Try our new research platform with insights from 80,000+ expert users
Support at a security firm with 51-200 employees
User
Top 5Leaderboard
Offers comprehensive security, helps with compliance, and has good monitoring
Pros and Cons
  • "The solution offers continuous security monitoring and alerting, which can help organizations detect and respond to security incidents in real time."
  • "One of the big problems we found in Check Point, in general, is the support."

What is our primary use case?

The importance and use of this product were required to improve new application deployments made in the Microsoft Azure cloud. They were not one hundred percent secure, however with this CloudGuard application security from Check Point has managed to improve all these requirements to obtain greater security.

The applications are generally internal to the company, however, they are secure thanks to Check Point CloudGuard.                                   

How has it helped my organization?

Check Point CloudGuard Application Security is a cloud-based security solution designed to protect web applications and APIs from various types of cyber threats.

This tool has managed to improve security considerably in our apps and the APIs created for the company. We have not presented problems, threats, or leaks even when some are exposed to the Internet and are more susceptible to attacks. The company is now more secure, thanks to Check Point.                                             

What is most valuable?

The solution is created one hundred percent on the cloud; the portal is easy to manage.

The solution offers continuous security monitoring and alerting, which can help organizations detect and respond to security incidents in real time.

CloudGuard Application Security provides comprehensive visibility into web applications and API traffic

The solution offers support for compliance regulations such as PCI-DSS, HIPAA, and GDPR, helping organizations to meet their regulatory obligations.

What needs improvement?

One of the big problems we found in Check Point, in general, is the support. It is always attended very late or they take a long time to answer.

The cost of this tool is extremely high, which is why it must be analyzed before implementing it.

The support language is only English. This causes some problems in Spanish-speaking countries. They could expand the languages offered to help the client.

Buyer's Guide
Check Point CloudGuard WAF
February 2025
Learn what your peers think about Check Point CloudGuard WAF. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.

For how long have I used the solution?

This excellent security tool, Check Point CloudGuard, has multi-cloud security and is also perfect for secure developments. It's been used in recent years by the company.

Which solution did I use previously and why did I switch?

Previously we did not use a technology like this.

Which other solutions did I evaluate?

We always carry out tests and validations before acquiring a solution.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Hugo Alexis Espinoza Naranjo - PeerSpot reviewer
Perimeter Security Administrator at a security firm with 51-200 employees
Real User
Top 5Leaderboard
Easily deployed with good visibility and excellent security capabilities
Pros and Cons
  • "By using a cloud application security solution, our company can save costs by reducing the need for additional security hardware and software and improving operational efficiency."
  • "A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection."

What is our primary use case?

We were looking for a solution that met the following criteria: 

  • A web application security solution that uses real-time attack prevention techniques and vulnerability scanning to protect applications and data running in public or private cloud environments. 
  • Monitoring and logging of application traffic to detect anomalies and suspicious attacks.
  • Integration with automation and orchestration tools for cloud application security management and scalability. 
  • Detection and prevention of SQL injection attacks, cross-site scripting (XSS), and other types of injection attacks. 

How has it helped my organization?

The product benefits my business by giving enhanced protection for useful cloud applications. 

Using enhanced visibility and analytics, the product provides visibility into security. By using a cloud application security solution, our company can save costs by reducing the need for additional security hardware and software and improving operational efficiency. 

With this product, we are achieving regulatory compliance. CloudGuard Application Security can help businesses meet security regulatory requirements, which makes for an outstanding organization. 

What is most valuable?

This cloud web application security solution can be quickly and easily deployed in public or private cloud environments, allowing a company to protect web applications and reduce downtime quickly. 

This solution provides us with enhanced visibility, giving us the ability to provide web application security analysis in the cloud.

What needs improvement?

A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection. We need to protect against other attack vectors like network or device email attacks in order to provide the greatest protection possible. It is very understandable that there are many characteristics of an attack, including if it is from the inside or outside the organization. However, it would be important to validate threats and have all manner of solutions on hand to help protect the company.  

For how long have I used the solution?

I've used the solution for one year.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Check Point CloudGuard WAF
February 2025
Learn what your peers think about Check Point CloudGuard WAF. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
reviewer2037513 - PeerSpot reviewer
Project Manager at Digitas APAC
User
Great support, excellent ROI, and good performance
Pros and Cons
  • "It provides advanced analytics that gives each team time to prepare for any threat that might occur in the future."
  • "The coding configurations can be simplified to save time for IT teams and developers."

What is our primary use case?

This solution safeguards applications that are hosted in the organization's cloud servers. 

It monitors the performance of applications from the deployment stage to the implementation of assigned tasks. 

Check Point CloudGuard Application Security blocks any cyber attacks channeled to destroy confidential data. 

Configuration of this platform with other tools took place efficiently without any challenge. The set security features alert the IT team when there are external threats that can affect workflows. the organization's networking infrastructure is ever secure since we deployed this product.

How has it helped my organization?

The solution has comprehensive security cover for the cloud applications, which has been a great achievement in the organization since we deployed this platform. 

It provides advanced analytics that gives each team time to prepare for any threat that might occur in the future. 

