Check Point Application Control Reviews

Check Point Application Control is built for controlling application access to our organization network. It is an inbuilt feature of the security gateway of Check Point, where we have enabled this blade and are using the application control security feature.

We have a security gateway of Check Point where we have configured this security profile of Check Point Application Control and it is mapped to all of our firewall security policies. We are able to control application usage in the network on a category-based level. We have blocked some application categories and have allowed some particular ones according to our compliance and policy.

I have been using Check Point Application Control for more than three years.

The best feature is that we can configure and deploy Check Point Application Control based on application categories, determining whether we need to allow or block access for a particular user or an entire subnet of the network. We can even control application usage at the granular level. For example, if we want to allow Facebook usage in our organization but want only uploading or chatting to be allowed with other functions blocked, we can achieve that through application controls.

The configuration for Check Point Application Control is straightforward. The configuration part for granular controls is straightforward and very easy to implement.

One valuable aspect is that the database updates for Check Point Application Control are automated. We do not have to perform any manual updates, which is also a good feature of the application control.

Since we have been using Check Point Application Control, we are able to control unused application categories, such as applications that are not related to our organization's work environment. We are blocking those effectively, and therefore, the productivity of our organization's employees has increased significantly.

We can generate reports of application usage and clearly see in the logs that we have successfully blocked unused applications. When a user makes a request, it is directly blocked, preventing them from accessing those unproductive applications in the network.

Based on my experience and the current work environment, I do not see anything lacking in the current features of Check Point Application Control. In the future, some artificial intelligence or more automation could be added to the solution, which would also be beneficial for any organization.

I have been using Check Point Application Control for more than three years.

Check Point Application Control is a stable solution. There is no performance degradation that we have observed since we started using this solution.

Check Point Application Control's scalability is totally dependent on the throughput of the security gateway of Check Point. Currently, the application control is excellent from a scalability perspective. There is no scalability issue that we are facing in our organization.

I have contacted Check Point's customer support multiple times for technical support, and they are good from a technical perspective. Service-wise, they are excellent, providing guidance to resolve any technical issues.

Positive

I do not have information about whether we previously used a different solution for application control, so I would need to check with my team.

I can say that both time and money are being saved by the organization since using Check Point Application Control.

Unproductive applications are not being accessed in our network, which is indirectly saving our employees' precious work hours, and money is being saved by the organization because users are focused only on working applications.

I was not part of the team concerning pricing, setup cost, and licensing as everything is handled by a different team.

I do not have information about whether any different original equipment manufacturer was evaluated before choosing Check Point Application Control because that team is separate.

I will advise any organization already having a security gateway in their network environment to leverage Check Point Application Control by purchasing the license for the application control and enabling this security blade. The configuration is very easy and can be straightforwardly configured and applied to the security policy to control application usage in the organization. We are a partner with Check Point. I give this review a rating of nine.

We are using Check Point Application Control for the last three years.

We are using this feature to gain granular control over URL and web access for users by categorization and known risk level.

In my company, there are multiple departments including HR, IT, and accounting. Different departments need different types of web access. With Check Point Application Control, we provide web access such as hiring applications exclusively to HR, not to other departments such as IT and accounting. Similarly, some websites are not accessible for the HR department but are accessed by IT. In all these scenarios, we implement Check Point Application Control.

We have a deny policy where all known URL threats are by default blocked so that no malicious website can be accessible through the network.

Check Point Application Control provides in-depth visibility of what users are accessing in real-time. We can get reports of top ten users or any specific users, and we can block any particular URL by categorizing or the specific domain.

The reporting is very useful as we must submit those reports to our higher management. We can easily identify the top ten users accessing malicious websites or the top ten risky users. With these reports, we are preventing unauthorized access.

The configuration of Check Point Application Control is straightforward as it is an inbuilt feature of the Next-Generation Check Point Next-Generation Firewall. There are multiple categorized URLs where we can block access with the help of categories.

After deploying Check Point Application Control, we have successfully controlled URL access, web access, and malicious website access for users.

Sometimes by enabling the application inspection, the firewall throughput becomes high in the older versions. This aspect can be improved.

It has been almost more than two years.

Check Point Application Control is stable.

We are using only Check Point Application Control.

