What is our primary use case?
My main use case for Check Point Harmony Endpoint involves its endpoint protection as well as full disk encryption with the EDR solutions, Endpoint Detection and Response.
A specific example of how I use the endpoint protection or disk encryption in my daily work includes using disk encryption such as BitLocker, along with two encryption types: FileVault and Check Point encryption. The encryption keys are stored in the Check Point Harmony Endpoint console.
The main point I want to add about my primary use case is that the basic license includes an EDR license, Endpoint Detection and Response, which is a major highlight for Check Point Harmony Endpoint.
What is most valuable?
The best features that Check Point Harmony Endpoint offers for me and my team include Application Control, Device Control, SandBlasting, and the basic DLP.
Application Control and Device Control have helped my organization by allowing us to block applications, such as inbuilt agents installed on user devices, while using Check Point Harmony Endpoint Application Control features. With Device Control, we can impose restrictions on users, preventing them from copying organization data from pen drives or external drives such as Bluetooth. We can control accessories, keyboards, and mice, either blocking or allowing them as needed.
Check Point Harmony Endpoint has positively impacted our organization by improving our security, preventing issues such as phishing, ransomware, and malware. It also offers URL protection, filtering downloads from browsers to stop any malicious files before they are downloaded.
What needs improvement?
Regarding the features, I want to add that DLP, in my opinion, is not full-fledged; it only provides features at the web browser level.
To improve Check Point Harmony Endpoint, I believe the DLP feature needs enhancement because many SMB customers seek a single solution that includes both EDR and DLP to meet regulations. While EDR has no drawbacks, we often have to look for other DLP solutions due to the limited DLP features in Check Point Harmony Endpoint.
Beyond the DLP concerns, I feel that everything else works well. Features such as encryption, SandBlasting, patch management, and vulnerability management are available in Check Point Harmony Endpoint. The only notable drawback for me is the DLP feature, and if we receive more use cases from customers, we can provide updates on that.
For how long have I used the solution?
I have been working in my current field for the past three years and four months.
What do I think about the stability of the solution?
Check Point Harmony Endpoint is stable in my experience.
What do I think about the scalability of the solution?
Regarding scalability, I would like to provide a specific rating, but I am unsure how to articulate that clearly.
Which solution did I use previously and why did I switch?
Before using Check Point Harmony Endpoint, we had alternatives in place but I cannot specify which ones at this moment.
We evaluated other options, specifically Kaspersky, which offers a single solution encompassing email gateway and patch management alongside endpoint security. We assessed that offering in comparison.
What was our ROI?
In terms of return on investment, I cannot quantify savings because of the numerous variables involved.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing indicates that the costs have increased compared to last year. Previously, Check Point Harmony Endpoint offered competitive pricing for small user counts such as thirty-five, but they have raised the minimum entry level to one hundred users. While the prices are higher than those of other solutions, the features justify the investment for customers.
What other advice do I have?
While we did not actively track metrics, I can share that when we downloaded a third-party KMS tool considered an activation tool, Check Point Harmony Endpoint detected it as malicious and blocked the EXE file during the download process.
My advice for those considering Check Point Harmony Endpoint is to pursue it for its better features, particularly the EDR licensing available even in the basic package, unlike some competitors that reserve it for advanced or complete solution packages. SandBlasting is a standout feature that I recommend highlighting to customers. I would rate this product nine out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner