Cloud security has unified hybrid policies and now protects critical energy workloads continuously
What is our primary use case?
My usual use cases for Check Point Cloud Firewall (formerly CloudGuard Network Security) involve onboarding as an energy company, where it acts as the cloud-native security platform that extends the traditional firewall and threat prevention capabilities into public cloud environments like AWS, Azure, or GCP. We set up a virtual security gateway inside our cloud network to provide unified policy management, advanced threat prevention, segmentation for the network, and visibility across the cloud and system. From an administrator standpoint, it protects the workload, inspects traffic, and enforces the necessary rules. Day-to-day, my responsibilities include logging, monitoring, and policy control for Check Point Cloud Firewall (formerly CloudGuard Network Security), making it a strong fit for our organization, especially in the energy sector where we need critical systems to stay up to date throughout twenty-four seven.
For secure cloud migration, Check Point Cloud Firewall (formerly CloudGuard Network Security) integrates seamlessly across AWS, Azure, and GCP, supporting auto-scaling, native logging, and automation, making it a strong fit for our organization while modernizing our infrastructure and maintaining strict compliance requirements. Using this tool helps us avoid complications like needing to prove compliance for SOC 1 or SOC 2, as these platforms are already compliant.
What is most valuable?
I would say Check Point Cloud Firewall (formerly CloudGuard Network Security) is valuable due to its hybrid cloud security features. It offers granular policy management across the on-premises and cloud environments, giving administrators consistent control for configuration drift. We need to change the policy and the inbound and outbound traffic settings, indicating what traffic must be blocked or allowed, and this capability with Check Point provides significant input into our security strategy.
Check Point Cloud Firewall (formerly CloudGuard Network Security) provides unified security management across both hybrid clouds and on-premises environments. Unified security management affects my security operations positively, as we maintain critical systems on the cloud that require strong security and air gap networks. This cloud-native routing and policy installation helps close gaps in protecting critical applications and environments from exposure to the public cloud.
From an administrator's perspective, Check Point Cloud Firewall (formerly CloudGuard Network Security) enhances our organization with clearer and more intuitive logging, making decisions easier to understand without deep investigation. In the CloudGuard UI, I can see which threats have triggered alerts, and this information is available on the unified dashboard that provides details of the threat analysis upon alert. As a small team, we log into the console to check specific alerts for high or low network usage or machine shutdowns. If needed, I tune the configuration policy, and the visualizing tools with reporting functionality simplify tracking changes made on the firewall, including the relevant source IP or device names. We ingest logs into our SIEM for detailed oversight, which allows us to monitor any administrative changes.
Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk. We clearly understand our threat landscape and the associated risks. Onboarding the CloudGuard solution directly into our cloud environment has significantly lowered the risks throughout the network and it is easy to launch. When we assess our security posture with third-party assessments, we gain granular visibility into our network pre- and post-CloudGuard installation, showing how we have addressed significant risks and secured vulnerabilities.
What needs improvement?
I find troubleshooting a bit challenging with Check Point Cloud Firewall (formerly CloudGuard Network Security); one area needing improvement is log clarity, as sometimes policy installation takes longer than expected, and resolving cloud-native routing conflicts requires advanced knowledge due to the differences in how AWS and GCP operate.
The UI is significantly good and user-friendly, but adding more advanced features to the reporting perspective, especially concerning administrative changes, would be beneficial. However, these points are not deal-breaking feedback; they would just be beneficial for future releases.
For how long have I used the solution?
I have been experienced with Check Point Cloud Firewall (formerly CloudGuard Network Security) for five to seven years throughout my career because I need to check the logs for what is coming in, setting up the policy, and I have been experienced with the firewall on my current job as well. Any traffic that needs to be allowed or any application that needs to be allowed is configured through the firewall. The inbound and outbound traffic to the network is configured through the firewall.
Specifically, I have been working with Check Point Cloud Firewall (formerly CloudGuard Network Security) for four to five years.
What do I think about the stability of the solution?
For reliability, I note that Check Point Cloud Firewall (formerly CloudGuard Network Security) maintains ninety-nine point nine percent uptime and availability, providing us nearly a hundred percent uptime with constant traffic monitoring. Although it may occasionally experience downtime, it remains strong in both reliability and scalability.
Regarding improvements in reliability and stability, I do not see any need as everything performs well. No improvements are necessary in the areas of reliability and stability; they have been consistently good.
What do I think about the scalability of the solution?
Regarding scalability, Check Point Cloud Firewall (formerly CloudGuard Network Security) proves efficient; I find no issues scaling up as our growing company sees increased traffic. It is capable of managing the increased load and performs well as our needs expand.
How are customer service and support?
I have opened a troubleshooting ticket for Check Point Cloud Firewall (formerly CloudGuard Network Security), and so far, I have had a positive experience; the support team usually responds within twenty-four hours, and they escalate cases, providing instant feedback for priority issues. In urgent situations, I can call and receive support promptly, receiving recommendations or guidance for the issues we encounter.
