Performs health checkups but needs to improve integration
What is our primary use case?
Check Point CloudGuard Application Security helps us ensure the security of contact devices and meet audit requirements for compliance.
What is most valuable?
The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies.
What needs improvement?
Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features.
For how long have I used the solution?
I have been using the product for two years.
What do I think about the stability of the solution?
We encountered stability issues during the configuration. The tool's stability is good.
What do I think about the scalability of the solution?
Check Point CloudGuard Application Security is scalable. My company has 1000 users for it.
How are customer service and support?
The tool's support is good.
How was the initial setup?
Check Point CloudGuard Application Security's deployment is easy and completed in six hours. You need two to three resources to handle the deployment. You need proper training to do it.
What's my experience with pricing, setup cost, and licensing?
The tool's licensing costs are yearly and competitive.
What other advice do I have?
I rate Check Point CloudGuard Application Security an eight out of ten.
A robust solution that provides a unified view of connections
What is most valuable?
The solution's strongest point is that you can connect everything to it, giving you a full view of what's connected. If you configure it right, it works perfectly.
What needs improvement?
You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so.
For how long have I used the solution?
I've been working with the solution for about a year.
What do I think about the stability of the solution?
The solution is stable. It doesn't matter which device is running Check Point. The solution works. It has never gone down. I rate the solution's stability a ten out of ten.
What do I think about the scalability of the solution?
My clients are large, but they are not enterprise-sized or small.
How was the initial setup?
I rate the initial setup a five out of ten because it is easy if you have the required knowledge and difficult if you are new to the system. The challenge isn't installing it: "Next, next, next, finish." Even a less knowledgeable person can do that. The challenge is configuring the system. There are a lot of blades in CloudGuard. You need to keep each type of security in your view, except for the Check Point view.
The initial setup is very fast, but you need to pray that the solution does all the work itself.
Which other solutions did I evaluate?
Other unified platforms like QRadar and Cisco are comparatively easier to use.
What other advice do I have?
You need someone knowledgeable to run the system. Today, with all the technology and everything, the company just wants to buy control and be lazy. "Let Check Point do the work." But this does not happen with Check Point because you need professional eyes. Check Point's price is very low compared to those controlling the system. You have to learn to investigate the solution to work better with it. The knowledge costs more than the system. The solution has a hybrid deployment, and I don't know a company that only chooses one deployment or another.
There is no support available for Check Point. There are things you have to look for, and that's it.
Check Point is the world's first and probably best security company. They might change its face, give it new names, separate into new models, and so on, but in the end, they are the best security company in the world. I rate the solution a ten out of ten.
Cant get more control than this!!!
What do you like best about the product?
One of the best solutions that cloud guard can have. we can monitor all the activity from all endpoints
What do you dislike about the product?
The only thing that I dislike is the limitation of integrating this solution with any 3rd party systems
What problems is the product solving and how is that benefiting you?
The protection that we have on the cloud solutions.
Complete CSPM solution for multiple clouds
What do you like best about the product?
Deployment is straigstraightforward. The The initial price is cheap. Even you can use it for free with a limited feature set. Entegration is also rapid, but need R/O or R/W access based on your aim. Documentation is good. It is a full solution covering compliance, network, IAM even the CI/CD and K8s security. Posture management and compliance is the most highlighted item. In fact dome9 is the most enriched compliance solution on the marketing. There's no need for additional query learning but you can use the GSL for advanced searching. You have the option to automate and mitigate the findings throughout the screen. Product supports multiple cloud providers.
What do you dislike about the product?
Price is increasing with every new asset added through the cloud. It would be best if you made a budget assignment every year. The problem related to the CSPM is the ownership of this product. It has many outputs, and teams should engage in solving these findings. Otherwise, you see the same results again and again. You have the option for excluding/ignore; however, security risks are increased with exceptions. 3rd party integrations are not easy; you can't make one click integration with ticketing systems like jira, servicenow etc.
Interestingly there's no tight integration with dome9 and checkpoint cloudguard solution on the cloud. I expect more integration with checkpoint integrations like harmony and cloudguard. Dome9 needs constant monitoring and operation. It would help if you assigned a team for the product ownership where this team will be responsible for coordination and follow-ups. It has no built-in security scanner; however current version supports tenable.io. The updates of the dome9 service don't have alerting. You see what the new features have come after the login popup.
