Check Point Security Management (BYOL)
Check Point Software TechnologiesExternal reviews
323 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Complete IaaS Cloud Environment Monitoring for Compliance
What do you like best about the product?
If your organization leverage compliance frameworks than this cloud monitoring tool is one the best tools out there right now. The compliance rulesets are extensive for AWS. Azure and GCP are covered too by NIST, PCI, GDPR, etc. It recently introduced Kubernetes monitoring as well but needs more ruleset additions. The tool continuously monitors cloud accounts every hour. Out of the box, it has a nice UI illustrating your trust boundaries as it analyzes your network security groups. Additional paid features include ingesting traffic flows for analysis and near real-time detection/alerts.
My company performed POC with other leading cloud monitoring vendors and Dome9 stood out to be the fastest in ingesting cloud environment changes. The SaaS tool also included many out of box features we needed across the enterprise. The pricing and yearly subscription model was also more reasonable based on the protected assets like VMs, RDS, etc.
My company performed POC with other leading cloud monitoring vendors and Dome9 stood out to be the fastest in ingesting cloud environment changes. The SaaS tool also included many out of box features we needed across the enterprise. The pricing and yearly subscription model was also more reasonable based on the protected assets like VMs, RDS, etc.
What do you dislike about the product?
-When vendor managed rulesets are updated, your custom exclusions rules are invalidated. You must go back in to reapply your exclusion rules.
-Minimum support on bots. Auto-remediation bots have not been updated for more than 2 years.
-No access to remediation logs from dashboard to detect failed remedations.
-No merging of custom rulesets back to baseline template
-No individual cloud account billing/reporting in Enterprise plan (for chargeback internally)
-There is no mechanism to change the continuous monitoring to a longer duration or to turn it off for a specific cloud account.
-Serverless scanning (Lambda/Functions) requires additional "agents" installed on your Cloud IaaS, versus using API to scan.
-Minimum support on bots. Auto-remediation bots have not been updated for more than 2 years.
-No access to remediation logs from dashboard to detect failed remedations.
-No merging of custom rulesets back to baseline template
-No individual cloud account billing/reporting in Enterprise plan (for chargeback internally)
-There is no mechanism to change the continuous monitoring to a longer duration or to turn it off for a specific cloud account.
-Serverless scanning (Lambda/Functions) requires additional "agents" installed on your Cloud IaaS, versus using API to scan.
What problems is the product solving and how is that benefiting you?
- increase security posture for enterprise cloud computing
- visibility to shadow IT
- able to offer GRC (i.e. compliance standards) to cloud hosting across the enterprise
- visibility to shadow IT
- able to offer GRC (i.e. compliance standards) to cloud hosting across the enterprise
Recommendations to others considering the product:
For the most part CloudGuard CSPM (Dome9) still functions as it was originally designed but many flaws (see below). Its rule engine needs a revamp since it is limited to many of the features available today in CSPM 2.0. I would look elsewhere if you need full compliance ruleset management and auto-remediation. There are many other CSPMs available now that cost less with the similar or moe features.
Cloud security solutions must be marked for planning RFP's
What do you like best about the product?
Single point/Central management best feature.
What do you dislike about the product?
Dome9 doesn't support on-premises and in a hybrid cloud
What problems is the product solving and how is that benefiting you?
I can have a centralized asset management for inventories. Centralized management feature enables to manage all the components console in single place for easy administration reduces few mins/hours of daily routines.
Recommendations to others considering the product:
If the objective is security then go for IT
Its Awasome
What do you like best about the product?
Autoprovisoning and autoscaling is very good
What do you dislike about the product?
Smart console connectivity should be better
What problems is the product solving and how is that benefiting you?
Secure the whole cloud infra from gen-V attack,
Checkpoint CloudGuard
What do you like best about the product?
It provides a very easy environment to evaluate the product. one can easily visualize and assess the security. The best part is it is very useful to detect misconfigurations and also the technology is very awesome that can suggest as per the security best practice.
What do you dislike about the product?
As still evaluating the solutions, not found any bugs or negative points to dislike it.
What problems is the product solving and how is that benefiting you?
As still evaluating the solutions, hence not implemented at any customer base.
CP_IAAS
What do you like best about the product?
The it helps protect data and asset protect while being in line with all the compliances.
What do you dislike about the product?
It needs to be more agile and easy to use.
What problems is the product solving and how is that benefiting you?
Managebility
CloudGuard
What do you like best about the product?
interoperability with different cloud providers
What do you dislike about the product?
limited monitoring compatibility with third party
What problems is the product solving and how is that benefiting you?
securing cloud infrastructure
CloudGuard Dome 9 is necessary in my company
What do you like best about the product?
my AWS public cloud enjoys data security at any time
What do you dislike about the product?
I really like everything there is nothing that I have not liked
What problems is the product solving and how is that benefiting you?
Protect and keep my clients' data safe at all times
Best Cloud Firewall
What do you like best about the product?
I love the fact, i can just spin up a firewall from an AMI in AWS, makes for a lot easier to deploy firewalls.
What do you dislike about the product?
Nothing at this specific moment in time.
What problems is the product solving and how is that benefiting you?
Deploying firewalls in the cloud and easy integration into different customer infrastructures.
Better than Azure firewall
What do you like best about the product?
All those features blades and logging options
What do you dislike about the product?
traditional dashboard and in scale set routing need to change manually when the new firewall spins up
What problems is the product solving and how is that benefiting you?
better firewall options that are not available in azure firewall or nsg
Good Firewall option to Enforce security on the Cloud
What do you like best about the product?
Very straight forward deployment and a lot of functionalities available.
What do you dislike about the product?
Lack of detailed documentation on how to use the cloud formation templates and the product subscription required for each CF deployment type available.
What problems is the product solving and how is that benefiting you?
Secure cloud environment
showing 291 - 300