partner extranets. The company's Zone Labs (www.zonelabs.com) division is one of the most trusted brands in Internet security, creating award-winning endpoint security solutions that protect millions of PCs from hackers, spyware and data theft. Extending the power of the Check Point solution is its Open Platform for Security (OPSEC), the industry's framework and alliance for integration and interoperability with "best-of-breed" solutions from over 350 leading companies. Check Point solutions are sold, integrated and serviced by a network of more than 2,300 Check Point partners in 92 countries.

For Check Point
Media Contact:
Te Smith
Check Point Software Technologies
415/633-4833

Investor Contact:
Kelly Toney
Check Point Software Technologies
650.628.2050

Editor's Notes: ©2004 Check Point Software Technologies Ltd. All rights reserved.

Check Point, Application Intelligence, Check Point Express, the Check Point logo, AlertAdvisor, ClusterXL, Cooperative Enforcement, ConnectControl, Connectra, CoSa, Cooperative Security Alliance, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, IMsecure, INSPECT, INSPECT XL, Integrity, InterSpect, IQ Engine, Open Security Extension, OPSEC, Policy Lifecycle Management, Provider-1, Safe@Home, Safe@Office, SecureClient, SecureKnowledge, SecurePlatform, SecurRemote, SecurServer, SecureUpdate, SecureXL, SiteManager-1, SmartCenter, SmartCenter Pro, Smarter Security, SmartDashboard, SmartDefense, SmartLSM, SmartMap, SmartUpdate, SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SofaWare, SSL Network Extender, TrueVector, UAM, User-to-Address Mapping, UserAuthority, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Pro, VPN-1 SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 VSX, Web Intelligence, ZoneAlarm, Zone Alarm Pro, Zone Labs, and the Zone Labs logo, are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The products described in this document are protected by U.S. Patent No. 5,606,668, 5,835,726 and 6,496,935 and may be protected by other U.S. Patents, foreign patents, or pending applications.