Currently, we have our applications and devices in the Microsoft cloud in Azure. We have been modernizing our platform, and some services we have been converting to a platform as a service for which many app services have been implemented, among other workloads, and we needed to expose them to the outside. Therefore, a tool was needed that could do this security filtering and that also provided a set of native tools and functionalities for the cloud and checkpoint to meet the needs that we were presenting.
Check Point WAF as a Service (Advanced/Premium, Contract)
Check Point Software TechnologiesExternal reviews
104 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Helps with compliance, mitigates security risk, and helps reduce costs
What is our primary use case?
How has it helped my organization?
Since we were able to implement this new tool, we have been able to put into production all the applications that we have modernized for the use of our clients and officials, thus resulting in a more continuous and faster improvement of our services and achieving better scalability, stability and we have managed to reduce the costs and labor in IT, thus ensuring that our developers dedicate themselves to other projects and not be making patches for the applications as we were doing due to our obsolete technology, in addition, it provided us with regulatory compliance, monitoring, and analysis of all applications.
What is most valuable?
The tool has many valuable features that help us in our day-to-day life with all the applications. With the solution, we managed to obtain complete comprehensive visibility of the entire environment in the cloud, thus having better control of each of the resources.
In addition to that, we managed to have security policies that allow us to reward compliance in each of the applications. We've been able to provide better regulatory compliance, thus being able to mitigate security risks in our environment and achieve a better standard in the security of the company.
What needs improvement?
The tool is currently one of the best on the market. It has a series of more innovative features in the security market. That said, there are improvements necessary.
They should improve in the delivery of more detailed reports with more information.
They should improve in the support they provide since they have lost a lot of strength here. Quality has dropped; they do not comply with the SLA.
They should have a centralized library of each of the manual technologies, guides, and errors where everything can be found in one place so that we do not waste time searching all over the web for a solution or guide.
For how long have I used the solution?
This solution is new; I have been using it for one year,
What do I think about the stability of the solution?
To this day, the stability of the tool is very good and has not presented any problems.
What do I think about the scalability of the solution?
The scalability of the tool is very good; it is multi-cloud.
How are customer service and support?
The support must be improved. The performance and quality it offers have decreased.
Which solution did I use previously and why did I switch?
It is one of the first tools that implements application security.
How was the initial setup?
The installation was simple since we have experience with these tools, however, it does have a medium learning curve.
What about the implementation team?
The implementation was carried out by the IT department with the help and supervision of the vendor's engineer.
What was our ROI?
The investment was quite relevant; we did it to protect our information and power the applications in production.
What's my experience with pricing, setup cost, and licensing?
The price and licenses are very competitive in the market and should go down a little.
Which other solutions did I evaluate?
We did look into Microsoft tools, such as the WAF, which were evaluated. They did not meet the organization's needs.
What other advice do I have?
It is an excellent multicloud tool with good security features.
Performs health checkups but needs to improve integration
What is our primary use case?
Check Point CloudGuard Application Security helps us ensure the security of contact devices and meet audit requirements for compliance.
What is most valuable?
The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies.
What needs improvement?
Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features.
For how long have I used the solution?
I have been using the product for two years.
What do I think about the stability of the solution?
We encountered stability issues during the configuration. The tool's stability is good.
What do I think about the scalability of the solution?
Check Point CloudGuard Application Security is scalable. My company has 1000 users for it.
How are customer service and support?
The tool's support is good.
How was the initial setup?
Check Point CloudGuard Application Security's deployment is easy and completed in six hours. You need two to three resources to handle the deployment. You need proper training to do it.
What's my experience with pricing, setup cost, and licensing?
The tool's licensing costs are yearly and competitive.
What other advice do I have?
I rate Check Point CloudGuard Application Security an eight out of ten.
A robust solution that provides a unified view of connections
What is most valuable?
The solution's strongest point is that you can connect everything to it, giving you a full view of what's connected. If you configure it right, it works perfectly.
What needs improvement?
You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so.
For how long have I used the solution?
I've been working with the solution for about a year.
What do I think about the stability of the solution?
The solution is stable. It doesn't matter which device is running Check Point. The solution works. It has never gone down. I rate the solution's stability a ten out of ten.
What do I think about the scalability of the solution?
My clients are large, but they are not enterprise-sized or small.
How was the initial setup?
I rate the initial setup a five out of ten because it is easy if you have the required knowledge and difficult if you are new to the system. The challenge isn't installing it: "Next, next, next, finish." Even a less knowledgeable person can do that. The challenge is configuring the system. There are a lot of blades in CloudGuard. You need to keep each type of security in your view, except for the Check Point view.
The initial setup is very fast, but you need to pray that the solution does all the work itself.
Which other solutions did I evaluate?
Other unified platforms like QRadar and Cisco are comparatively easier to use.
What other advice do I have?
You need someone knowledgeable to run the system. Today, with all the technology and everything, the company just wants to buy control and be lazy. "Let Check Point do the work." But this does not happen with Check Point because you need professional eyes. Check Point's price is very low compared to those controlling the system. You have to learn to investigate the solution to work better with it. The knowledge costs more than the system. The solution has a hybrid deployment, and I don't know a company that only chooses one deployment or another.
There is no support available for Check Point. There are things you have to look for, and that's it.
Check Point is the world's first and probably best security company. They might change its face, give it new names, separate into new models, and so on, but in the end, they are the best security company in the world. I rate the solution a ten out of ten.
