Check Point Harmony SASE (formerly Perimeter 81) Reviews

We use the solution for secure remote access and access policy governance.

As part of our SOC2 Type 2 audit preparation, we wanted a solution that will be able to enforce secure passwords and two-factor authentication on our remote access to company development and production environments (hosted in GCP).

We were using a different VPN provider yet struggled with getting those policies in place. As timelines were very aggressive, we decided to look for a managed service or a SaaS offering, and Perimeter 81 was very quick to respond and provide a test account.

We were finalizing our SOC2 Type 2 audit and decided to move to a different remote access vendor.

We were able to implement Perimeter 81 within an hour with all the required services (SSO) and infrastructure (GCP and SaaS applications).

Distributing the agent was very simple, allowing us to enforce security posture on our devices (i.e. S1, Disk-encryption, etc.).

The team is now evaluating the Firewall-as-a-Service capabilities as well as the Secure Web Gateways to see if we require any additional policies in place as we're rapidly growing.

The multiple geographical access points with dedicated IP addresses allow the team to deploy site-2-site tunnels with specific IP restrictions as well as configure IP whitelisting on many of our SaaS applications. 

The plug-and-play Wireguard site-2-site connector was a great add-on as it allowed the team to just run a script and have our entire GCP network get connected to Perimeter 81 without any manual configuration. 

SAML and SCIM support made our life much easier as every new user just logs into the account, gets the correct permissions based on their SSO group enrolment, and is immediately able to access relevant resources, SaaS applications, and environments.

The platform still lacks relevant dashboards and the ability to customize them based on our needs. 

We would love to also see real-time usage and traffic data as well as be able to build reports. 

Adding better QoS and traffic shaping to the product will be a nice add-on as it'll allow our admins to prioritize some traffic over others and identify users that are heavy traffic users in the platform.

We need the ability to connect the agent prior to computer login. The ability to allow a silent connection (i.e. the agent is completely invisible to the user) could be cool for bigger organizations.

I've used the solution for over a month.

So far, the solution looks good and stable. There are no downtimes or disconnections.

They offer great chat support. Technical support is responding within minutes with helpful answers.

I've used NordVPN, Cisco AnyConnect, OpenVPN, and FortiClient.

The initial setup is very easy to set up thanks to a helpful and intuitive UI as well as plug-and-play connectors for the site-2-site deployment.

The ROI is very good, as we were able to do a cut-off within a week and using it since.

It was great to be able to implement everything without any assistance and within an hour.

We evaluated FortiClient, NordVPN, and OpenVPN.

The solution has great UI/UX and a super helpful support and documentation center.

This tool was acquired when the organization made the decision to move the entire infrastructure to the cloud. It was going to handle different types of schemes such as IaaS and SaaS up to Office 365, so all these schemes were going to meet the need for accessibility by users. We needed a tool with complex, centralized management that would help us prevent all types of malicious attacks both from inside and outside in order to guarantee security and reliability for all our clients.

Since the implementation of Harmony, we managed to establish excellent communication in all environments. It has helped us a lot in preventing cyber attacks from anywhere, such as remote users, internet SaaS, and IaaS. In addition, it provides us with real-time information so we can make decisions immediately and achieve complete analysis to be able to carry out compliance management for the corresponding audits.

The tool has many valuable features - such as protection against threats. It also has centralized management that allows administrators to supervise and control the security of the entire network. The VPN and authentication functions guarantee secure and efficient connections from anywhere in the country, device, or network. Due to these characteristics, the tool is one of the best on the market.

They should improve certain features, although they have a modern graphical interface. They can centralize the options or have faster access to options, in addition to improving the authentication to the tool since sometimes it presents problems when entering. In a future version of the tool, they could add a space where information on common errors is shown so that there would not be much dependence on the support they offer.

I managed to use it for approximately two years.

It is a stable tool; I very rarely have problems.

Regarding scalability, it is very good. It behaves and integrates very well with other tools.

Support is one of the points of improvement. They should focus on this part as they are not complying with the SLAs.

Positive

There was no solution implemented previously. This was done when it was decided to implement a cloud implementation.

The implementation is a little complicated at first; its learning curve is intermediate.

The implementation was carried out with the vendor who demonstrated considerable skill in managing the solution.