We have evaluated Fortinet URL filtering.

Check Point Application Control is very useful, and time is significantly reduced. With this application, we can easily configure the policies and control web access for users.

I advise those who are looking for application control to consider Check Point Application Control feature, which is very easy to deploy and maintain.

On a scale of 1-10, I rate Check Point Application Control an 8.

I use Check Point Application Control for social media applications with granular access changes. Access to social media applications has been given to specific departments including sales, sales marketing, and the technical group. Roles have been defined for each particular department, meaning access has been provided according to their role in the company. Control is being used for some users.

With Check Point Application Control, for users utilizing it, browsing can be defined and only browsing can be allowed for some users. Others can use media streaming. Access has been provided in this application accordingly.

Check Point Application Control is used for a granular purpose, which is the most effective way of giving application access by providing access to users according to their role.

Check Point Application Control blade is working very effectively. No improvements are needed in that application.

No changes or corrections are needed in Check Point Application Control.

Check Point Application Control is more reliable, stable, and a scalable device compared to other devices or other service providers.

Check Point Application Control is very useful in our organization as it is more focused on time-saving. It aims to focus on the work in the organization, not on social media sites.

Time is saved with Check Point Application Control, and it is very useful at the enterprise level.

Check Point Application Control customer support is excellent, but the technical person is taking more time to get on the call. When a major issue has occurred, it takes more time to get on the session with the technical person.

I have been using Check Point Application Control for about six months.

No instability has been seen in Check Point Application Control blade. More than three years have passed without any instability. It is very reliable. There have been no downtime or reliability issues.

Check Point Application Control customer support is excellent, but the technical person is taking more time to get on the call. When a major issue has occurred, it takes more time to get on the session with the technical person.

No other solution than Check Point Application Control has been chosen.

The pricing and setup cost for Check Point Application Control is higher than others. However, it is worth it based on the service that has been provided by Check Point Application Control.

No other options have been evaluated. Check Point Application Control was chosen directly, as the service that has been provided is excellent.

Check Point Application Control deployed in our organization is on-premises. Check Point Application Control is excellent. The overall review rating for this product is 8.

We are using Check Point Application Control for URL filtering so that users don't have access to unwanted websites, and we are also using it for threat prevention and Identity Awareness to implement allow policies based on users' names.

Previously, we were using allow policies based on IP addresses, but with Check Point Application Control, we have integrated our AD server to the firewall and implemented user-based policies. We have different departments, and we use username-based policies for each user.

Check Point Application Control has provided granular control over websites and visibility.

Check Point Application Control provides excellent granular control. For example, when allowing YouTube access, we can easily control downloading videos or posting content, restricting users to accessing only particular channels.

Previously, everyone had access to everything, but now with Check Point Application Control we have department-wise and user-based policies. Users are accessing only the compliance websites that we allow them to access, which is useful for controlling user access. We are getting proper visibility and can generate user-based reporting to present to our management.

Check Point Application Control has saved time since once we configure a user-based policy, there is no need for upgrades. We rarely change configurations in the firewall, making it time-saving while preventing threats from outside. It is cost-effective and provides a return on investment.

Sometimes Check Point Application Control provides false positives. We allow some websites or domains, but it still blocks them under certain categories. These false positives given by Check Point Application Control can be improved.

We are using Check Point Application Control for more than two years.

Check Point Application Control is stable.

We evaluated Fortinet application control before choosing Check Point Application Control.

As per industry reputation of Check Point OEM, everything looks fine.

I advise anyone looking for application control in their organization to consider this solution as it provides packet inspection, granular control, visibility, and allows creating user-based policies. All these features are very good, and they can consider Check Point Application Control as the best solution in the industry.

I rate Check Point Application Control eight out of ten.

My main use case for Check Point Application Control is to allow necessary applications while blocking others, ensuring efficient usage.

Check Point Application Control has improved our organization by giving us greater visibility into application usage, enabling us to block risky or non-business applications, prioritize bandwidth for critical services, and enforce compliance policies more effectively, which has strengthened overall security and boosted employee productivity.

