We are using it for perimeter inbound and outbound detection.
It is running in an EC2 instance in AWS.
CloudGuard Network Security All-In-One
Check Point Software TechnologiesExternal reviews
237 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Does what it is designed for and matches what we have on-prem
What is our primary use case?
How has it helped my organization?
For the move to the cloud, normally, you adopt a cloud solution, but big companies like ours have to control the roles in place and keep the standards that we have on-prem. We adjust it to the way the cloud works, but we still have the traditional firewall, similar to on-prem. We have the same management capabilities. We have the logins. It is just a central way of managing.
It saves time for us. We adopted the cloud solution as much as we could, but in terms of security, we wanted to keep the same method that we were using for security, and we wanted to use the knowledge that we already had.
What is most valuable?
It matches what we have on-prem. We kept the same management and the same functionality that we were having on-prem. It has simplified things for us because there is no new dashboard to touch.
What needs improvement?
The relationship between AWS and Check Point could be better. We had issues related to the type of instance and how it interconnects with AWS or cloud-native solutions. We overcame the pain points that we had, and now, AWS is evolving in a way that will facilitate how Check Point works. Our pain points were minimized, but they were there.
There could be more capabilities around the management protocol itself. We deploy the boxes very easily with the software. We want automation. We are already using it to deploy instances in AWS regardless of whether it is Check Point or something else we use. Integration is already there, but there is a possibility to have more functionalities. We are in a good state, but there can be new features.
For how long have I used the solution?
I have been using CloudGuard Network Security for two years.
What do I think about the stability of the solution?
It is tricky to distinguish because we have the software and we have the instance. There is the tricky part of AWS not sharing some information around the instances where the software runs and then saying that it is a software issue and not sharing deeper details. Check Point struggles with having that information directly from AWS.
So, there is room for improvement if Check Point wants to be a native-use solution in AWS, for example, which is our main provider. It is tricky, and I understand. It is also about how Amazon or AWS manages their data centers. They do not disclose some information. In terms of throughput, performance, etcetera, they do have the numbers, but when it comes to some issues, nobody can explain or when an issue is from a network background, there is no explanation. Finger-pointing is not a solution.
There should be more sharing of information between them directly, not involving the customer. In the end, we were able to sort things out. We had to read between the lines. They were not disclosing exactly what was the problem. Check Point did not see any issues with the software, and in the end, it was about how the instances in a shared environment inside the AWS run and how they control the resources on each virtual machine that the customer runs. That is their way of doing business. AWS wanted to run it on a bigger box. In the end, I was able to overcome all the issues with a different instance type that was never proposed to us. It was a matter of the CPU generation that was being used on the instance. It was not the fact that the machine was not able to cope with it.
What do I think about the scalability of the solution?
That goes back to how the AWS services run because the software runs in any virtual box. It is exactly the same software that you can use in a physical box. We never had a need to use Autoscale so far. We have tested Autoscale. We have seen it working, but we never had the need. We are in a stable environment, and we foresee when it is needed ahead of time to avoid any bottleneck. It has been running without issues.
We have 12 active AWS versions worldwide. Three of them are the main data centers that we use. In every data center where we have AWS, we have at least different architectures of products, so our environment is quite big.
The management is standardized between all regions. They run exactly the same way with exactly the same purpose. It is standardized. We define the architecture and when there is a need, we have the solution already available.
How are customer service and support?
Over the last three years, I rarely used them. We did not face issues that needed support from Check Point. We were able to fix all the issues we had because there was either an upgrade available or a knowledge article available showing how to fix it. All our support cases are more around RMA.
How would you rate customer service and support?
Positive
What was our ROI?
The added value is not the software itself. The added value is the way we can easily change the capacity of a virtual box that we run the software on. Keeping the same software, we can change the VM capacity to higher or lower depending on the needs. The return on investment is the simplicity of being flexible in that way.
What's my experience with pricing, setup cost, and licensing?
It is the most expensive part of the product. There is a lot of room for improvement. Security comes with a price, but it is still a big chunk just for the service.
Which other solutions did I evaluate?
We tested the native solution of AWS, but we decided to go ahead with our own existing solution on-prem being reflected in the cloud environment. We already had the knowledge and expertise internally. The central management platform and logging were already there. A multitude of features that we were already using were common.
In terms of ease of use, everything in the cloud is new, so there is a learning curve. They are adjusting the layer features in AWS native tools, but Check Point has the advantage of knowledge. We already had familiarity with it, and Check Point itself has a good knowledge of the market. They are experienced in security solutions.
We have not been that exposed to AWS. We are very happy with the availability of Check Point and so forth. So far, when the biggest threats came, Check Point always reacted faster than any other.
What other advice do I have?
There is no real issue with the software itself. It does the job. It does what it was designed for. I can rate it a ten out of ten because it is exactly like the on-prem software physical appliance. There is no difference for us.
Cloudguard - your cloud security companion
What do you like best about the product?
CloudGuard's versatility and robust threat prevention stand out in securing diverse cloud environments.
What do you dislike about the product?
Limited visibility and complex setup are drawbacks in CloudGuard.
What problems is the product solving and how is that benefiting you?
CloudGuard tackles security concerns in cloud transitions, ensuring data control, threat prevention, and compliance. Its simplicity aids my company, securing our digital space without the complexity.
Manages traffic at the network level
What do you like best about the product?