It is an investment that must be considered and looked at very carefully. You need to understand what type of tool is needed since it is an important contribution to online safety.

The installation is simple once you know how to do it. At first, it is somewhat complicated- especially the configuration. Once you learn, it's very easy. The cost was one of the best quotes we found with the features we needed.

We explored several tools on the market, such as Barracuda CloudGen Firewall, Sophos XG Firewall, and Fortinet FortiGate.

It is a very complete and competitive tool in the marketplace.

Customers employ Check Point Diagnostics for their multi-branch solutions. They're also using Foundation Firewall with Blade Security and Check Point Harmony Connect. Their primary focus is on prevention, particularly in terms of access to ServiceEdge. This approach ensures the safety of packets and applications for our IT customers. Consequently, we are investing in quality hardware to support these secure solutions.

Our investment in quality hardware has proven to provide a better customer experience. They heavily rely on Check Point Firewall and Check Point SaaS Connect to safeguard their networks from external threats and attacks.

They should work towards the WAN intergration.

A cloud service that unifies multiple network security products and deploys within minutes.

Check Point has proven to be an exceptionally stable solution. We've been deploying these devices to our customers since around 2013-2014, and during this period, we haven't received any RMA requests or hardware-related field requests from our customers. There have been no reported issues or failures on the customer side. From our perspective, Check Point devices are known for their robustness and granularity in the market. When it comes to stability, we would rate Check Point ten out of ten.

The solution is very scalable, so I would rate it 10 out of 10.

The quality of service can vary depending on your SLA (Service Level Agreement) and the specific services you receive from Check Point. In our case, we've had a positive experience. Depending on the level of support, such as 24/7 availability, we've consistently received responses within the agreed SLA timeframe. This has been a satisfactory aspect of our service with Check Point.

Positive

We've determined the most optimal days for MAC setups at our customers' locations. We rely on our in-house experts rather than seeking assistance from Check Point's site. Our expert team takes charge of ticket management and ensures smooth customer implementations. To date, we've successfully deployed this solution for numerous customers, including approximately 2,500 customers with endpoints and over 50 branch locations. One noteworthy customer in the software industry, known as SIM Contact Modules, also received our support for their deployment needs.We've successfully implemented various security measures, including data protection, cloud DLP (Data Loss Prevention), granular policy enforcement, and Jira integration. Additionally, we've set up sandboxing and connected to Azure for protection against phishing and malware threats. Throughout this deployment, we encountered some minor issues, but overall, managing and configuring the deployment process was relatively straightforward. It takes almost one day. 

It's very easy to set up it and I would rate it 9 out of 10.

The pricing of Check Point is relatively high when compared to other competitors like Palo Alto and Fortinet. While Palo Alto may be on the higher side in terms of cost, Check Point's pricing is similar to that of Fortinet. In some cases, Check Point offers better value for the features it provides. We initially considered other options but ultimately decided to purchase hardware that came with three years of iOS. This approach eliminated the need for any additional costs associated with Check Point.

I would rate it 10 out of 10.

We will suggest the Check Point solution to customers and other partners. This way, they can obtain a comprehensive solution in one package, addressing all their needs. Whether it's deploying data with Jira, setting up cluster attacks, or utilizing various features through a single connection, this approach ensures customer satisfaction and contributes to our business success.

I would rate it 9 out of 10. 

One use case of SASE is for a partner customer who needs a secure and fast connection for their employees to access the final customer's data center and cloud. Green protection and security measures enable access to all information, including the data center's applications and networks.

Harmony SASE can prevent threats, provide global network protection, and manage API evaluations of user posture. Its software solution also ensures connectivity and protects against NSF filtering.

Check Point complements our more robust solution with Harmony SASE. This solution allows me to see Harmony SASE as an additional layer of security. It profiles security for users connecting remotely, whether working from another branch, a hotel, or an airport. In this case, we needed to protect these connections quickly, so we deployed it as the fastest solution for this customer.

There is a hefty cost, but it has excellent coverage. We need SASE management for five websites, including streamlining, logging, and monitoring. The solution offers the final customer three cloud coverage options and an excellent price point. Our competitors are Palo Alto, Cisco, Symantec, and Solar.

If the dashboard allows the PMS administrator to easily and quickly deploy configurations, it will facilitate the solution's faster deployment.

It is stable. It brings strong stability to the program, including updates to protect against new ransomware attacks.