What problems is the product solving and how is that benefiting you?
CSPM is a must solution for the companies which will be on the cloud. It's working like an eagle eye. We now have total visibility and control for the cloud. For high risks, we have automation tasks to mitigate directly through the dome9. Dome9 solves the compliance requirements to regulations. Reports help the auditors and compliance teams to get the exact results. We can now fully categorize the risks where we reevaluate our security procedures and guidelines to solve the gaps.
Recommendations to others considering the product:
First, get the executive support, then arrange a project team. This product is not a one-time solution. It needs daily monitoring, and some items on the dashboard need high-level knowledge. This team should consist of champions. Test environments on the cloud should also be integrated with Dome9. I see test environments without CSPM due to price. Get a six month or yearly check from the vendor through the PS for dome9 to see if the solution is working correctly. Some updates need a particular configuration on the cloud and in the product.
CloudGuard Posture Management
What do you like best about the product?
Its most amazing feature is its installation and going live. Its compatibility with many cloud platforms in the market takes the product one click further.
We are able to visualize your security status and comfortably implement high standard guidelines for accounts, projects, regions and virtual networks
What do you dislike about the product?
I expected the API integration to be simpler and improved. Other than that, I have not seen a negative component that disrupts our daily routine.
What problems is the product solving and how is that benefiting you?
Automates management across multiple cloud assets and services, including visualization and assessment of security posture, misconfiguration detection, and enforcement of security best practices and compliance frameworks.
Check Point CloudGuard Posture Management compliance tool
What do you like best about the product?
The automation of continuos compliance checks
What do you dislike about the product?
Nothing for now, we'll see it in the future
What problems is the product solving and how is that benefiting you?
I automated all compliance checks
Very Good For Compliance Automation
What do you like best about the product?
CloudGuard Posture Management is very good for Cloud asset management and check security, compliance and for governance.
What do you dislike about the product?
CloudGuard Managment has no such major dislike or disadvantage found as of now.
What problems is the product solving and how is that benefiting you?
Its secure our cloud assets and provide automation compliance as well.
Great Solution to Compliance and Governance the Organization
What do you like best about the product?
Check Point Cloud Dome9 provide us complete security posture to compliance and governance organization not even public cloud but also container environment as well
What do you dislike about the product?
It is not supporting the VDI solution and VMWare
What problems is the product solving and how is that benefiting you?
With Cloud Dome 9 we can compliance our organization with client audit and it is very helpful to us.
Recommendations to others considering the product:
It is very good for Compliance and security prospective , please go ahead
CheckPoint CloudGaurd Dome 9 is very good solution for security posture and security best practices
What do you like best about the product?
It is very easy to start or use CloudGaurd Dome 9 and also very user friendly GUI. We can identify and protect against security theft and data lose in cloud
What do you dislike about the product?
No not any dislike but yes there should be some improvement still required
What problems is the product solving and how is that benefiting you?
We can measure our security posture and comply with the best practices
Recommendations to others considering the product:
It is very good for security and best practices
Modern security orcherstrator for Clouds
What do you like best about the product?
It was really easy to start using Dome9.
Dome9 is available for the main players of the Cloud market - Azure, AWS, GCP.
Good and friendly UI - the maim plus for all the CheckPoint products.
What do you dislike about the product?
Lack of the native automation modules for Terraform and Ansible - in the era of DevOps all new products needs to be release with such support, in my opinion.
I also hope that Dome9 will evenrually support other Cloud platforms, like Alibaba.
What problems is the product solving and how is that benefiting you?
Initially we got the product just for it's compliance possibilities (we have to provide compliance reports on a regular basis), but now also rely heavily on configs "auto-healing".
Cloud infra visualisation is also good, especially for AWS with its cumbersome security groups.
Recommendations to others considering the product:
Request a free demo directly from Check Point and see whether Dome9 suits you.
Also pay attention to the pricing - there are no tricks, and licensing model is transparent, but the final numbers may surprise you.