Check Point Exposure Management

What do you like best about the product?

I find Check Point SASE valuable for its ability to eliminate the need to route all remote traffic through a central data center, replacing fragmented point products with a cloud-native platform. I like that administrators can manage security policies from a single cloud-based dashboard instead of handling multiple security appliances and firewalls. The setup process was smooth with limited workload, and I would rate Check Point SASE a 10 out of 10 as it is a superb product.

What do you dislike about the product?

Issues configuring multiple tunnels with overlapping subnets and limits on dynamic IP tunnels.

What problems is the product solving and how is that benefiting you?

It replaces fragmented products with a cloud native platform, avoiding the need to route remote traffic through a central datacenter.

What do you like best about the product?

I appreciate how Check Point SASE unifies networking and security into a single cloud-delivered service, which is crucial for today's hybrid work environments where users connect from various locations. It efficiently solves the issue of managing fragmented security tools by combining VPN, firewall, CASB, and SD-WAN into one platform. I really like the Zero Trust Network Access feature, as every connection is verified based on user identity, device posture, and application context, offering strong protection against insider threats and compromised accounts. The cloud-native scalability is another standout feature, making it easy to add new users or extend protection to new applications without requiring significant infrastructure changes. Furthermore, Check Point SASE works well with identity and access management platforms like Azure AD, Okta, and Ping Identity, allowing for strong authentication before granting access.

What do you dislike about the product?

Deployment Complexity - Without powerful, initial setup can be challenging for smaller IT teams without prior Check Point experience.

What problems is the product solving and how is that benefiting you?

Check Point SASE unifies networking and security tools like VPN, firewall, CASB, and SD-WAN into a single platform, simplifying management. Its zero trust network access strengthens security by verifying connections. Cloud-native scalability allows easy user and application additions without major infrastructure changes.

What do you like best about the product?

I really like Check Point SASE because it brings together networking and security in one place. This means I do not have to deal with a lot of things like VPN and SD-WAN and Zero Trust Network Access and Secure Web Gateway and Firewall-as-a-Service.

Check Point SASE has all these things in one place so I can manage them easily. This makes my job simpler. I can see everything that is going on.

Check Point SASE also keeps my users safe no matter where they are. The people in charge can manage everything from one place. This helps stop bad things from happening.

This helps reduce the amount of work I have to do to keep everything running smoothly and safely. Check Point SASE is very good, at keeping people out and this means my users can work from anywhere without any problems.

What do you dislike about the product?

One area where Check Point SASE could do better is in making it easier to set up at configure policies especially for companies that are moving away from old network security systems.

Some advanced features take time to learn and fixing issues can be tricky because of all the security parts that are included.

For some companies Check Point SASE might be overkill if they only have networking requirements.

What problems is the product solving and how is that benefiting you?

Check Point SASE is a solution for giving our workers secure access, to the things they need no matter where they are. We used to use style VPNs and a bunch of different security tools but Check Point SASE does it all in one place. It gives us Zero Trust access, internet browsing stops threats and makes our network run better all from the cloud. This makes our security better easier to manage and gives our users a consistent experience. For our team Check Point SASE has made managing policies a lot simpler we can see what our users are doing. It helps us keep our cloud and local resources safe. Check Point SASE is really helping us out.

What do you like best about the product?

Check Point SASE is a unified cybersecurity solution that enhances both internet security and user experience. It achieves this by delivering fast and secure network access through full-mesh private access connectivity, optimised SD-WAN, and granular zero trust security, all managed from a centralized cloud dashboard.

What do you dislike about the product?

The level of integration is inconsistent; some products are very well finished, but others clearly need improvement. The user experience isn't uniform across the portal, which can be confusing for administrators. There's repeated functionality in several places, alerts, log forwarding, and it's confusing.

What problems is the product solving and how is that benefiting you?

Check Point SASE solves the complexities of securing distributed workforces by converging networking (SD-WAN) and security into a unified, cloud-based service. It addresses fragmented IT management, latency issues caused by backhauling traffic, and the vulnerabilities of remote access, benefiting you through robust security, improved network performance, and reduced operational overhead

What do you like best about the product?

The solution provides strong centralized security and access control for remote users and hybrid environments. I particularly appreciate the unified approach to secure connectivity, which simplifies managing VPN, web access, and policy enforcement from a single platform. It improves visibility over user traffic and helps reduce security risks without adding too much operational complexity once properly configured.

What do you dislike about the product?

While Check Point SASE provides strong security capabilities, there are some areas that could be improved. The initial configuration and onboarding process can be complex, especially for teams without prior experience with the platform. The administration interface may feel a bit dense at times, with many features spread across different menus, which can slow down navigation. In addition, troubleshooting certain connectivity or policy issues is not always straightforward and may require support assistance. Finally, documentation could be more simplified and clearer for faster adoption.

What problems is the product solving and how is that benefiting you?

In our environment, we were facing challenges related to secure remote access and consistent enforcement of security policies across distributed users and devices. Managing VPN access and ensuring secure connectivity for remote employees was becoming increasingly complex and time-consuming for the IT team.

With Check Point SASE, we are now able to centralize access control and security policies for users connecting from different locations. This has improved visibility over network traffic and reduced the need for manual intervention when handling connectivity or security issues.

