Check Point Remote Access VPN Reviews

The most valuable feature of Check Point Remote Access VPN is its ability to deploy. It follows the same process as their stateful inspection firewall or IPS. If you know how to enable one feature, you can enable and configure others. The learning curve isn't steep.

The product needs to improve its support. 

Check Point Remote Access VPN is quite stable. Once we trained our staff on using and troubleshooting the solution, we could quickly hand it over.

The tool is scalable. If you size your appliance correctly, you shouldn't have software issues. It is deployed with head-end gateways in three regions. From the endpoint perspective, it supports about 1000 end users globally. These users have SMB devices shipped to them that build VPN connections to our head-end devices in the data centers.

This VPN solution integrates with SMB devices. We ship these devices to our end users, who just need to plug them into their network. Once the device receives an IP address, it connects with our head-end and provides connectivity.

A special team helps design solutions, but I can't remember what they're called. It's not the regular break-fix support, which can be frustrating.

The solution's deployment is straightforward. We needed less staff than with other products. Two people were involved in certification, one in verification, and three in deployment (one for build services, one for service delivery, and one for rotation for additional help).

Regarding pricing, as a global customer, we get a big discount. For us, it's a good return on investment. We need to pay for additional features we want to enable. It seems cheaper than other vendors, but I can't say what it would cost an average customer.

During COVID-19, we needed a VPN solution for a specific team that had to use special equipment in the office. We couldn't install this equipment on laptops for home use. The tool helped us deploy a VPN solution in less than 30 days, including project costs and gathering facts. Their support was amazing, especially the R&D team. We worked with someone with experience with similar solutions for other clients, which made it easier. The VPN is still being used, and it's robust.

We mainly implemented the Check Point Remote Access VPN to support our team during the COVID-19 peak. Some employees needed specific equipment that couldn't be installed on laptops at home. The solution allowed us to set up a similar setup to the office for these users so that they could support our clients during COVID-19.

My advice for those considering Check Point Remote Access VPN is that if you're familiar with one solution, the deployment and configuration process is identical for others. There's no learning curve. Just understand your use cases, enable the needed features, and you're ready.

I rate the overall solution a ten out of ten. 

Right now, my company connects with the vendors of Check Point whenever any maintenance is required, and not to our domain.

Check Point Remote Access VPN is a highly secured product with which, in our company, we can get end-to-end VPN connectivity so that the communication part is highly secured.

Check Point Remote Access VPN's connectivity and establishment takes time and needs to be faster.

In the future, Check Point Remote Access VPN should provide its users with URL filtering.

I have been using Check Point Remote Access VPN for ten years. My company is a customer and end-user of Check Point.

Though the solution is stable, sometimes the latest updates are not available, especially considering that it is something that has to be done very frequently to take care of URL filtering and the latest OWASP threats, which is only possible if the latest configuration is available to users.

It is a scalable solution.

Considering that access to the solution is given to specific people only in my company, I can say that around 100 to 150 people use the solution.

The technical support team of the solution is very good. My company hasn't faced any issues with the technical support team of the solution. My company has not had to wait for a response from the technical support team. I rate the technical support team of the solution a nine out of ten.

Positive

I have experience with Cisco. Though Cisco is one of the latest products that we deal with right now, my company has been more friendly with Check Point. My company prefers Check Point since it is easy and more user-friendly for us. Cisco is not that much of a user-friendly product since it requires highly skilled people and more engineers to operate it.

Check Point Remote Access VPN's installation process is easy.

Check Point Remote Access VPN's installation process can be done in two hours with the help of a person who takes care of the configuration part while also taking care of the respective routing configurations that are required.

The solution is deployed on an on-premises model.

Check Point Remote Access VPN's installation process is something that my company can manage with the help of our in-house members.

Compared to Cisco, Check Point Remote Access VPN is cheaper. My company makes yearly payments only towards the licensing costs attached to Check Point Remote Access VPN, as there are no extra costs attached to the product.

The maintenance part of the solution is easy and can be done remotely, because of which we face no issues in our company.

For 100 to 150 users, Check Point Remote Access VPN is a good option, but later on, if more people are going to get involved, causing one to invest in more frequent VPN connections while wanting secured connections, then Cisco is a better choice. For a limited set of people, Check Point is a better option.

I rate the overall tool a nine out of ten.

Check Point Remote Access VPN provides strong security features, including encryption, authentication, endpoint security, access control, and centralized management. These ensure data protection and access control for remote users, making it a reliable solution for maintaining security in remote access scenarios.

Improvements for Check Point Remote Access VPN could include enhancing mobile connectivity for a smoother user experience, bringing it closer to the level of Cisco AnyConnect, which is considered more user-friendly.

I have been working with Check Point Remote Access VPN for almost four years.

