Explanation
References:

The IPS Software Blade provides a complete Intrusion Prevention System security solution, providing comprehensive network protection against malicious and unwanted network traffic, including:
* Malware attacks
* Dos and DDoS attacks
* Application and server vulnerabilities
* Insider threats
* Unwanted application traffic, including IM and P2P
Reference: https://www.checkpoint.com/products/ips-software-blade/

Explanation
Anti-Bot
The Need for Anti-Bot
There are two emerging trends in today's threat landscape:
* A profit-driven cybercrime industry that uses different tools to meet its goals. This industry includes cyber-criminals, malware operators, tool providers, coders, and affiliate programs. Their "products" can be easily ordered online from numerous sites (for example, do-it-yourself malware kits, spam sending, data theft, and denial of service attacks) and organizations are finding it difficult to fight off these attacks.
* Ideological and state driven attacks that target people or organizations to promote a political cause or carry out a cyber-warfare campaign.
Both of these trends are driven by bot attacks.
A bot is malicious software that can invade your computer. There are many infection methods. These include opening attachments that exploit a vulnerability and accessing a web site that results in a malicious download.

Explanation
To enable Identity Awareness:
* Log in to SmartDashboard.
* From the Network Objects tree, expand the Check Point branch.
* Double-click the Security Gateway on which to enable Identity Awareness.
* In the Software Blades section, select Identity Awareness on the Network Security tab.
The Identity Awareness Configuration wizard opens.
* Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
* AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.
* Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
References: