Check Point CloudGuard Network Security Product is a reliable cloud-based security solution
What do you like best about the product?
This product provides a reliable and secure network for your businesses. It gives a massive amount of upside features for a cloud-based environment such as data loss prevention, IPS, application control, IPSec VPN, URL filtering, antivirus, threat emulation and threat extraction. Customer support provided by Check Point vendor is one of the best options to choose this product.
What do you dislike about the product?
First time implementation for an unexperienced engineer with this product is not good easy. Learning resources are not easy to understand for a junior. Its cost is a drawback feature for a developing country although its product's capabilities is absolutely good.
What problems is the product solving and how is that benefiting you?
For AWS Cloud, It protects cloud assets with a full suite of advanced security capabilities, including firewall, data protection, IPS, IPSec VPN for network traffic security, URL filtering, antivirus, threat emulation and threat extraction.
A scalable, unified solution with strong threat prevention and consistent security across cloud.
What do you like best about the product?
Check Point CloudGuard Network Security provides unified, cloud-native protection with advanced threat prevention, centralized policy management, and seamless scalability-making it an ideal solution for securing hybrid and multi-cloud environments with operational efficiency and deep visibility.
What do you dislike about the product?
While check point CloudGuard Network Security offers powerful, consistent threat prevention across multi-cloud environments, its value is often diminished by step licensing costs, difficult integrations, and limited visibility into detailed log data.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security is a robust, cloud-native solution that delivers consistent, advanced threat prevention and unified policy enforcement across multi-cloud, hybrid, and on-premises environments. It empowers organization to secure dynamic workloads, automate security operations, and reduce breach and compliance risks-all from a single, scalable management platform.
Years of using the solution significantly improve log management and troubleshooting efficiency
What is our primary use case?
My main use case for Check Point Security Management is that we use it to manage all our firewalls and also look at the logs that the firewalls generate.
I use the logs in Check Point Security Management both for troubleshooting, seeing traffic from one IP to another IP, and for threat detection, viewing what the IPS and IDS and anti-bot and antivirus generate. It gives a very nice overview where you can see what has happened, when, and what client has generated the logs. It's very easy to get an overview of what's happening in the network.
How has it helped my organization?
Check Point Security Management has positively impacted my organization because, after migrating from our previous firewall, a Cisco ASA, we were able to see what traffic was passing through the firewall and from that, build out least access privilege firewall rules. So only what's actually needed by the organization is being let through. The rest is being dropped.
The measurable outcomes with Check Point Security Management show that the troubleshooting is definitely quicker. Now it just takes a few minutes to find out where the error is and resolve it. Before, it was at least an hour or two of troubleshooting to locate the issue.
What is most valuable?
The best feature Check Point Security Management offers is definitely the log management. I've worked with other firewall vendors and the overview of the logs that you get in Check Point Security Management is superb. You don't get that anywhere else. It's very easy to troubleshoot what traffic is being dropped, what traffic is being passed. It's easy to build firewall rules and everything else. It's miles ahead of anyone else.
What needs improvement?
Check Point Security Management could definitely improve the lag inside the application. The application has a tendency to get slow when you have a lot of firewall rules inside it. Additionally, it crashes pretty regularly, so they could resolve the stability issues as well.
Regarding the crashes in Check Point Security Management, at least once a day, the application crashes with some random error message. Then you have to close it out and open it up again. The process takes around a minute or two to get back to where you were. It's very frustrating.
For how long have I used the solution?
I have been using Check Point Security Management for about seven years now.
What do I think about the stability of the solution?
Check Point Security Management is stable, but the SmartConsole used to administrate the security management is somewhat unstable. The application crashes at least once a day with some random error message. Then you have to close it out and open it up again. The process takes around a minute or two to get back to where you were.
How are customer service and support?
The customer support for Check Point Security Management is great. We have had no issues with them.
I would rate the customer support for Check Point Security Management an eight on a scale of one to 10.
Which solution did I use previously and why did I switch?
Before Check Point Security Management, I previously used a Cisco ASA.
I switched from Cisco ASA to Check Point Security Management because the Cisco ASA was standalone and had no central management. We went from that to using Check Point Security Management for centralized management of all of our firewalls.
What was our ROI?
In terms of return on investment, we definitely need fewer employees to manage the amount of firewalls than before. The time to resolve issues is very much better now with Check Point Security Management.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Check Point Security Management is that the licensing is straightforward. We pay on a three-year base. It's very fair pricing.
Which other solutions did I evaluate?