Enhanced data intelligence helps us to plan and turn provides analytics into actionable insights. 

Safeguarding applications has enabled members to focus on more productive activities without fear of being attacked. The set of security tools enables each app to perform its role without external interference.

What is most valuable?

Sensitive data exposure has enabled us to plan and make reliable decisions based on the work environment. 

The product has confirmed to each department that the injection of new data into the systems is highly secured to enhance transparency. 

Security misconfigurations enable the IT team to rearrange application codes and take full control. 

Insecure deserialization provides a comprehensive report of applications that enables the IT team to identify malicious coding and execute it in advance before it affects workflows.

What needs improvement?

The coding configurations can be simplified to save time for IT teams and developers. 

Insufficient logging among applications breaches security, and this may lead to undetected malware attacks contributing to data compromise. 

The set security tools target known vulnerabilities, and when there is an outbreak of new viruses, it may not be noticed, easily exposing data to cyber attackers. 

Broken access control enables members to gain unauthorized access to saved files allowing them to edit accounts to enable other users to gain access. The software has great capability of preventing data with the set organization policies.

For how long have I used the solution?

I've used the solution for nine months.

What do I think about the stability of the solution?

This platform is stable, and the performance is excellent.

What do I think about the scalability of the solution?

I am impressed by the scalability.

How are customer service and support?

There is great support and cooperation from the customer service team.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I have not worked with a similar solution.

How was the initial setup?

The initial setup was straightforward.

What about the implementation team?

The vendor team was responsible for the full deployment.

What was our ROI?

There is increased ROI from improved application security.

What's my experience with pricing, setup cost, and licensing?

The cost and setup are good, depending on the company size.

Which other solutions did I evaluate?

I have no experience with other security products on the market.

What other advice do I have?

This platform is good for safeguarding cloud applications.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
PeerSpot user
Security IT at a tech services company with 51-200 employees
Real User
Top 5Leaderboard
Great security tool, intuitive tool
Pros and Cons
  • "The portal is quite intuitive."
  • "We would like the solution to be more economical since it is not accessible to all clients."

What is our primary use case?

We require the use of a solid security tool for our websites provisioned in Microsoft Azure App Service, which is used for internal use by the company and for external use by the client.

The key requirements that we needed to solve were to have automated protection, to have little administration in addition to providing few false positives, all this was successfully solved or provided through CloudGuard Application Security, in addition to the fact that we were able to centralize everything in the whole family. 

How has it helped my organization?

Thanks to the centralized use of Check Point CloudGuard App Security we managed to have protection for our Windows and Linux sites, in addition to having little interaction with exceptions due to having this tool in prevention mode.

This tool does not require a lot of learning time, it is incredible. With other tools, adaptation time is required, which with Check Point is not necessary.

We have also been able to find a sensible implementation of the application, providing confidence and business peace of mind.

What is most valuable?

Check Point CloudGuard Application Security offers us many virtues, the ones we liked the most were:

  • Very few false positives, which generates a lot of confidence in the product
  • The portal is quite intuitive
  • The solution does not require much time to adapt to the sites and applications it protects.

In itself, the application really meets our expectations. At the management level, the solution is what was needed to protect this area of the company's infrastructure.

What needs improvement?

This Check Point solution is an extremely complete security solution, it is really amazing. However, there are always improvements that can be made to all of the tools.

We would like the solution to be more economical since it is not accessible to all clients or is a point of consideration.

Regarding the documentation, starting implementation was not so clear. We had to validate several guides until we could do it correctly.

Finally, we would like the Infinity portal perform better.

For how long have I used the solution?

During this last year we have been adding the use of CloudGuard checkpoint for the protection of our infrastructure in Microsoft Azure.

What do I think about the scalability of the solution?

It is a cloud solution, managed by Check Point. So far we have not had performance problems.

Which solution did I use previously and why did I switch?

We previously tested Microsoft Azure Application Gateway with the WAF feature. However, two points led us to switch to Check Point:

1- We wanted a centralized security environment. We already have Check Point solutions based on the infinity checkpoint portal.

2- The WAF solution required more time in detection mode.

What's my experience with pricing, setup cost, and licensing?

Costs are an important issue to discuss with the partner. Validate the documentation and its scope to validate if they meet corporate requirements.

Which other solutions did I evaluate?

We always evaluate the solutions in the market to make the best decision.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer2379417 - PeerSpot reviewer
Delivery Engineer at a tech services company with 51-200 employees
Real User
Top 20
Offers comprehensive threat prevention capabilities and a user-friendly interface
Pros and Cons
  • "The features I have found most valuable are the comprehensive threat prevention capabilities, automated policy management, and seamless integration with cloud environments."
  • "For the next release, I would suggest considering features like enhanced threat intelligence integration."

What is our primary use case?

With CloudGuard WAF, I can deploy a cloud-based network protection solution that secures my applications, endpoints, and data.

What is most valuable?

The features I have found most valuable are the comprehensive threat prevention capabilities, automated policy management, and seamless integration with cloud environments.

What needs improvement?

For the next release, I would suggest considering features like enhanced threat intelligence integration.

For how long have I used the solution?

I have been using Check Point CloudGuard WAF for about two years.

What do I think about the stability of the solution?

The stability of the product has been good so far.

How are customer service and support?

Check Point's technical support is helpful and knowledgeable overall, but there can be delays in response, especially regarding licensing issues.

Which solution did I use previously and why did I switch?

The main reasons I chose this vendor for web application security were their ability to consolidate management facilities, their comprehensive features, and their flexibility in addressing different security needs.

What was our ROI?

We have seen ROI from using CloudGuard WAF.

What's my experience with pricing, setup cost, and licensing?

I believe that the pricing or licensing of CloudGuard WAF could be more competitive.

What other advice do I have?

Implementing CloudGuard WAF allowed me to address the challenges of securing my applications and data in a rapidly evolving cloud environment.

Using CloudGuard WAF has brought significant benefits, including improved threat protection, streamlined policy management, and enhanced usability. I noticed these advantages shortly after the first deployment.

It is extremely important to me that CloudGuard optimizes security to protect my applications without solely relying on signatures.

To access the false positive rate, I typically review assessment reports available on platforms like AWS or Azure. By evaluating how effectively the solution preemptively blocks zero-day attacks and minimizes false positives, I can reduce the total cost of ownership for my web application security.

The solution's privacy features, user-friendly web console, virtual deployment options, and physical appliance capabilities have all contributed to reducing my total cost of ownership.

Overall, I would rate CloudGuard WAF as an eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
PeerSpot user
Hazel Zuñiga Rojas - PeerSpot reviewer
Administrative Assistant at Tecapro
Real User
Great security and more visibility but needs more AI capabilities
Pros and Cons
  • "It offers good functionality of the application that is currently running."
  • "I would like to be able to integrate the theme of Artificial Intelligence to help review issues and to monitor and view the security issue while also suggesting and interpreting and additionally configuring solutions - basically, acting as an interpreter."

What is our primary use case?

We have had the need to ensure the development of each of our applications based on the fact that the applications must be safe, fast, and efficient. We want to prevent an injection of a vulnerability attack by broken authentication, exposure of confidential data, or external entities that can inject us with xml services via broken access control. All these characteristics cause insecurity. We have looked for solutions that can guide us and establish a safe and concise baseline.

How has it helped my organization?

It has given us greater security at an organizational level. It has allowed us to use components with known vulnerabilities, which have been prevented based on their multiple databases that have correlated incidents, helping the development of applications to be fast, efficient, and safe, which is what we were looking for. Thus giving us the possibility to register, monitor, and identify technological insufficiencies or absent capacities in the development of the application.

What is most valuable?

Its most outstanding feature is the registry and the possibility of monitoring everything. When it comes to simplifying or establishing an error, an infraction, or a detection due to a breach of unauthorized access, it gives us an overview of each one of the capabilities and a segmented control over the development. It offers good functionality of the application that is currently running. It's giving us the ability to test based on vulnerable interfaces, and anomalous requests and responses. All these types of characteristics give us a reference point as to whether they are secure or insecure. We get logging monitoring and general visibility of the application.

What needs improvement?

The application allows us to have control over its activities, the management, and the interconnection of monitoring which takes advantage of computing power, is exceptional. That said, I would like to be able to integrate the theme of Artificial Intelligence to help review issues and to monitor and view the security issue while also suggesting and interpreting and additionally configuring solutions - basically, acting as an interpreter.

For how long have I used the solution?

We've used the solution for about six or seven months. That was when established applications at the cloud level.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer2349423 - PeerSpot reviewer
CIO at a tech services company with 51-200 employees
Real User
Has AI feature which makes operations easy but technical support needs improvement
Pros and Cons
  • "The tool's most valuable feature is AI, which makes operations easier. Moreover, it is easy to deploy."
  • "I have encountered issues with Check Point CloudGuard Application Security's technical support. It also has missing configuration features."

What is our primary use case?

I use the solution for securing web applications. 

What is most valuable?

The tool's most valuable feature is AI, which makes operations easier. Moreover, it is easy to deploy. 

Securing web applications with Check Point CloudGuard Application Security is easy. The setup and configuration are easy compared to alternatives. It stands out for its simplicity. It does not rely on signatures, one of its unique features. 

The solution helps to reduce TCO. It minimizes the pressure. 

What needs improvement?

I have encountered issues with Check Point CloudGuard Application Security's technical support. It also has missing configuration features. 

How was the initial setup?

Check Point CloudGuard Application Security's deployment is easy. 

What's my experience with pricing, setup cost, and licensing?

Check Point CloudGuard Application Security's pricing is comparable to other products in the market. 

What other advice do I have?

The tool protects newer applications. It isn't very good when dealing with both applications. However, it is expected. I rate the overall product a seven out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Buyer's Guide
Download our free Check Point CloudGuard WAF Report and get advice and tips from experienced pros sharing their opinions.
Updated: February 2025
Buyer's Guide
Download our free Check Point CloudGuard WAF Report and get advice and tips from experienced pros sharing their opinions.