The best features Check Point Application Control offers are the ability to identify thousands of applications and sub-functions, for example, Facebook Chat or Facebook Post, and user and group-based policy integration with AD, which made it possible to apply different application rules per department or user role. For example, allowing YouTube only for the marketing group, but blocking it for others, and seamless integration with URL Filtering and threat prevention work together with other blades to provide both application control and security against malware or data leaks. Bandwidth and QoS prioritization and the ability to not only block but also prioritize business-critical applications, for example, Office 365 or VoIP, are also standout features.

The granular control offered by Check Point Application Control impacts my daily work and the organization as a whole by allowing our marketing team to access YouTube and Facebook for campaign work while other departments don't have that access. In the past, we either had to block everyone, causing friction and workarounds, or allow everyone, leading to productivity loss and bandwidth issues. With Check Point Application Control, we create a rule that allows YouTube and Facebook for the Marketing AD group but blocks these apps for all other users. Bandwidth for business-critical tools like Microsoft Teams and O365 is prioritized, and this helps us avoid a service impact. Marketing gets the access they need without raising tickets, while bandwidth-clogging from unnecessary video streaming is reduced, leading to fewer complaints for the IT team and better visibility into traffic.

Using Check Point Application Control has definitely improved productivity and saved time for my team. Before implementing the rules, our IT helpdesk was getting 5-7 user tickets per week from employees either requesting access to blocked applications or reporting slow network performance due to streaming. After rolling out rule-based access and bandwidth prioritization, those tickets dropped to 1-2 per month.

Check Point Application Control can be improved with faster updates for emerging applications. While the signature database is comprehensive, new apps or app features sometimes appear before signatures are updated. A faster update process or a community-driven signature model could help keep policies current. Additionally, simpler policy management for large organizations is needed, as the policy interface can feel complex in environments with hundreds of rules and multiple user groups. Features like bulk editing, smart suggestions, or policy templates could reduce admin workload. An improvement in reporting and analytics is also essential, as reports are detailed but sometimes hard to digest at a glance. More visual dashboards, trend analysis, or predictive insights would help the team spot operations and issues faster.

This is my first time using Check Point Application Control.

Check Point Application Control is very stable; I haven't encountered any special issues.

It's very scalable and has shown substantial improvement, making it a trusted solution.

I evaluated other options before choosing Check Point Application Control, and we tried using the Palo Alto firewall.

I have seen a return on investment with Check Point Application Control. Before granular application control, IT support saw 5 to 7 tickets per week related to blocked apps or network slowdown. After implementing rule-based access and bandwidth prioritization, that dropped to 1-2 tickets per month, saving 6 to 8 hours per month for our team. There is also risk reduction, as blocking risky or unauthorized apps, like file-sharing tools, minimizes the potential for data leaks and security incidents. Although it's harder to quantify in dollars, avoiding even a single data breach or compliance violation represents significant cost avoidance.

I can't say much about the pricing, setup cost, and licensing for Check Point Application Control, as I only know what the business management team discusses. Our team is focused on operations and technical aspects, so we're not privy to the detailed setup costs and pricing.

My advice for others looking into using Check Point Application Control is to consider its ability to balance security and productivity effectively.

One of the strongest points of Check Point Application Control is its ability to protect the network without overly restricting users. Granular rules let you target risky apps while still allowing business-critical access. Continuous monitoring and updates through regular reviews of app usage reports and keeping signatures up-to-date ensure policies remain effective as applications evolve. Scalability can be a consideration for growing organizations, as the solution works well for small deployments, but with hundreds of rules or multiple department policy management, it can become complex, so planning and regular cleanup are key.

On a scale of one to ten, I rate Check Point Application Control a nine.

My main use case for Check Point Application Control is to control URL access while users are searching on the internet, and with the help of Application Control, we can allow them whatever they get in our organization. This solution comes with the Check Point Next Generation Firewall, so we have enabled the Application Access feature in Check Point Next Generation Firewall.

A specific example of how I use Check Point Application Control in my day-to-day work is that we have configured the Application Control in our Check Point Next Generation Firewall. There are multiple categories, and we have allowed only the required categories, such as for the HR department and for accounting, whatever applications they use in day-to-day work. Based on that, we have allowed the application. Apart from that, everything is blocked.

The best features Check Point Application Control offers include the automatic update of the application categories, which gets automatically updated, and based on that, if any new application is added, it will get blocked under the block categories.

