Check Point CloudGuard Network Security Reviews

Primary use case is to use it for protecting the network.

I am working with the platform, but unlike a typical customer using it for protection, we are mostly using it for deployment and debugging.

The overall network security is good. It's big-picture, all in one bundle. It's valuable to have everything in one place instead of spreading across different products.  

Unified security management positively affects a company's security operations. They have one unified view of the security. I can connect multiple gateways to the management and have it in one place. I can have reporting and views in a single pane of glass on the consolidated platform. 

It's easy to use. The management is the best on the market. It's very easy to work with, read, understand, and navigate.

It helps increase our customer's security posture. We can see in some cases CloudGuard improves our customers' posture overall. 

There were about ten people involved in the initial project. We conducted some POCs regarding customer security issues we were facing. We outlined ten cases, and these cases were created by a local Check Point engineer in Vilnius, Lithuania, to demonstrate scenarios. After testing all these scenarios, we realized that with certain preconfiguration or suitable configuration of Check Point products, including firewalls, we could effectively address the security cases we had. 

Currently, we have plans to develop more Check Point CloudGuard products, as well as some on-premise ones, and certify engineers. We also plan to demonstrate the value of Check Point products to about five or six customers, along with a local Check Point representative. 

Discussing cloud security and demonstrating its functionality can help build customer trust to initiate POCs and deep dive sessions with architects and others. This business is emerging notably in regions like Scandinavia, where there are more CloudGuard security projects with Check Point. We foresee a similar trend as the market matures and investments increase.

In our market nowadays, a topline risk is phishing. People can just open up malicious email and you can get terrible consequences. We're using Check Point to meet our demands for security, including email security. They have quite good email cloud security in Check Point. We have quite good ratio of getting getting phishing emails caught. Now, there is a lot of hybrid work from everywhere, from home, from the branches, from the main office, from the cafeteria, and so on. We want to manage everything, see how every employee is working, and provide secure working conditions for all the employees.

We protect the cloud by uploading environments to the cloud and making the developments over the cloud.

We used to have an on-prem setup, and the implementation of the new one came naturally since it looks like the previous setup. I know the places for making configurations. 

We primarily use the solution for protecting the network perimeter and monitoring incoming and outgoing packets. Over the years, the product has evolved significantly by inspecting HTTPS and IPS and having antivirus and anti-bot capabilities. It has been interesting to observe how Check Point keeps pace with global security challenges and addresses them efficiently through policies on CloudGuard gateways.

In addition to blocking attacks and protecting the network, we benefit from the visibility into the logs, the simplicity, and the accuracy of reaching the events. All the capabilities are inside the solution. Unlike its competitors, it does not require extra licenses. It is well-integrated and very detailed. We can pinpoint the details to minutes, seconds, or milliseconds, and see what is going on. We can also see smart events and smart reports with pictures, graphs, etc. Through a single pane, we can see how our network environment is behaving. We can see any changes in the attack patterns, the number of logs, or any new events, which may give insights into an attack going on. We can also see if a new application was released by DevOps teams without telling us.

A big benefit of Check Point is that the same policy can be installed on-premises, on the cloud, with Kubernetes, with Dockers, etc. It works on huge devices or gateways on the cloud. It can work with Azure, Google Cloud, and others. The SmartConsole view helps handle all the environments with a single policy which makes it very easy. It enables working with a small team. A small team of five to ten people is enough for a global, worldwide network.

We are primarily on-premise. We also use Azure for cloud services, mostly for VPN. We use it as the active directory to authorize access to the VPN, which is helpful. 

However, as a healthcare organization in Germany, it is very challenging to get cloud solutions like CloudGuard approved. Cloud solutions must be located in Germany or Frankfurt, where all the data centers are situated. This requirement makes it somewhat difficult, however, otherwise, it is manageable.

We have a lot of audits in the healthcare industry and Check Point has become an industry standard.

This solution would be more beneficial for my AWS side, for our applications. The platform is utilizing AWS, so it requires further protection through some enhancements, which involve allocating more resources into AWS. Check Point serves as our system. I consider it a business case to protect that application work on the cloud.

Check Point is one of the key aspects of our security. It's protecting the e-commerce side and some functions on the public side of the website. It plays a large role in protection.

I use our Oracle OCI environment to segregate our ERP system, which is JD Edwards, running in Oracle Cloud.

Check Point CloudGuard Network Security makes it easy to create firewall routes and so on instead of the tools out of Oracle OCI. It's inside our unified policy.

The solution is primarily used for security.  We had 48 to 50 firewalls for data center segmentation. All data centers were fitted into multiple zones. Each zone had a different data classification. We had the firewalls deployed on several overseas remote sites.

For nearly three and a half years, the solution was doing pretty good security. It provides scalability in terms of the multiple firewalls that can be connected with the cluster as well. It offers us easy signature updates and rule changes. We just prepare one rule and then select how many firewalls you want to push. It is easy in terms of the management.