What Check Point technologies deny or permit network traffic?

Application Control and DLP are software blades focused on application identification and data loss prevention, not the core mechanisms that permit or deny network traffic.

Packet Filtering, Stateful Inspection, and Application Layer Firewall are the three primary Check Point technologies that enforce traffic control decisions. Packet filtering evaluates headers, stateful inspection tracks connection state, and the Application Layer Firewall inspects payload content - together they form the complete traffic enforcement stack in Check Point gateways.

SandBlast is a threat emulation and extraction solution, and MPT (Mobile Threat Prevention) targets mobile endpoints - neither are traffic permit/deny enforcement technologies.

IPS detects and prevents intrusion attempts as a secondary layer, and Mobile Threat Protection targets mobile devices - these are not the foundational technologies that make traffic permit/deny decisions.