The automatic updates help my team by saving time and reducing manual effort because if we need to block the entertainment applications, if a new application is introduced in the market that falls under the entertainment category, it is blocked by default, so we don't have to manually configure or block this newly added application.

Check Point Application Control has positively impacted my organization by controlling application access; previously, all the users had full internet access, and now we have controlled their application access based on this solution.

Currently, I do not feel any feature needs improvement in Application Control because everything functions perfectly.

The costing could be better for smaller organizations, as sometimes they feel they are not able to purchase these features due to pricing.

I have been using Check Point Application Control for three years.

Check Point Application Control is stable.

The scalability of Check Point Application Control is better.

The customer support is supportive.

Positive

We have been using the same solution from the start, so I did not previously use a different solution before Check Point Application Control.

I have seen a return on investment in terms of time saved and increased productivity.

My experience with pricing, setup cost, and licensing is good based on our organization's size, so the pricing, setup cost, and licensing is considered acceptable.

Before choosing Check Point Application Control, we evaluated Sophos Application Control.

After we enabled Check Point Application Control, I have seen improvements in security and productivity with fewer security events and increased productivity of the employees.

This is the industry's best solution, and organizations can consider Check Point Application Control tool in their organization.

Our company has a business relationship with this vendor as we are a partner.

I rate Check Point Application Control nine out of ten.

The main use case for Check Point Application Control is to help us in productivity control because from the application control, we can limit the usage or restrict the usage of time-wasting applications, such as social media or other heavy streaming applications. Moreover, we can block risky and anonymizer applications using the application control feature.

For Microsoft 365 applications, it is easier using Check Point Application Control to decide what happens with the data. Earlier there were multiple FQDNs or the updateable objects being used, but now since we have the application control, we can simply call an application and all the dependent or prerequisite URLs get allowed with that.

The best features Check Point Application Control offers include next-gen application visibility with the help of application controls and the sync with the cloud, which continuously keeps track of the application signatures and known applications. Whenever a new application is identified, the signature is embedded into the application control signature database.

The next-gen application visibility and cloud sync features are valuable for us because they allow us to provide granular controls over the traffic that is flowing in and out. Earlier, when we had the visibility up to Layer 4, we could only take action based on the IP addresses and the ports. If we were allowing HTTPS, we would allow HTTPS for all the internet websites. But now with Check Point Application Control, we can specifically control which applications we want to provide access to our internal users and which ones to be blocked.

Check Point Application Control has positively impacted our organization because productivity has increased through putting bandwidth limits and restrictions to non-legit or less productive applications. The people in the organization are bound to have their time diverted towards other productive applications. The bandwidth control on streaming applications was limited, which saves bandwidth for the production workloads, helping to increase efficient communication among the organization resources.

From the bandwidth perspective, earlier there was a specific site where the bandwidth was choking during peak hours. Currently, it is just 70 to 80% utilized even during peak hours, due to implementing bandwidth control policies along with the application control from the firewall devices. This has helped us reduce a load of around 20-30%.

There are some legitimate apps which may be blocked mistakenly if signatures are outdated or traffic is misidentified. A custom business app should be detected as an unknown application and the action should be observe or caution instead of blocking so that legitimate traffic does not get impacted if it goes unidentified due to any reason.

There is some performance lag on the device itself when we turn on Check Point Application Control features. Check Point can do a deep dive to understand how they can improve the performance while we enable the application control feature on all the policies. Something can be done with the underlying architecture or the integration, examining how it is embedded and how the hardware is supporting Check Point Application Control.

If you are enhancing the productivity of the organization and employees, that can translate into money saved. We have not quantified that.

The experience with pricing, setup cost, and licensing for Check Point Application Control is quite in line. It is not on the higher side, so the experience has been fair.

It is quite in line. The updates are regular and can be scheduled. There are no outstanding issues.

The advice I would give to others looking into using Check Point Application Control is that Check Point brings in significant industry experience from the stateful firewall. They moved into next-generation firewalls, the application control features, and the integration within the product is quite good. The transition is very smooth. The application control features have minimal false positivity with a minimum level of misclassifications based on the signature. The results are good.

On a scale of 1-10, I rate Check Point Application Control a 9.