Before choosing Check Point Security Management, I did not evaluate other options.
What other advice do I have?
I would definitely give Check Point Security Management a 10 out of 10 because the logging oversight that Check Point Security Management gives is superb compared to anything else I've ever tried.
My advice to others looking into using Check Point Security Management is to definitely talk with Check Point Professional Services on how to deploy it since creating management of remote sites over VPN can be challenging. Having a plan on how to actually do that is great beforehand.
Overall rating: 10/10
Great NGFW for the cloud
What do you like best about the product?
Our overall experience with Check Point CloudGuard Network Security has been very positive, as the solution was easy to implement and integrates seamlessly with our cloud environment while maintaining the same reliability we are used to from on-prem clusters.
What do you dislike about the product?
I dislike that the upgrade process is not as streamlined as it could be, since it requires changes on both the firewalls and the cloud load balancers, which adds extra steps compared to on-prem upgrades.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security is solving the challenge of extending the same level of protection we have on-prem into our cloud environments. It was easy to implement, and the clusters work just like the on-prem appliances we’re already familiar with, which makes operations smooth for the team. The solution gives us superb logging to the SMS, so we have great visibility into traffic, and it integrates well with our existing workflows. The main benefit is that we can run our cloud workloads with the same level of security and confidence as on-prem, without adding unnecessary complexity.
Centralized management of extensive firewall infrastructure reduces errors and saves time
What is our primary use case?
My main use case for Check Point Security Management is to manage about 500 Check Point firewalls, and we manage all this equipment with this solution.
In my day-to-day work, I manage typical tasks with Check Point Security Management such as policy updates, monitoring, and troubleshooting, and it's easy to manage all the firewalls in this big environment with this solution.
I do not have anything else to add about my main use case or how I use Check Point Security Management.
What is most valuable?
In my opinion, the best feature Check Point Security Management offers is the ability to upgrade firewalls directly from the management console of the security management, which stands out to me.
Being able to upgrade firewalls directly from the management console makes a big difference for me because it reduces errors, and we do a lot of things automatically, which improves the upgrade process.
Check Point Security Management has positively impacted my organization by saving a lot of time because we have a lot of firewalls, and it provides a console where I can see directly all the managed firewalls, allowing us to manage all of our firewalls from just one point.
What needs improvement?
I have used Check Point Security Management for several years and have seen its evolution, and I believe they can improve the management by allowing better API functionality because the API now is a little complicated, making it difficult to do automation.
The improvements I would like to see in the API specifically relate to ease of use because the REST API is not easy to use.
For how long have I used the solution?
I have been using Check Point Security Management for more than 13 years.
What do I think about the stability of the solution?
Check Point Security Management is really stable, and I have not experienced any downtime or issues with reliability except for when we do upgrades, but after the upgrade, the platform is very stable.
How are customer service and support?
I have reached out to customer support for Check Point Security Management many times, and they answer quickly, with the level of support depending on the difficulty of the problem.
Which solution did I use previously and why did I switch?
Before using Check Point Security Management, I used a Cisco solution, and we switched to Check Point because Cisco management was not user-friendly, had a lot of bugs, and was very difficult to use.
What was our ROI?
I can't respond to how much time I've saved or how many incidents have been reduced since I started using Check Point Security Management because I'm pretty sure we saved a lot of time due to the central point of this tool, but I can't share examples.
I have not seen a return on investment in terms of time saved, fewer employees needed, or other benefits since I cannot share any relevant metrics.
Which other solutions did I evaluate?
We use Fortinet and Cisco as other tech products.
What other advice do I have?
My advice to others looking into using Check Point Security Management is that if you're looking for an easy tool to manage your firewall, you have to use this tool.
I do not have any additional thoughts about Check Point Security Management before we wrap up.
On a scale of one to ten, I rate Check Point Security Management a ten.
Robust Cloud Security with Excellent Unified Management
What do you like best about the product?
The advanced threat prevention is truly best-in-class. We have deep visibility into our cloud traffic, and the ability to apply consistent, granular security policies across our hybrid and multi-cloud environments from a single console (Smart-1 Cloud) is a massive operational advantage.
What do you dislike about the product?
The initial learning curve can be steep for engineers not already familiar with the Check Point autoscaling ecosystem. Furthermore, the pricing structure can be complex to navigate, requiring careful planning to ensure cost-effectiveness, especially with dynamic workloads.
What problems is the product solving and how is that benefiting you?