My experience with tech support for Check Point Remote Access VPN was okay, but I find Cisco's support to be better. Overall, I would rate Check Point's support around six out of ten.

Neutral

Installation of Check Point Remote Access VPN is straightforward and it involves agent deployment to user laptops, enabling easy connectivity. Maintenance is low-cost and manageable, even for small teams, as configurations are straightforward. Network security engineers need to specify network segments for traffic segregation, but overall, deployment is automated, minimizing manual intervention and complexity.

The pricing for Check Point Remote Access VPN is average. Firewalls, whether physical or cloud-based, tend to be expensive, and Check Point's offering is no exception. While cloud options may offer more flexibility, physical devices have significant licensing costs, often totaling thousands of dollars.

Remote Access VPN, like Check Point's solution, is user-friendly, requiring only client installation for connectivity. It is useful for employees accessing corporate networks remotely and for granting controlled access to contractors or vendors. Competitors like Cisco's AnyConnect exist but Check Point Remote Access VPN is highly regarded for its functionality and reliability.

Check Point's Remote Access VPN is user-friendly and efficient for connecting via laptops, offering a straightforward setup without complex configurations. It simplifies access to specific divisions within a corporate network, making it suitable for end-users without extensive security knowledge. Although challenges may arise with mobile connectivity, the overall experience is smooth and accessible.

MFA adds an extra layer of security to Remote Access VPN. For example, users might need to enter a code from an authenticator app on their phone in addition to their regular login credentials. This ensures enhanced verification of user identity and helps protect against unauthorized access.

Overall, I would rate Check Point Remote Access VPN as an eight out of ten.

Check Point Remote Access VPN is a highly secure and seamless software that provides end-to-end security solutions to business users while they are working remotely and traveling for business purposes. Our organization involves over 70% of business travel to generate revenue, and it becomes really troublesome to secure the IT devices and cloud system at such traveling times. 

Check Point Remote Access VPN is the best available solution in the market for providing endpoint management solutions by ensuring adherence to strict compliance and multiple scanning of the data to ensure no data theft or leakage and security and compliance are maintained at the highest level possible.

Check Point Remote Access VPN provides multiple factor authentication layers, and due to that, all the data transmission is completely scanned for any malware or malicious cyber threats. It is integrated with our various IT and cloud systems and performs its security scanning 24/7 without any glitches or trouble.

Also, they provided a multi-level authentication support system for continuous scanning and compliance management throughout the IT system.

They enable a secure hotspot registration process for enabling all-around support of IT systems while operating remotely without any hassle.

The secure hotspot access for enabling good network connectivity is great.

Multi-layer scanning of IT systems across various critical stages for detection of threats and malicious threats has been useful.

Provisioning VPN Client and Auto Connect management system for free flow of information without any data mismanagement.

The secure remote access integration is available for both android and IOS devices and systems is helpful.

The multi-factor authentication support system is a phenomenal feature for providing all-around authentication support to for secure IT enablement. 

We are still in the learning phase as of now, and there seem to be more and more feature upgrades in the standard version of the application. They're providing updated features in the application with complete compliance assurance - which is really awesome - and we need specific customizations to make it a perfect fit for our business environment. This is a new and emerging area and requires a lot of customization and flexible features to suit the business requirements. 

Price category and smooth renewal of agreement should be considered for flawless and quick onboarding of clients and partners.

I've used the solution for over six months now.

The solution is quite stable.

It is an absolutely scalable solution.

Technical support has been so far so good.

Positive

We did not use a different solution earlier.

The setup is effortless and smooth.

We installed the solution through the vendor ONLY.

We've seen an ROI of over 75%.

I recommend all businesses to go for Check Point Remote Access VPN. It's one of the best of its kind in the market today. 

It has enormous features for ensuring security management solutions for remote workforce coupled with compliance assurance in the businesses. 

It's one of the highly cost-effective solutions which leads to boosting business performance, and also renewal is smooth without any hassle. The licensing is not pricy and is affordable by organizations.

The business and IT team did a lot of brainstorming sessions on this, and it went of really well in evaluating various available products in the market with their offerings.

We evaluated McAfee, Nord, and others

I'd advise others to try the solution today itself and experience the utilities on their own. I am sure, they will love the product offerings and utilities to the greatest extent possible 

In our environment, we have many users working remotely. It's important to control the flow of traffic coming and going to these remote employees, and isolate traffic when used for business purposes. We have to allow our remote users to access services from home as though they were in the office. However, at the same time, we need to control that traffic and make sure it conforms to our policy. Our environment is complex and requires advanced policies to look at traffic in very unique ways from different users. Check Point's policy management has allowed us to do that.

At the beginning of the pandemic, everyone rushed to get their employees working from home. Luckily for us, we already had a strong structure around how remote access would work and had it set up for many employees. 