As a result, we have improved operational efficiency, reduced the time spent on troubleshooting remote access problems, and strengthened overall security posture for remote and hybrid users.

What do you like best about the product?

I like that all user traffic is inspected and logged in one place, no matter where the connection is coming from. I appreciate the better integration between threat prevention and zero trust access that Check Point SASE offers. It's also easy to use, which makes the setup straightforward.

What do you dislike about the product?

The dashboards could use more customization options for SOC teams, specifically for the workflows.

What problems is the product solving and how is that benefiting you?

I use Check Point SASE to solve the lack of visibility into remote user traffic and eliminate the complexity of managing traditional VPN across multiple locations.

What do you like best about the product?

From an engineer’s perspective, Decentralized Security stands out because you get the security enforcement of a Cloud Web Gateway (SWG). It also delivers low latency by running a lightweight, granular filtering engine directly on the endpoint agent, so the system can enforce web filtering and processing locally. As a result, it helps reduce bandwidth strain as well.

What do you dislike about the product?

Painful integration with complex on-prem routing (non-BGP), plus log delays in the console. When a remote user complains that a critical application is being blocked, pulling up real-time, granular logs to see exactly which security layer (ZTNA, CASB, or URL Filtering) triggered the block can sometimes involve noticeable sync delays. Overall, responsiveness, per-user cost, and feature gating remain concerns.

What problems is the product solving and how is that benefiting you?

The legacy VPN vulnerability, along with SaaS and shadow IT blind spots, and the latency issues users experience, were key problems for me. This solution benefits me by containing blast radii and providing true ZTNA.

What do you like best about the product?

Best overall , best for advanced threats prevention , best for zero architecture, Best for Global Edge Performance, Best for Unified Security Fabric..

What do you dislike about the product?

it often introduces heavy vendor lock-in, high licensing costs, and complex migration phases that disrupt daily operations. Organizations frequently dislike the "all-in-one" feature gaps, where a vendor might offer elite security but provide weak network routing tools. Additionally, combining network and security operations forces teams to learn complex new cloud interfaces, which can lead to misconfigurations and employee frustration from overly restrictive login policies.

What problems is the product solving and how is that benefiting you?

Check Point SASE solves the performance and complexity issues of traditional networks by replacing slow, centralized VPNs with a fast global cloud network that accelerates user connection speeds by up to 10 times. It eliminates fragmented security tools by consolidating firewalls, web filtering, and Zero Trust access into a single, unified management dashboard that reduces operational costs by up to 60%. Finally, it stops cyberattacks by locking down remote user access to a strict, application-by-application basis, preventing hackers from moving laterally through your network while automatically blocking zero-day phishing and malware attempts at the edge.

What do you like best about the product?

I use Check Point SASE frequently as a network administrator. It helps me secure my network and acts like a firewall but online. I really like the ZTNA feature and the SWG capability because they let me disable things that students shouldn’t use. The security features are valuable because we have different kinds of users in our school. The initial setup was more fast than anticipated, which was a nice surprise.

What do you dislike about the product?

Being able to merge multiple ISP connections would be great.

What problems is the product solving and how is that benefiting you?

I use Check Point SASE to secure my network as it's like a firewall but online. It supports security with ZTNA and SWG, helping manage different user types in our school by blocking access to unwanted sites.

What do you like best about the product?

What I like most about Check Point SASE is how it combines network security and secure remote access into a unified cloud-based platform. It provides consistent security policies across users, devices, and locations without relying heavily on traditional perimeter-based infrastructure, which is extremely valuable in hybrid and distributed work environments.

I also appreciate the strong integration of security features like secure web gateway, zero trust access, threat prevention, and SD-WAN capabilities. Having these functions centralized improves visibility and simplifies management compared to handling multiple standalone security tools.

Another major advantage is the performance and scalability. Users can securely access applications and resources with a smoother experience while maintaining strong protection against threats. Overall, it helps improve both security posture and operational efficiency in modern cloud-driven environments.

What do you dislike about the product?

One of the key problems that comes with Check Point SASE is the complexity of its operation in terms of managing the tool from the beginning of deployment up to the point where policies have been configured properly. In many instances, the software may seem a little too hard to understand, making it very challenging to use on a daily basis.
Performance can also be affected by various factors. For instance, users of Check Point SASE may sometimes face such problems as latency, unreliable connections, or slower access to applications due to passing traffic through several layers of security measures.
Moreover, some aspects of using Check Point SASE may seem fragmented, meaning that not all features have been well-integrated into the whole system. It may make troubleshooting harder since it will be difficult to solve the problem of any networking and security components.
Furthermore, the cost of using Check Point SASE may also be considered a disadvantage since licensing, advanced security features, and other aspects may require additional money. Also, the level of reporting and analysis provided by the product is not always satisfactory.

What problems is the product solving and how is that benefiting you?

The Check Point SASE solution provides an answer to the problem of ensuring secure connections for remote users, cloud applications, and dispersed environments without depending on the conventional network perimeter approach. With the trend towards hybrid working models and cloud computing, it becomes tough to manage and coordinate the security process independently using various VPNs, firewalls, and point solutions.

This has been advantageous for us in many ways as it increases visibility and implements security policies uniformly. We can easily implement secure access from remote locations and eliminate the burden of managing multiple security systems separately.