Check Point Application Control serves as my main solution to control application access within my organization. Recently, we blocked entertainment applications, which enabled us to control application access for users more effectively through Check Point Application Control.

Check Point Application Control offers excellent features, particularly its auto-update capability and deep application visibility and control. The auto-update feature and deep application visibility help me in my daily work because application updates are automated, eliminating the need for manual updates, and I can control applications at a granular level.

Check Point Application Control has positively impacted my organization by providing strong control over application usage and visibility. It has improved compliance and saved time for our organization.

Check Point Application Control is functioning well for our needs, and I do not see anything requiring improvement at this time.

I have been using Check Point Application Control for more than three years.

Check Point Application Control demonstrates excellent stability.

Check Point Application Control has excellent scalability with no issues.

Although I have not personally interacted with the customer support team, my team has had multiple sessions with them, and they provided good support.

We have been using the same solution since the beginning and have not switched from a different solution.

Check Point Application Control has delivered excellent return on investment, as it has saved both money and time for our organization.

I had a great experience with the pricing, setup cost, and licensing from the Check Point sales team because they made it straightforward to understand the setup cost and licensing.

Before choosing Check Point Application Control, I did not evaluate other options.

I recommend that any organization wanting to control application usage in their environment consider Check Point Application Control as one of the best solutions available. I provided this review a rating of 10.

Our main use case for Check Point Application Control is to detect and prevent cyber attacks with the help of different application traffic that is restricted, so it identifies.

In our organization, we use Check Point Application Control to control user traffic accessing allowed application categories by the security policy configured in the solution.

The best feature about Check Point Application Control is that its database is very strong, and the categorization of the application is outstanding, so we are able to block applications based on the categories.

The categorization in Check Point Application Control helps our team because entertainment and weapons applications are not allowed in our organization, so we block those applications.

After implementing Check Point Application Control, we are getting proper security and user application access control.

We are seeing improvements in security with the controls from Check Point Application Control, and we are also saving our productivity.

I don't see any feature lacking in Check Point Application Control.

Every solution has space to improve, which is why I've chosen nine out of 10 for Check Point Application Control.

We have been using Check Point Application Control for more than three years.

Check Point Application Control is stable.

Scalability-wise, Check Point Application Control is excellent and can grow with our organization's needs.

I have a great experience with the support team for Check Point Application Control.

Neutral

We are using Check Point Application Control as the same solution without switching.

We have evaluated FortiGate application control before choosing Check Point Application Control.

I can say we have seen time saved as a return on investment.

Anyone looking for the best solution in the security domain for application control can consider Check Point Application Control. I rate Check Point Application Control nine out of ten.

My main use case for Check Point Application Control is visibility.

I use Check Point Application Control to monitor what users in my company are using and to control the specific use case.

I don't have anything else to add about how I use Check Point Application Control for visibility or control at this moment.

The best features Check Point Application Control offers include granular access level and good visibility, and it is also easy for deployment.

Check Point Application Control has positively impacted my organization by being easy to deploy and manage.

The ease of deployment and management has benefited my organization because we already have a Check Point firewall, and we have a team to manage Check Point, so we decided to integrate more of the features for Check Point as well, recently adding a Check Point application.

I think Check Point Application Control is good and doesn't require any improvements at this time.

I don't have more to add about any needed improvements, even minor ones, right now.

I have been using Check Point Application Control for around six to seven months.

Check Point Application Control is stable; till date, it remains stable.

We haven't tried Check Point Application Control's scalability.

I haven't really needed to contact customer support.

Neutral

I didn't previously use a different solution for application control.

Check Point Application Control is deployed on-premises in my organization.

My experience with pricing, setup cost, and licensing was that the cost was high, and I think the cost should be improved for competitor pricing.

We are a reseller in addition to being a customer of this vendor.

I have seen a return on investment because it was time saved, as we already have expertise, making it a time-saving solution for me.

My experience with pricing, setup cost, and licensing was that the cost was high, and I think the cost should be improved for competitor pricing.

Check Point Application Control was my first choice without evaluating other options.

That's it for now regarding additional features.

I advise others looking into using Check Point Application Control that it is good to try, easy to manage, but the pricing part is on the higher scale; nothing else, overall, it's a good product.

On a scale of one to ten, I rate Check Point Application Control a seven.