Check Point's support is on par with the best in the market. Check Point Harmony SASE is a leading solution in both the local and global markets.

Positive

Unlike Cisco, Microsoft Azure, and similar solutions, SASE Insight offers limited visibility. It is slow in detecting and reacting to threats at the point of entry in real-time. Microsoft’s solution is focused on protection but doesn’t provide comprehensive security management. Although it deploys easily, Microsoft’s approach to security isn’t sufficient for robust threat prevention, especially against ransomware. Check Point's Harmony SASE is a more effective solution as it includes several advanced tools and sandboxing capabilities for thorough threat prevention and management.

The deployment is easy, but financial customers must have a comprehensive protection solution. Check Point's Harmony provides complex protection with its firewalls and other features.

The return of the SASE web addresses the void in the quality of information protection clients have in their employment. We can check the information, ensuring higher value and effective deployment, ultimately benefiting us. It is crucial to verify the quantum of protection provided and the conditions and access to private information. 

Harmony SASE may not be the cheapest solution but offers more value. It provides enhanced capabilities and features that justify its cost. We are conducting several trials with the new rigs in the silver packs to evaluate their effectiveness.

I recommend Check Point's solution, including various verticals like Quantum, CloudGuard, and Harmony. Harmony SASE, in particular, covers mobile endpoints, email, and collaboration. It's known for easy and fast deployment, as well as efficient administration through the portal. This solution provides organizations with real-time protection and is considered one of the best in the market.

Overall, I rate the solution an eight out of ten.

We use Harmony SASE to manage remote users across multiple countries, including India, Poland, and the US. The customer required a setup to control access for different groups and users, protecting them from threats and securing their systems.

Harmony SASE helps us to manage compliance by regulating the amount of access to each department and user. We control the relevant apps and websites, which can be accessed from company-owned devices. Harmony SASE uses its own threat intelligence data from the cloud for threat prevention, and detect and manage threats with their own threat intelligence data and SASE firewall features.

The Point locations need to improve the latency and speed. 

I have been using Harmony SASE for six months.

I would rate the stability as a seven out of ten. 

Harmony SASE is a scalable solution and I would rate it an eight out of ten.

The support from Harmony SASE is really good.

Positive

I've worked with Fortinet. In comparison to Harmony SASE with Fortinet, Fortinet is easier to manage because all FortiGate devices use the same FortiOS, making management straightforward.

The installation and deployment of Harmony SASE are easy. It usually takes fifteen to twenty minutes to install and configure on a single device

For deployment and maintenance, a single engineer is sufficient for MDM solutions. However, in multiple tasks, two or more people are required to sort out the glitches in the solution.

The remote users, who have been using Harmony SASE has shown cost savings. With SASE, we don't have to manage VPNs, which leads to long-term cost benefits. We don't need dedicated leased lines or bandwidth in the office, making it a good approach.

There are no such AI features as of now on Harmony SASE. I would recommend it and would rate it eight out of ten.

I work remotely from quite a remote location in South Africa, for a US-based Software company (GoCanvas/Device Magic). GoCanvas and Device Magic are 2 software platforms used for data collection on mobile devices. In order for me to access platforms such as Salesforce and Cornerstone, I need to be connected to the Perimeter81 GoCanvas VPN. Salesforce is an important integration to our entire organization, and I need to be connected to the Perimeter81 GoCanvas VPN to access my own shared Salesforce account.

Perimeter81 has made it easy and hassle-free for South African employees to access certain platforms needed to do our work on a daily basis. 

Before having the pleasure of being on the Perimeter81 GoCanvas VPN, it was very frustrating. I had many hassles with JumpCloud and I could not get onto the platforms I needed to be working on to get my work done.

I never have any issues with Perimeter81, it really is simple and easy to use.

It really has provided a seamless gateway to much-needed platforms.

I work on a Macbook Air M1, and I love the small icon at the top of my screen that allows me to see when I am connected to the VPN or not. I don't have to open the app to connect to the VPN - I can just click on the small icon and a small tab opens wherein I can click "Connect". It's simple, easy, and convenient.

It would be nice to have a notification sound when Perimeter81 disconnects, as I sometimes don't notice when the icon shows that it's disconnected, and I end up wasting time waiting for my browser to load a page that shows an error, usually error 404.

