http://secureknowledge.checkpoint.co....do?id=skI2646 Check Point Malicious Activity Detection (CPMAD)
i did find some articles to say that it tends to chew a fair bit of memory but there is a major lack of materials/resources on this.
Aparently it is also intergrated within SmartDefence ( I think)
HTH