With the groundwork in place, the transition to remote work was made easy by simply adjusting the policy (configuration). In part, this is because we were already prepared for a remote workforce, and that preparation came from within our organization, however, if it weren't for Check Point enabling us to adjust rapidly, then it would not have been an easy transition.

The unified platform view is great. Being able to manage NGFW alongside our Remote Access Policies allows us to control traffic in one way. Be it if our users are at home or in the office the same policy applies to them allowing us to have one corporate view on the traffic within our organization.

Being able to integrate the policy with things like Active Directory groups, Azure cloud objects, RADIUS integration, and load balancing capabilities is wonderful. All of these things are built into their NGFW policy which we leverage to implement on our Remote Access policy.

The ability to allow split-tunneling while still following our corporate policy needs to be on the table. Right now, in order to allow the same policy to apply, the users' traffic must be routed up to our NGFW before going out to the internet. Having a method to apply the same policy to the client for outbound traffic while connected to the VPN would be huge.

Some things like the compliance aspect of the VPN Client can be updated to bring it a little more modern. It's very useful for checking things like Windows Updates levels before connecting, however, it could use a facelift since it's still quite old-looking.

I've been managing Check Point's Remote Access VPN for five years at my current employment, and had used it before at a previous employer.

The solution has been solid for me for over five years.

I get the impression this could scale up to whatever you need. Scaling issues might only be moving to clustered resources and setting up load balancing on gateways. Once you get big enough you should be able to scale up to your needs.

Support has been great 98% of the time. There's always one bad experience, yet, overall I wouldn't rate them based on that. If they need to get their experts online to help solve a problem, they have plenty and are willing to work through really deep subjects. I never worry with their support.

Positive

At our organization, we did not use another solution before this. That said, I have used other products in the past. It's been many years, so I'm sure those other vendors have had time to update their products too, however, since I've been managing Remote Access with Check Point, I've always been really impressed.

Setting up the VPN Clients is simple once you've already got the gateway in place. If you have to setup the Gateway, it will take a bit of knowledge and expertise.

Our in-house team set it up. That said, I have been working with network devices for a long time.

ROI on the VPN User license itself returns within a couple of months of you using it. However, if you have to make the investment into buying gateways for the product, then the ROI could be one year (if your whole organization is working from home), or up to three years if you barely use it.

You need to be an NGFW customer already. Otherwise, you'll need to purchase the gateways in order to terminate the VPN. That much should be obvious to anyone. Once you have the gateway in place, there is a VPN User license you need to purchase, however, it is very minimal in cost compared to other infrastructure.

We inherited the Check Point when we took over. Then, when the topic of remote access came up, it made sense to use what we had and just buy additional licensing rather than buy a whole new product.

Check Point products are typically not cheap, however, I've found it's often due to the fact that you can do a lot with it. 

I recommend Check Point products to anyone who is going to have the time and expertise to administer them. You're going to be able to do what you want to do, engineer a design that works for you. If you want to just plug it in and forget about it, then this might not be the product for you. That said, for those who do just want to plug something in and forget about it, I warn you to be cautious. When it comes to Remote Access, you don't want to ignore this. You want to be looking at it and you want to monitor it, otherwise attackers will take advantage of that weakness. This is where Check Point allows you to monitor the edge, while granularly controlling it.

We use Check Point Remote Access VPN to provide access to our corporate network and resources to remote users in a secure way. Users have access that is limited or defined by the server.

Access is granted for identified devices post-posture validation. 

Access should be provided via VPN using multifactor authentication other than username/credentials. Users are able to connect from anywhere at anytime using both mechanisms (i.e. User VPN client or browser). 

This solution mitigates or minimizes data leakage issues.

It is stable and scalable and requires minimal management and access provisioning.

This solution has improved our organization by providing access to corporate resources in a secure fashion. It uses complete end-to-end encryption from the end-user machine to the VPN device.

Access policies are created on the firewall for restricting access to resources and applications based on the user profile/policy.

Our security gateway is integrated with Active Directory and access to resources/applications is provided based on the security group created in Active directory.

This product has inbuild/native integration with MFA solutions.  

It does not require any additional hardware in cases where the organization already has the Check Point NGFW. The mobile access blade and remote access VPN can be enabled on the same security gateway. Check Point provides a common dashboard and management console used in conjunction with the NGFW.

Multiple access can be provided using multiple realms, based on the user ID or security group, and access can be provided accordingly. Each realm will have a pool of IP addresses for which access will be provisioned on the firewall.

Organizations that already use the Check Point NGFW Solution do not require any additional hardware, which makes the implementation straightforward and reduces the time to go live. The only requirement is to purchase an additional license from Check Point, and then enable the mobile access blade. After this, the solution is ready to roll out and provide access based on the configured policy. 

Access is restricted based on user ID, security group, and device type. 