I would rate the technical support of Check Point Cloud Firewall (formerly CloudGuard Network Security) as eight out of ten.
Which solution did I use previously and why did I switch?
On the POC, I looked at SonicWall and Palo Alto firewalls as competitors. We found Check Point Cloud Firewall (formerly CloudGuard Network Security) to be better because it has a robust threat prevention system, and onboarding is straightforward compared to SonicWall. We are a small security team, and we prefer not to rely on a security operation center that would help narrow down issues. It takes just a few clicks to bring the firewall up and running, allowing us to set up policies without requiring complicated knowledge or extensive training. In contrast, using Palo Alto and SonicWall requires specific training for policy creation.
I have worked with Palo Alto and SonicWall firewalls but we found that Check Point Cloud Firewall (formerly CloudGuard Network Security) offers a better pricing standpoint and security solution overall.
How was the initial setup?
I participated in the initial setup of Check Point Cloud Firewall (formerly CloudGuard Network Security). The initial setup of Check Point Cloud Firewall (formerly CloudGuard Network Security), from an integration standpoint, is straightforward. We began with vendor searches, narrowing down to three candidates, including SonicWall and Check Point.
After moving forward with Check Point Cloud Firewall (formerly CloudGuard Network Security), we contacted them to set up a cloud VM installation, which is quite straightforward. Coordination with their representative involves scheduling calls for setting up policies and traffic management, and we test it in the QA environment before moving to production with all necessary policy modifications.
What about the implementation team?
I continue to collaborate with the Check Point Cloud Firewall (formerly CloudGuard Network Security) team to ensure everything runs smoothly, and there is always room for improvement, especially as we reach out to them for support or new features.
What's my experience with pricing, setup cost, and licensing?
We have encountered a few subscription-based licensing models for the virtual gateway and security enablement. We have opted for a three-year contract with fixed pricing for the CloudGuard cost structure, which has enterprise-grade capabilities. Although the pricing is slightly high for smaller organizations, it offers enterprise-level security, indicating a need for improvement in the pricing model.
Which other solutions did I evaluate?
In making the choice between the three products, we prioritize managing risk and the threat landscape, along with compliance and reporting capabilities. Pricing is the first consideration, followed by how well each solution meets our compliance needs, and finally, the reporting capabilities to match enterprise-level requirements.
What other advice do I have?
I have given Check Point Cloud Firewall (formerly CloudGuard Network Security) an overall review rating of ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Offers straightforward licensing and excellent technical support
What is our primary use case?
My main use cases for CloudGuard Network Security are to scale the technology for protecting and filtering traffic within AWS and Azure environments.
The main challenge I was looking to address by implementing CloudGuard Network Security was the need to establish a firewall on our cloud perimeter for enhanced security.
How has it helped my organization?
The flexibility to rebuild the firewall in CloudGuard Network Security has helped our organization eliminate downtime.
CloudGuard Network Security has improved our organization by allowing us to easily deploy firewalls from the cloud wherever we might need them.
What is most valuable?
The most valuable feature I have found in CloudGuard Network Security is the flexibility to rebuild the firewall as needed.
What needs improvement?
CloudGuard Network Security could be improved in the area of upgrading in place.
For how long have I used the solution?
I have been working with CloudGuard Network Security for five years.
What do I think about the scalability of the solution?
The scalability of CloudGuard Network Security is very good and we can scale it as needed.
How are customer service and support?
Check Point's service and tech support are very good, especially since we have access to their Diamond-level support. I would rate the support as a ten out of ten.
How would you rate customer service and support?
What's my experience with pricing, setup cost, and licensing?
I find the pricing and licensing of CloudGuard Network Security to be pretty straightforward.
What other advice do I have?
The main benefit we have seen from using CloudGuard Network Security is the ability to filter traffic by URL. We realized these benefits approximately six months after deployment.
Unified management of the firewall has positively affected our security operations by making it easy to manage from one place.
My advice for those evaluating CloudGuard Network Security is to remember that licensing is critical, so ensure that central licensing is configured properly.
Overall, I would rate CloudGuard Network Security as a ten out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Easy-to-use threat prevention and cloud network security solution with great functionality!
My company has been using Check Point's CloudGuard IaaS security gateway and security management for advanced threat prevention, cloud network security and secure VPN connectivity between my corporate network and my AWS environment (tens of VPCs).
It is easy to learn, easy to deploy, easy to maintain, has the highest threat catch-rate to the best of my knowledge (and I compared it extensively with competitors) and provides extremely high value to me, my team and my company.
It is also natively integrated with AWS services, including VPC Ingress Routing, Transit Gateway, VPC Flow Logs, Security Hub, etc., making for a great user experience and definitely "better together" with AWS.
Thanks Check Point!