Check Point Remote Access VPN Reviews

Right now, my company connects with the vendors of Check Point whenever any maintenance is required, and not to our domain.

Check Point Remote Access VPN is a highly secured product with which, in our company, we can get end-to-end VPN connectivity so that the communication part is highly secured.

Check Point Remote Access VPN's connectivity and establishment takes time and needs to be faster.

In the future, Check Point Remote Access VPN should provide its users with URL filtering.

I have been using Check Point Remote Access VPN for ten years. My company is a customer and end-user of Check Point.

Though the solution is stable, sometimes the latest updates are not available, especially considering that it is something that has to be done very frequently to take care of URL filtering and the latest OWASP threats, which is only possible if the latest configuration is available to users.

It is a scalable solution.

Considering that access to the solution is given to specific people only in my company, I can say that around 100 to 150 people use the solution.

The technical support team of the solution is very good. My company hasn't faced any issues with the technical support team of the solution. My company has not had to wait for a response from the technical support team. I rate the technical support team of the solution a nine out of ten.

Positive

I have experience with Cisco. Though Cisco is one of the latest products that we deal with right now, my company has been more friendly with Check Point. My company prefers Check Point since it is easy and more user-friendly for us. Cisco is not that much of a user-friendly product since it requires highly skilled people and more engineers to operate it.

Check Point Remote Access VPN's installation process is easy.

Check Point Remote Access VPN's installation process can be done in two hours with the help of a person who takes care of the configuration part while also taking care of the respective routing configurations that are required.

The solution is deployed on an on-premises model.

Check Point Remote Access VPN's installation process is something that my company can manage with the help of our in-house members.

Compared to Cisco, Check Point Remote Access VPN is cheaper. My company makes yearly payments only towards the licensing costs attached to Check Point Remote Access VPN, as there are no extra costs attached to the product.

The maintenance part of the solution is easy and can be done remotely, because of which we face no issues in our company.

For 100 to 150 users, Check Point Remote Access VPN is a good option, but later on, if more people are going to get involved, causing one to invest in more frequent VPN connections while wanting secured connections, then Cisco is a better choice. For a limited set of people, Check Point is a better option.

I rate the overall tool a nine out of ten.

Check Point Remote Access VPN provides strong security features, including encryption, authentication, endpoint security, access control, and centralized management. These ensure data protection and access control for remote users, making it a reliable solution for maintaining security in remote access scenarios.

Improvements for Check Point Remote Access VPN could include enhancing mobile connectivity for a smoother user experience, bringing it closer to the level of Cisco AnyConnect, which is considered more user-friendly.

I have been working with Check Point Remote Access VPN for almost four years.

My experience with tech support for Check Point Remote Access VPN was okay, but I find Cisco's support to be better. Overall, I would rate Check Point's support around six out of ten.

Neutral

Installation of Check Point Remote Access VPN is straightforward and it involves agent deployment to user laptops, enabling easy connectivity. Maintenance is low-cost and manageable, even for small teams, as configurations are straightforward. Network security engineers need to specify network segments for traffic segregation, but overall, deployment is automated, minimizing manual intervention and complexity.

The pricing for Check Point Remote Access VPN is average. Firewalls, whether physical or cloud-based, tend to be expensive, and Check Point's offering is no exception. While cloud options may offer more flexibility, physical devices have significant licensing costs, often totaling thousands of dollars.

Remote Access VPN, like Check Point's solution, is user-friendly, requiring only client installation for connectivity. It is useful for employees accessing corporate networks remotely and for granting controlled access to contractors or vendors. Competitors like Cisco's AnyConnect exist but Check Point Remote Access VPN is highly regarded for its functionality and reliability.

Check Point's Remote Access VPN is user-friendly and efficient for connecting via laptops, offering a straightforward setup without complex configurations. It simplifies access to specific divisions within a corporate network, making it suitable for end-users without extensive security knowledge. Although challenges may arise with mobile connectivity, the overall experience is smooth and accessible.