Access is provisioned post-posture policy validation and it offers protection against users connecting to the corporate network from non-corporate devices, which minimizes data leakage possibilities. 

Access is available from browsers or VPN clients using MFA. This is helpful in cases where the machine does not have the client installed or the client is corrupted.

We are able to restrict access based on geo-location and device type. Devices can be Android, iOS, Windows, or Linux.

It provides threat prevention capabilities while uses connect via VPN for Windows devices.

Access is provisioned based on a single L3 tunnel being established between the endpoint and the VPN device. If an attacker gains access to this session then all of the tunnel traffic is compromised. It needs to move to next-generation style access, provisioning such as per-app VPN.

The GUI interface for configuring the SSL VPN is not user-friendly and requires expertise. 

Devices are exposed over the internet and it can lead to a security threat.

When a critical patch needs to be applied to the VPN, downtime is required for the entire NGFW. This can impact the business when it has a single security gateway.

This product cannot manage sudden user growth, as each security gateway has limitations in terms of performance and throughput.

The fully-featured security module is only supported on Windows and Mac systems, which means that organizations with Linux will face issues providing secure access. Specifically, modules such as Threat prevention, Access control, and Incident analysis are supported only on Windows and Mac.

It's very stable in terms of downtime, although it required updates.

The solution can be easily scaled by adding a security gateway.

The Check Point technical support is excellent.

We used Aventail SonicWALL as a standalone product. We switched because it was expensive in terms of management and maintenance. As we already had Check Point NGFW, it was easy to enable the VPN on the same device.

Enabling the VPN was simple and straightforward with the purchase of an additional license from the OEM. Once we acquired the license, it involved enabling the module on the security gateway. The solution was ready to go live within 10-15 minutes.

The implementation was completed by our in-house team with the assistance of the OEM.

Organizations that already have the Check Point NGFW need to purchase an additional license to have access to the VPN functionality.

We evaluated Pulse and Citrix before choosing this option. 

Traditional VPNs that work on L3 or L4, with a single VPN tunnel, are typically hosted on-premises. As organizations are adopting cloud computing, it makes sense to have a VPN solution hosted on the cloud for better control and security.

We use it to connect our sites. We have a couple of sites that need to interconnect. They are in our cloud and our premise data center. 

The scalability needs improvement.

I have been using Check Point Remote Access VPN for five years. 

The solution is not very scalable. 

The initial setup is not very straightforward. I would rate the setup a four out of ten. The solution is easy to maintain. 

The solution is pretty expensive. I rate it an eight out of ten. 

Overall, I will rate the solution a seven out of ten. 

In the context of general user remote access, we utilize Check Point VPN concentrators that serve as both Internet firewalls and error ID locations. Our remote access system, constructed on a Check Point foundation, consists of four systems.

Currently, I'm part of the network team, and my primary concern revolves around maintaining a stable connectivity setup. It's important for this connectivity solution to have provisions, possibly within AWS, that enhance security measures and provide more security-related advantages. From my standpoint, our solution serves a general purpose. It operates effectively, particularly during challenges like adversities or infrastructure issues. Overall, it suits our needs well.

There were some issues with automation and instability. But overall, these self-integrated products offer exceptional support and prove highly beneficial from an administrative standpoint. It isn't overwhelming, as seen with instances like in other vendors. The platform is convenient to manage and scalable.

I have been working with Check Point Remote Access VPN for one year. 

The solution is scalable. I rate the scalability a nine out of ten. 

Technical support is essential in our case. We encountered a few instances related to next-generation firewalls, though they might not be of direct interest.

In general, the response rate to our inquiries has been quick. Our cases are categorized as server-to-server or critical solutions, resulting in immediate internet connectivity for addressing the issue. The level of support we receive is of a very high standard.

Positive

We previously used Cisco AnyConnect. Both solutions are similar. However, the difference lies in the security features rather than the networking aspects.

Ultimately, the decision was made to expand and implement Check Point for the entire user base. This choice was reasonable based on the circumstances and the initial security in Check Point. We also had a phase where we utilized both solutions simultaneously. Eventually, due to our requirements, switching solely to Check Point proved to be the more precise decision, aligning with our corporate requirements.

The initial setup is not very easy and we are partnered with highly qualified engineers to deploy the solution. The process involves designing the overall network module, carrying out installations, configuring appropriately, and initiating the initial setup. The array agent is then deployed to individual personal computers. It takes almost one quarter.

We had a partnered team with highly qualified engineers to deploy the solution.

When working with remote access, the goal is to define the exact issue we aim to resolve. Identifying a suitable solution for discussions is crucial while focusing on establishing a high-level solution design. Following this, the implementation can proceed. Formulating a solid architecture utilizing Check Point isn't overly complex. The service switches provided within the system confer a sophisticated level of functionality.

Based on these, I would rate it a nine out of ten.