Cant get more control than this!!!
What do you like best about the product?
One of the best solutions that cloud guard can have. we can monitor all the activity from all endpoints
What do you dislike about the product?
The only thing that I dislike is the limitation of integrating this solution with any 3rd party systems
What problems is the product solving and how is that benefiting you?
The protection that we have on the cloud solutions.
Complete CSPM solution for multiple clouds
What do you like best about the product?
Deployment is straigstraightforward. The The initial price is cheap. Even you can use it for free with a limited feature set. Entegration is also rapid, but need R/O or R/W access based on your aim. Documentation is good. It is a full solution covering compliance, network, IAM even the CI/CD and K8s security. Posture management and compliance is the most highlighted item. In fact dome9 is the most enriched compliance solution on the marketing. There's no need for additional query learning but you can use the GSL for advanced searching. You have the option to automate and mitigate the findings throughout the screen. Product supports multiple cloud providers.
What do you dislike about the product?
Price is increasing with every new asset added through the cloud. It would be best if you made a budget assignment every year. The problem related to the CSPM is the ownership of this product. It has many outputs, and teams should engage in solving these findings. Otherwise, you see the same results again and again. You have the option for excluding/ignore; however, security risks are increased with exceptions. 3rd party integrations are not easy; you can't make one click integration with ticketing systems like jira, servicenow etc.
Interestingly there's no tight integration with dome9 and checkpoint cloudguard solution on the cloud. I expect more integration with checkpoint integrations like harmony and cloudguard. Dome9 needs constant monitoring and operation. It would help if you assigned a team for the product ownership where this team will be responsible for coordination and follow-ups. It has no built-in security scanner; however current version supports tenable.io. The updates of the dome9 service don't have alerting. You see what the new features have come after the login popup.
Interestingly there's no tight integration with dome9 and checkpoint cloudguard solution on the cloud. I expect more integration with checkpoint integrations like harmony and cloudguard. Dome9 needs constant monitoring and operation. It would help if you assigned a team for the product ownership where this team will be responsible for coordination and follow-ups. It has no built-in security scanner; however current version supports tenable.io. The updates of the dome9 service don't have alerting. You see what the new features have come after the login popup.
What problems is the product solving and how is that benefiting you?
CSPM is a must solution for the companies which will be on the cloud. It's working like an eagle eye. We now have total visibility and control for the cloud. For high risks, we have automation tasks to mitigate directly through the dome9. Dome9 solves the compliance requirements to regulations. Reports help the auditors and compliance teams to get the exact results. We can now fully categorize the risks where we reevaluate our security procedures and guidelines to solve the gaps.
Recommendations to others considering the product:
First, get the executive support, then arrange a project team. This product is not a one-time solution. It needs daily monitoring, and some items on the dashboard need high-level knowledge. This team should consist of champions. Test environments on the cloud should also be integrated with Dome9. I see test environments without CSPM due to price. Get a six month or yearly check from the vendor through the PS for dome9 to see if the solution is working correctly. Some updates need a particular configuration on the cloud and in the product.
CloudGuard Posture Management
What do you like best about the product?
Its most amazing feature is its installation and going live. Its compatibility with many cloud platforms in the market takes the product one click further.
We are able to visualize your security status and comfortably implement high standard guidelines for accounts, projects, regions and virtual networks
We are able to visualize your security status and comfortably implement high standard guidelines for accounts, projects, regions and virtual networks
What do you dislike about the product?
I expected the API integration to be simpler and improved. Other than that, I have not seen a negative component that disrupts our daily routine.
What problems is the product solving and how is that benefiting you?
Automates management across multiple cloud assets and services, including visualization and assessment of security posture, misconfiguration detection, and enforcement of security best practices and compliance frameworks.
Check Point CloudGuard Posture Management compliance tool
What do you like best about the product?
The automation of continuos compliance checks
What do you dislike about the product?
Nothing for now, we'll see it in the future
What problems is the product solving and how is that benefiting you?
I automated all compliance checks
Very Good For Compliance Automation
What do you like best about the product?
CloudGuard Posture Management is very good for Cloud asset management and check security, compliance and for governance.
What do you dislike about the product?
CloudGuard Managment has no such major dislike or disadvantage found as of now.
What problems is the product solving and how is that benefiting you?
Its secure our cloud assets and provide automation compliance as well.
Great Solution to Compliance and Governance the Organization
What do you like best about the product?
Check Point Cloud Dome9 provide us complete security posture to compliance and governance organization not even public cloud but also container environment as well
What do you dislike about the product?
It is not supporting the VDI solution and VMWare
What problems is the product solving and how is that benefiting you?
With Cloud Dome 9 we can compliance our organization with client audit and it is very helpful to us.
Recommendations to others considering the product:
It is very good for Compliance and security prospective , please go ahead
CheckPoint CloudGaurd Dome 9 is very good solution for security posture and security best practices
What do you like best about the product?
It is very easy to start or use CloudGaurd Dome 9 and also very user friendly GUI. We can identify and protect against security theft and data lose in cloud
What do you dislike about the product?
No not any dislike but yes there should be some improvement still required
What problems is the product solving and how is that benefiting you?
We can measure our security posture and comply with the best practices
Recommendations to others considering the product:
It is very good for security and best practices
showing 101 - 110