It enhances the capabilities of GWLB by offering cutting edge threat prevention and security features. The satisfaction it brings is unparalleled.
What do you dislike about the product?
I find it lacking in terms of documentation and technical support. Facing issues or needing assistance the provided resources.
What problems is the product solving and how is that benefiting you?
CloudGuard Network Security solves the problem of balancing traffic flow in our business. This leads to an reliable network infrastructure.
Awesome security with an awesome cloud guard experience.
What do you like best about the product?
With the help of an integration with GWLB, CloudGuard Network Security offers powerful threat-prevention capabilities. It incorporates firewalling, an IPS, and application control technologies to quickly identify and stop known and unidentified threats. This helps protect your cloud workloads by ensuring that harmful traffic is kept out of your VPC. It was totally user friendly, this is an important aspect of cloud guard.
What do you dislike about the product?
I have nothing against anything. Totally content.
What problems is the product solving and how is that benefiting you?
By combining the features of CloudGuard Network Security with Gateway Load Balancer, it improves the security of their AWS systems. It provides me with secure access management, comprehensive network visibility, and excellent threat prevention.
CloudGuard Network Security with the advantages of Gateway Load Balancer
What do you like best about the product?
CloudGuard Network Security integrates with GWLB to provide robust threat-prevention capabilities. It includes firewalling, an intrusion prevention system (IPS), and application control features to detect and block known and unknown threats in real-time. This ensures that malicious traffic is prevented from reaching your VPC and helps safeguard your cloud workloads
What do you dislike about the product?
everything was cool and fine, like With the integration of CloudGuard Network Security for Gateway Load Balancer, GWLB's capabilities are improved by introducing cutting-edge threat prevention and security features
What problems is the product solving and how is that benefiting you?
It increase the security of their AWS environments by integrating Gateway Load Balancer's capabilities with CloudGuard Network Security's. It offersme safe access management, scalable and effective threat prevention, and thorough network visibility and control.
Fair price, good support, and effective for security and operational efficiency
What is our primary use case?
We use it for network protection. We're using its latest version.
How has it helped my organization?
We're benefiting from the solution. We're protecting all of our assets with it. It's a very good security solution. We don't face any big challenges or problems.
What is most valuable?
Security effectiveness is the most valuable feature. Operational efficiency, reporting, and support are also good.
What needs improvement?
The SD-WAN could be better.
For how long have I used the solution?
I have been using this solution for more than ten years.
How are customer service and support?
Their support is very good. I'd rate them an eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We have been using the same solution from the beginning.
How was the initial setup?
The initial setup is very easy. It took two to four hours.
We have a hybrid cloud deployment. We have Azure and AWS.
What about the implementation team?
We used an integrator. Our experience with them wasn't great.
What was our ROI?
We've seen an ROI with this solution.
What's my experience with pricing, setup cost, and licensing?
It's not very expensive. It isn't very cheap either. Its price is okay. It depends on how much money you have. It might be expensive for some companies.
Its licensing is on a yearly basis.
Which other solutions did I evaluate?
We evaluated solutions from Forcepoint, Cisco, and Fortinet. We went for it because of its security effectiveness and operational efficiency.
What other advice do I have?
It's the best solution to use. You can trust it. We don't have any issues with it. It works fine.
Overall, I'd rate it a ten out of ten.
Amazing experience with cloudguard with amazing security
What do you like best about the product?
User friendly interface, Strong security to secure the network.
What do you dislike about the product?
There are no any dislikes from my side. Totally satisfied
What problems is the product solving and how is that benefiting you?
It bring best security to the enterprise network with good inbuilt features
CloudGuard Network Security Review
What do you like best about the product?
I like this product from checkpoint to use the same kind of protection that we use on the firewall, such as IPS protection and antivirus protection. The product is very user-friendly. This product is easy to implement and easy to use. Another great feature is deep traffic analysis and a comprehensive reporting solution for presenting to the board.
What do you dislike about the product?
I don't have any issue with this product.
What problems is the product solving and how is that benefiting you?
CloudGuard provides the best security for networks. The brand is well known in the security industry, so we can easily trust on that. This product has excellent policy management and central control.
CloudGuard is a great option for cloud hosted firewall
What do you like best about the product?
Very good intrusion and threat detection. Integrates well with the cloud we use (Azure) and works well at local branches. Flexible enough to deploy from large centralized data centers to IoT/OT devices to local branches. Logging is exceptional and one of the best experiences I have noticed in this space.
What do you dislike about the product?
Expensive -- depending on requirements. Experience is disjointed at times and you can tell everything hasn't been fully integrated in smart console. Policy creation and editing is tedious and difficult to see.
What problems is the product solving and how is that benefiting you?
CheckPoint CloudGuard is an excellent choice for organizations that need a cloud-based firewall solution. I had a great experience from contract negotiation to implementation. Support was excellent, consulting is top-notch, and the product speaks for itself. We used this solution exclusively with Azure.
The solution to secure the networks of your architecture deployed in the cloud.
What do you like best about the product?
Simple and quick solution to deploy and integrate
What do you dislike about the product?
The solution requires having clear ideas of what you want to achieve.
What problems is the product solving and how is that benefiting you?
I needed to have visibility of what was happening in the infrastructure networks deployed in the cloud.
With this solution, I have that visibility, and I can protect it.
With this solution, I have that visibility, and I can protect it.
showing 51 - 60