To create an access role:
The Access Role window opens.
Your selection is shown in the Networks node in the Role Preview pane.
A window opens. You can search for Active Directory entries or select them from the list.
You can search for AD entries or select them from the list.
The access role is added to the Users and Administrators tree.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Access-Roles.htm

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Tracking-Options.htm

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/Topics-TPG/The_Check_Point_Threat_Prevention_Solution.htm
"Check Point Antivirus Software Blade prevents and stops
threats such as malware, viruses, and Trojans from entering
and infecting a network"
Also here -https://www.checkpoint.com/downloads/products/antivirus-datasheet.pdf

Hiding multiple IP addresses behind one, gateway, IP address requires PAT to differentiate between traffic.