Try our new research platform with insights from 80,000+ expert users
Check Point CloudGuard Network Security Logo

Check Point CloudGuard Network Security pros and cons

4.3 out of 5
2,927 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Check Point CloudGuard Network Security offers scalable security features such as threat prevention, HTTPS inspection, and IPS that adapt to company needs.
It includes a management console that provides centralized control and visibility, facilitating efficient monitoring and administration across multiple cloud environments.
Users appreciate the ease of implementation and management, noting rapid deployment and integration capabilities with major cloud platforms like AWS, GCP, and Azure.
Check Point CloudGuard Network Security supports auto-scaling and zero-touch deployment, enhancing operational efficiency and responsiveness to varying traffic loads.
Advanced features such as Identity Awareness, VPN, URL filtering, and application control provide thorough access and content management to secure corporate networks against various threats.

CONS

Check Point CloudGuard Network Security is very expensive, and there are additional costs beyond the standard licensing fees.
It can be difficult to install properly without prior training.
Our biggest complaint concerns the high resource usage for IDP/IPS, as we cannot turn on all of the features even with new hardware.
The documentation has been rough. Being able to do it yourself can be hit or miss given the constraints of the documentation.
There is a limitation with the version upgrade. We are using version 81.10, and from what I understand, it is problematic to upgrade this version.
 

Check Point CloudGuard Network Security Pros review quotes

AT
Sep 16, 2020
The visibility, the one-pane-of-glass which allows me to see all of my edge protection through one window and one log, is great. Monitoring everything through that one pane of glass is extremely valuable.
reviewer1459770 - PeerSpot reviewer
Dec 6, 2020
The comprehensiveness of the CloudGuard’s threat prevention security is great, especially once they integrate Dome9 in the whole thing. That really ties the whole thing together, so you can tie your entire cloud environment together into one central location, which is nice. Previously, we had three or four different tools that we were trying to leverage to do the same stuff that we are able to do with CloudGuard.
MP
Jul 16, 2020
What's most valuable to me is that it's a contiguous solution that aligns well with the components that we've relied on and trusted from a traditional hardware, firewall, and unified threat management system. My engineers and analysts don't have to learn another platform. We have already entrusted our security controls to Check Point for perimeter and physical security, and now we can do so at the virtual layer as well, which is key to us.
Learn what your peers think about Check Point CloudGuard Network Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
815,854 professionals have used our research since 2012.
Scott Chambers - PeerSpot reviewer
Mar 7, 2024
We are using gateways, and I appreciate the high-availability gateways they have. They stand out more than the competitors.
PRASHANT GARJE - PeerSpot reviewer
May 22, 2024
The most important feature is that we are able to use Check Point CloudGuard Firewall for our cloud security. We can make the deployment automated. We do not require manual intervention.
reviewer1026111 - PeerSpot reviewer
Sep 15, 2020
The features of the solution which I have found most valuable are its flexibility and agility. It's a fully scalable solution, from our perspective. We can define scaling groups and, based on the load, it will create new instances. It's truly a product which is oriented toward the cloud mindset, cloud agility, and this is a great feature.
GF
Dec 2, 2020
The scalability is very good; again, very user-friendly. I wouldn't even say "user-friendly" because, as long as you deploy it properly, you can kill an EC2 and it will spin up another one right away, within about a minute and a half. And it will be ready for production right away.
NikhilKrishnan - PeerSpot reviewer
Apr 16, 2024
The number of options it gives for deployment or security is valuable. When it comes to security, it has a feature that is super awesome for zero-day-based attacks. Their IPS is also very capable. We tested other firewalls, and we understood that it is the best one in the market.
reviewer1098015 - PeerSpot reviewer
Sep 23, 2020
The most valuable feature is that we can use the same manager server that we use on our own Check Point firewalls. We integrated CloudGuard on that manager and we can use the same kind of protections that we use on the on-prem firewalls, like the IPS and antivirus policy. We can have the same kind of protection on the Cloud environment that we have on-premise.
RT
Apr 12, 2024
The endpoint VPN is super stable. The routing is also very good. We tried a competing product first, but we could not make it work. We came across CloudGuard. The network routing across different virtual networks in Azure and AWS was way ahead of any of the other technologies. That helped us be able to cover the whole network using one single cluster.
 

Check Point CloudGuard Network Security Cons review quotes

AT
Sep 16, 2020
The biggest room for improvement is that, for a long time now, they've moved everything over to R80 but they still maintain some of the stuff in the old dashboard. They need to "buy in" and move everything to the modern dashboard so that you don't have to go to one place and to another place, at times, to configure the environment. It's time they just finish what they started and put everything in the new, modern dashboard.
reviewer1459770 - PeerSpot reviewer
Dec 6, 2020
The documentation has been rough. Being able to do it yourself can be hit or miss given the constraints of the documentation.
MP
Jul 16, 2020
It's meeting our needs at this time. If I could make it better, it would be by making it more standalone. That would be beneficial to us. I say that because our current platform for virtualization is VMware. The issue isn't any fault of Check Point, it's more how the virtualization platform partners allow for that partnership and integration. There has to be close ties and partnerships between the vendors to ensure interoperability and sup-portability. There is only so far that Check Point, or any security vendor technology can go without the partnership and enablement of the virtualization platform vendor as it relies on "Service Insertion" to maintain optimal performance.
Learn what your peers think about Check Point CloudGuard Network Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
815,854 professionals have used our research since 2012.
Scott Chambers - PeerSpot reviewer
Mar 7, 2024
Some more built-in marketplace templates would be nice. It would be nice to see more vendor assistance in deployments and backup of recoveries versus having customers rely upon that themselves. That would make it a lot more seamless and aligned with the standard on-premise model that is there. Check Point can extend the same posture that they have to CloudGuard and make that transition very seamless.
PRASHANT GARJE - PeerSpot reviewer
May 22, 2024
We have done a lot of automation with the firewall, but sometimes, there are some failures because of some bugs. The fixes for them are still not available. We have daily or weekly communication with the Check Point people giving support in the India region, but we have not seen much improvement or response to our requests for some additional features.
reviewer1026111 - PeerSpot reviewer
Sep 15, 2020
The convergence time between cluster members is still not perfect. It's far away from what we get in traditional appliances. If a company wants to move mission-critical applications for an environment to the cloud, it somehow has to accept that it could have downtime of up to 40 seconds, until cluster members switch virtual IP addresses between themselves and start accepting the traffic. That is a little bit too high in my opinion. It's not fully Check Point's fault, because it's a hybrid mechanism with AWS. The blame is 50/50.
GF
Dec 2, 2020
We did not use the AWS Transit Gateway, and that's one of the things that we're currently using. I believe we will be working with Check Point again, in the near future, to implement it, once they start having proper support for a single customer with multiple accounts. When we were using them, we had to install Check Point on each and every single account.
NikhilKrishnan - PeerSpot reviewer
Apr 16, 2024
The main issue that I have noticed is that for deployment, it still requires a dedicated management server, and the gateway is completely different. That sometimes can cause issues.
reviewer1098015 - PeerSpot reviewer
Sep 23, 2020
CloudGuard functions just like any other firewall. It functions very well. The only thing that could maybe be improved would be to integrate some tools that are not integrated with the SmartConsole, like the SmartView Monitor that we need to open on a different application to access.
RT
Apr 12, 2024
They are coming out with more SD-WAN express route support from a firewall perspective. That would be great.