CloudGuard solves our main security challenges by providing a single, unified management platform for our on-prem and multi-cloud (AWS, Azure) environments. This creates a consistent security posture, which reduces management overhead and simplifies compliance audits. Its advanced threat prevention, including IPS and sandboxing, protects our critical workloads from threats that native cloud tools cannot block. Finally, it gives us deep, granular visibility into all traffic flows, which is crucial for faster incident response and effective reporting.
Check Point CloudGuard CNAPP solution is comprehensive approach to cloud-native security
What do you like best about the product?
This Check Point CloudGuard CNAPP solution is its Implementation, integrated and comprehensive approach to cloud-native security. It brings together posture management, workload security, CI/CD security, and threat intelligence in a single platform and it reducing complexity and improving visibility across multi cloud environments. Integration with cloud providers like AWS, Azure, and GCP is seamless, and real-time risk visualization helps prioritize threats and respond quickly. and this solution give the best customer support for issues and troubleshooting.
What do you dislike about the product?
This solution want to improvement of user interface and initial setup complexity. For new users or smaller teams, the dashboard can feel overwhelming due to the vast number of features and configurations available. Additionally, documentation and support could be more detailed when it comes to advanced use cases or custom integrations.
What problems is the product solving and how is that benefiting you?
The problem of our organization face so many cloud security challenges.
Check Point CloudGuard CNAPP helps solve key cloud security challenges such as misconfigurations, limited visibility, and the complexity of managing multiple tools. It provides a centralized platform for cloud posture management, workload security, and CI/CD security, which simplifies our operations and strengthens our security posture.
Seamless integration with AWS, Azure, and GCP allows us to monitor and manage risks across all environments. As a result, we are able to rapidly identify risks, automate remediation, and ensure ongoing compliance - saving both time and resources.
Strong Cloud Security Tool with Seamless DevOps Integration
What do you like best about the product?
What I like most is how easily CloudGuard Code Security integrates into our CI/CD pipeline. It scans Infrastructure-as-Code (IaC) configurations in real time, offering detailed and actionable insights. Its support for multiple frameworks like Terraform and CloudFormation is a big plus. The tool is reliable and gives us confidence that we’re shipping secure code to the cloud
What do you dislike about the product?
The one area I think needs improvement is documentation. Some advanced configuration examples are not clearly explained, and we had to spend extra time experimenting. Also, the initial onboarding could be a bit more guided for first-time users
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Code Security helps us detect vulnerabilities and misconfigurations early in our Infrastructure-as-Code (IaC) pipeline. It automates secure code reviews, enforces compliance policies, and reduces the risk of deploying insecure cloud environments. This has significantly improved our cloud deployment hygiene, saved time in manual reviews, and helped maintain consistent security standards across teams. It also improves developer accountability by providing immediate, actionable feedback during code commits.
Checkpoint CloudGuard Network Security: Powerful Protection for Cloud Environments
What do you like best about the product?
What I like best about Check Point CloudGuard Network Security is its ability to provide consistent, advanced threat protection across multi-cloud environment. It offers seamless integration with major cloud providers, ensuring comprehensive visibility and control. Additionally its automated security policies help reduce manual efforts while enhancing overall security posture.
What do you dislike about the product?
Setting up and configuration of Checkpoint CloudGuard security can be complex particularly if you have limited cloud security expertise.
What problems is the product solving and how is that benefiting you?
Checkpoint CloudGuard Network Security solves the problem of securing cloud infrastructure by providing advanced threat prevention and traffic inspection across hybrid cloud environments. It benefits us by ensuring that cloud workloads are protected from cyberattacks maintaining compliance and simplifying security management with automated policy enforcement and centralized visibility.
Comprehensive Cloud Security with Check Point CloudGuard CNAPP
What do you like best about the product?
What stands out most is CloudGuard CNAPP’s ability to integrate deeply with cloud platforms like AWS, Azure, and GCP, providing continuous monitoring and quick detection of risks. It's also automated, reducing manual overhead while offering strong protection.
What do you dislike about the product?
The user interface could be more intuitive, and the initial setup requires careful configuration to ensure optimal performance across all cloud environments. It may take a bit of time to fully integrate with more complex or hybrid cloud infrastructures.
What problems is the product solving and how is that benefiting you?
It helps solve the challenge of securing dynamic and complex cloud environments. By continuously assessing our cloud infrastructure for vulnerabilities, misconfigurations, and compliance violations, CloudGuard CNAPP ensures we stay secure without having to constantly monitor each environment manually. The automated risk assessments and real-time threat detection reduce potential incidents, saving us time and effort in managing cloud security.
