Which Check Point software blade provides protection from zero-day and undiscovered threats?

The Firewall blade controls network access using stateful inspection and rule-based policies but does not perform behavioral analysis for unknown or zero-day threats.

Threat Emulation operates as a sandbox solution that runs suspicious files and documents in a virtual environment to observe their behavior, enabling detection of zero-day exploits and undiscovered malware that signature-based tools cannot identify. It analyzes files before they reach the end user and blocks threats that have no known signatures.

Application Control identifies and manages application usage on the network but does not analyze files for undiscovered malware or zero-day exploits.

Threat Extraction sanitizes files by removing potentially malicious active content before delivery, but it does not detect zero-day threats through behavioral sandbox analysis.