Check Point Infinity Portal offers a centralized platform for different Check Point products, such as Quantum and CloudGuard. You can integrate all of the products and use them from a single platform.

Having everything integrated in one place makes it easier because you don't have to access everything from separate software. For example, you would normally require a different SmartConsole server to push policies to Check Point's next generation firewall. If you integrate Smart-1 Cloud, you can manage it from Check Point Infinity Portal, as well as mobile device management, Harmony Email and Collaborations, and Check Point Infinity Playblocks.

We have seen a faster response time and reduced effort from the network and security engineers while going through logs. They don't have to go through logs that block, and we also get insight into how many people from which country are targeting our servers. This kind of insight is available beforehand without digging into logs from our email address.

Since the automation is in place, there is less time needed and fewer engineers are required to check the logs, as well as report incidents and generate logs.

One point that led to the nine rating was an incident about two months ago where our inbound and outbound mail were going to quarantine and we could not do anything. We did not get any response from the Check Point team indicating that there was a problem with the HEC, when there actually was one. There needs to be an improvement for this.

The customer support is reliable and prompt.

The most common use case for Check Point Infinity is for managing all my gateways in one place and deploying everything from one place.

The Infinity portal combines all Check Point solutions in one place, including the endpoint, SASE, and the SMP.

I am using real-time threat intelligence in Check Point Infinity with ThreatCloud and AI.

The analytics capabilities in Check Point Infinity are very good, and it provides an all-in-one solution.

Something that should be better in Check Point Infinity is the customization, though I don't have any specific suggestions at this time.

Check Point Infinity is a very stable solution; I don't remember experiencing any downtime.

It is a scalable solution.

I would rate technical support from Check Point a perfect score because when I call them, they answer before I could breathe.

My initial setup of Check Point Infinity was very easy. Setting up the gateway and connecting it to the Infinity portal was very simple.

The price of the solution is very fair because it provides good protection at a reasonable cost.

I'm not sure if I purchased the solution through the vendor or AWS marketplace.

I don't use the automations in Check Point Infinity.

I am a customer using Check Point products.

On a scale of 1-10, I rate Check Point Infinity a 9.

We have main offices in Brazil and branch offices in each of our state capitals. So, we have 26 branch offices in total. Each branch office used to have a small Check Point appliance. We're moving away from that model; they won't access the internet directly anymore. Instead, they'll pass through a central kind of star network.

We use two levels of firewalls: an external firewall and an internal firewall. We have a DMZ between these two firewall clusters with high availability. Each firewall has IPS, web content filtering, bot protection, and antivirus enabled. We'll contract some of those features as part of an MSSP service. We don't buy products or appliances directly.

Our procurement requirements allow other manufacturers to participate. The decision isn't ours or the integrator's – it's how we buy in Brazil. The vendor offering the lowest price for a product that meets the requirements wins. We cannot choose a specific brand or product name.

Before contracting the MSSP, we had an IPS (I don't remember if it was Check Point). However, we only detected signatures; we weren't confident enough to block them due to false positives. For the past 10 years, we have had a procedure where we get new signatures weekly, test for false positives, and set exclusions. Most relevant signatures are now in use, so the IPS is an important layer of protection for us. So, Check Point Infinity's threat prevention capabilities benefitted our organization.

We haven't had any problems with integration, but we don't need many integrations. The main one is with SIEM. The bigger issue is that we use ArcSight as our SIEM. It's very difficult to migrate from one SIEM solution to another.

We are on the journey of moving to the cloud right now. We had on-premises services, but we are going to move to a cloud environment where we have Azure and AWS Cloud. Because of this, the new solution will have virtual firewalls at the edge of each cloud.

I like all the features because within the suite we use, it's sometimes hard to know exactly which features are being used and where they come from.

But, the main feature is the integration with Active Directory, where you can allow or deny traffic based on users or groups of users from Active Directory.

We have had some performance issues. Because of this, we had to redirect traffic to be analyzed by other appliances. I'm not sure if higher-end appliances would still have this problem.

We also experienced issues with deploying new configuration versions to all branch appliances, but we won't be using this setup anymore. We don't know exactly how the virtual appliances will work to protect the cloud. It's a new thing for us.

I have been using it for 14 years now.

I would rate the stability an eight out of ten. We've had some problems in the past.

We had an issue with scalability before. We think the technology changes caused by mobile traffic impacted our appliances. Since we're buying a bigger solution now, I think we won't have this problem this time.

Check Point engineers were involved, and they suggested we use a virtual appliance to remove this traffic from our physical appliance.

We've had some difficult experiences sometimes, such as we have to send again files and information.

We had another solution a long time ago. It was a small, free solution, very difficult to compare. We've used Check Point for a long time, so it's impossible to make a fair comparison.

We also use Azure Sentinel, but we do not receive logs from security solutions. It's possible we'll migrate to Azure Sentinel in the future. Nowadays, it's difficult to use a SIEM that is local and not cloud-based.

The initial setup will be done by the MSSP provider, not us. They'll handle the appliances, configuration, and integration. When we pay, everything must be working perfectly, and the documentation must be delivered to us.

The first deployment took about nine months because we changed the active tool. The second deployment was a bit different and took about six months. This timeline includes everything: equipment and features, but it also has solutions that aren't exactly Check Point firewalls, like the WAF (Web Application Firewall) or integration with SIEMs—also, the implementation of use cases in the SIEM.

There are two teams involved in the deployment: our team and the supplier's team. Usually, there are three or four people from the supplier and the same number from us.

It's maintained by the supplier. We have an SLA (Service Level Agreement) in place. They install, maintain, and manage the entire solution. We are a user of the solution; we open tickets to them, and they make the configurations. They're also responsible for availability and other aspects.

I would recommend it. However, Check Point could improve its tech support systems. If they had more engineers in Brazil, I think it would be good.

Overall, I would rate the solution a nine out of ten.