I've used the solution for 18 months.

The solution is very, very stable. I never have issues with Perimter81.

The scale on which this platform can be used is vast. I work remotely in a remote location in South Africa. We have 400 people in our town (it's a tiny place), and yet, Perimeter81 connects me to a VPN that allows me to access US-based platforms.

I have never had to contact customer service or support for Permieter81.

Positive

I am not sure which solution was used before the company started using Perimeter81.

The initial setup was very straightforward.

Our IT team set me up; I received an email and followed the prompts.

My understanding is the initial setup was handled in-house.

I cannot speak to the ROI.

I do not know the details of the cost or licensing.

I did not evaluate other options.

I'm overall super happy with this product.

We primarily use Perimeter 81 for VPN purposes.

The customer support was excellent. They were very helpful whenever we needed assistance. Also, the gateway they provided worked well. The availability of support programs made it easy for us to resolve any issues promptly. The solution itself was quite similar to others we have used, so the strong support was a distinguishing factor.

There are a few areas where the solution could be improved. For instance, we sometimes encounter connectivity issues, which can be problematic. Recently, I experienced a connectivity issue while trying to move to Azure. Connectivity issues can be quite frustrating.

Moreover, in the past, they may have charged differently for their services, which could have impacted the current performance or connectivity. However, I am not entirely sure about the specifics of their previous service offerings. But overall, connectivity issues are a common occurrence when using VPNs.

We've been using Perimeter 81 for almost three months now.

Scaling Perimeter 81 was easy to do. Around 20+ users were using it.

I had a moderate level of experience with the support. During the installation phase, I found it very easy and supportive. However, after that, when I faced an issue, the support person themselves became part of the problem. We went back and forth trying to resolve the issue, but unfortunately, nothing worked out, and we had to find a solution on our own. So, that's been my experience with their support.

The installation on Azure was actually quite easy. I had to provide a couple of personal details for data installations, and then I was able to set it up. 

In Azure, there were multiple instances available for the installation, which was helpful. It was a good experience, and I was able to get it up and running smoothly.

For the installation of Perimeter 81, it didn't take long at all. Setting up the backend and connecting with the users only took about ten minutes. It was a quick process, and I didn't spend more than that time on it. However, I didn't handle the filling up of all the details myself, as that part was handled by a third person.

We only had a single point of contact for the deployment. There was one person available to assist with the installation and configuration.

When it came to maintenance, we faced some connectivity issues, and whenever that happened, we contacted their support for assistance. There were some technical workarounds provided, but sometimes the response and resolution were not satisfactory, which became frustrating. Due to this, I had to get in touch with the solution team often. Eventually, I decided to move away from their service.

Perimeter 81 charges separately for gateways and VPN connectivity, but compared to Azure, it seemed more reasonable. Azure's pricing details were not as clear as Perimeter 81's. While Azure team mentioned certain areas, Perimeter 81 provided a clearer breakdown of the pricing, making it more understandable. So, I would say it was moderate in terms of cost.

Perimeter 81 offers both monthly and yearly licensing options. Users can choose whichever option they prefer based on their needs and preferences.

For those planning to use Perimeter 81, I would recommend going ahead with it. However, I suggest ensuring that there is a reliable tech support process in place. It's essential to know which person would be available for assistance so that you can connect with them anytime you face any issues. Also, it's important to avoid any support connectivity issues during usage. In my experience, they were in a good space when it came to using the solution.

Overall, I would rate the solution a six out of ten. 

My work started using Perimeter 81 as a replacement for our previous VPN provider. Our previous solution was Sophos. 

We are a company that is around 75% fully remote, and we are an ISO 27001 Certified legal tech solution provider to some of the largest law firms and health care providers in the UK and North America. For that reason, ensuring our internal and client data is of the highest priority. 

We use the Perimeter 81 solution to secure all of our internal cloud-based systems as well as the demo system for the products we sell to our customers.

With the previous solution, we had to have an app on our phone that would generate PIN numbers that would auto-generate. It was cumbersome and not very user-friendly. 

This solution has allowed for a more seamless login experience when accessing my files, and from a user standpoint, it is fantastic. I am barely cognizant of the fact that Perimeter is running in the background. This was not the case with our previous VPN solution. 

Direct login using Microsoft network credentials and no extra applications or manual inputting of PIN codes is probably the best feature of using Perimeter 81. Our last VPN solution required that users manually input PIN codes to confirm two-factor authentication, and the process was not very user-friendly. Moreover, logging back into Perimeter 81 is relatively user-friendly as I just need to re-type my Windows credentials in to access the VPN. Of course, having to regain access to the VPN is kind of annoying, however, it is still a much better user experience than our previous solution.

One of the more negative experiences using Perimeter 81 is the fact that I am logged off after a pre-determined amount of time which cuts off access to some of my company's resources. It's probably a configuration thing on our end, yet frustrating nonetheless. If there was a way to have quicker access to the Perimeter login page, that would probably be of great assistance when re-logging into the VPN. For instance, if the pop-up for Perimeter 81 allowed me to log in from there, that would probably streamline the process.

I've used the solution for about six months.

The product seems stable to me!

The solution is very scalable.

I have not interacted with customer service.

Positive

We used Sophos and switched. I am not sure why.

I am not sure how the setup process was handled. 

I have no idea if we have looked into monitoring for ROI.

I do not advise anyone at my company on any of those topics. 

I am not aware of the other options that were evaluated if any.

I really like Perimeter 81 as opposed to our previous VPN solution. It is a much more streamlined and user-friendly experience.

The platform manages remote access by allowing employees to log into a secure portal, where they are only given access to the specific applications they are authorized to use. This access is based on an HTTPS connection, ensuring security.

All product features are valuable, but multi-factor authentication (MFA) is especially critical for securing remote work environments. Without two-factor authentication, there is a heightened risk of security breaches. 

Another key feature is the ability to control the time frame for employee access to applications, allowing for greater security and control.

The platform's pricing can be an issue for smaller companies, as the cost may be higher than for larger organizations.

I have been working with Check Point Quantum SASE for three years. Currently, I am providing it to three customers and implementing it for a fourth. My clients have used it for varying periods, from six months to two years.

The solution is very stable and requires minimal maintenance. Once configured and exposed through the portal, it generally does not present issues related to the security service itself.

The product is designed to be scalable, particularly as a SASE (Secure Access Service Edge) product. Its architecture supports easy scaling and can handle increasing users without issues.

The support is comprehensive, and the channel ecosystem effectively assists with resolving complex issues. I can escalate problems to Check Point's research and development teams for further assistance.

Positive

The return on investment typically depends on the size of the customer. Most customers find the solution's benefits outweigh the costs, and the return is usually balanced.

The solution's pricing model may not be suitable for smaller companies, as they might find it expensive. Larger companies tend to receive more value due to many users.

The solution's cost-effectiveness depends on the size of the business and the specific problems it needs to address.

Its most effective feature is controlling employee access to specific applications. I can manage and monitor every step of the access process.

It already comes with all the necessary features. When you purchase it, you get the full package. However, different levels of coverage are offered for endpoint solutions.

I rate it a nine out of ten. 

Check Point Quantum SASE is a next-generation email security solution. It can be used to protect users from phishing emails.

The tool connects as an API. The installation is very easy. The integration with the existing network was very easy. It is a good tool. We can rely on it.

The tool could be more user-friendly.

I have been using the solution for more than a year.

The tool is very stable and highly reliable. I rate the stability a ten out of ten.

I rate the tool's scalability a ten out of ten. We have approximately 120 users. We have plans to increase the number of users. Our team members are experts. Anyone can deploy and maintain the solution.

The support is good. The support personnel give prompt responses. They take ownership of our issues and communicate with us quickly. They try to get back to us quickly.

The setup is very easy. The deployment can be done without much effort. It is done at the API level. It is deployed on the cloud.

I do not face phishing attacks and downtime due to the product.

Check Point Quantum SASE is a SaaS-based product. We have to pay yearly. The product is reasonably priced. There are no additional costs associated with the tool.

I evaluated Microsoft Defender. Defender is a good solution, but it is not reliable.

One of the biggest challenges organizations face is email threats. They are completely unknown. The users get deceived by them and tend to click on them. Previously, there was a solution called Avanan. It was one of the pioneers in email security that ensured no unwanted email came to our inbox. I will recommend the product to others. People must look at the solution very seriously. It will help them safeguard their organizations.

Overall, I rate the tool a ten out of ten.