MFA adds an extra layer of security to Remote Access VPN. For example, users might need to enter a code from an authenticator app on their phone in addition to their regular login credentials. This ensures enhanced verification of user identity and helps protect against unauthorized access.

Overall, I would rate Check Point Remote Access VPN as an eight out of ten.

Check Point Remote Access VPN is a highly secure and seamless software that provides end-to-end security solutions to business users while they are working remotely and traveling for business purposes. Our organization involves over 70% of business travel to generate revenue, and it becomes really troublesome to secure the IT devices and cloud system at such traveling times. 

Check Point Remote Access VPN is the best available solution in the market for providing endpoint management solutions by ensuring adherence to strict compliance and multiple scanning of the data to ensure no data theft or leakage and security and compliance are maintained at the highest level possible.

Check Point Remote Access VPN provides multiple factor authentication layers, and due to that, all the data transmission is completely scanned for any malware or malicious cyber threats. It is integrated with our various IT and cloud systems and performs its security scanning 24/7 without any glitches or trouble.

Also, they provided a multi-level authentication support system for continuous scanning and compliance management throughout the IT system.

They enable a secure hotspot registration process for enabling all-around support of IT systems while operating remotely without any hassle.

The secure hotspot access for enabling good network connectivity is great.

Multi-layer scanning of IT systems across various critical stages for detection of threats and malicious threats has been useful.

Provisioning VPN Client and Auto Connect management system for free flow of information without any data mismanagement.

The secure remote access integration is available for both android and IOS devices and systems is helpful.

The multi-factor authentication support system is a phenomenal feature for providing all-around authentication support to for secure IT enablement. 

We are still in the learning phase as of now, and there seem to be more and more feature upgrades in the standard version of the application. They're providing updated features in the application with complete compliance assurance - which is really awesome - and we need specific customizations to make it a perfect fit for our business environment. This is a new and emerging area and requires a lot of customization and flexible features to suit the business requirements. 

Price category and smooth renewal of agreement should be considered for flawless and quick onboarding of clients and partners.

I've used the solution for over six months now.

The solution is quite stable.

It is an absolutely scalable solution.

Technical support has been so far so good.

Positive

We did not use a different solution earlier.

The setup is effortless and smooth.

We installed the solution through the vendor ONLY.

We've seen an ROI of over 75%.

I recommend all businesses to go for Check Point Remote Access VPN. It's one of the best of its kind in the market today. 

It has enormous features for ensuring security management solutions for remote workforce coupled with compliance assurance in the businesses. 

It's one of the highly cost-effective solutions which leads to boosting business performance, and also renewal is smooth without any hassle. The licensing is not pricy and is affordable by organizations.

The business and IT team did a lot of brainstorming sessions on this, and it went of really well in evaluating various available products in the market with their offerings.

We evaluated McAfee, Nord, and others

I'd advise others to try the solution today itself and experience the utilities on their own. I am sure, they will love the product offerings and utilities to the greatest extent possible 

In our environment, we have many users working remotely. It's important to control the flow of traffic coming and going to these remote employees, and isolate traffic when used for business purposes. We have to allow our remote users to access services from home as though they were in the office. However, at the same time, we need to control that traffic and make sure it conforms to our policy. Our environment is complex and requires advanced policies to look at traffic in very unique ways from different users. Check Point's policy management has allowed us to do that.

At the beginning of the pandemic, everyone rushed to get their employees working from home. Luckily for us, we already had a strong structure around how remote access would work and had it set up for many employees. 

With the groundwork in place, the transition to remote work was made easy by simply adjusting the policy (configuration). In part, this is because we were already prepared for a remote workforce, and that preparation came from within our organization, however, if it weren't for Check Point enabling us to adjust rapidly, then it would not have been an easy transition.

The unified platform view is great. Being able to manage NGFW alongside our Remote Access Policies allows us to control traffic in one way. Be it if our users are at home or in the office the same policy applies to them allowing us to have one corporate view on the traffic within our organization.

Being able to integrate the policy with things like Active Directory groups, Azure cloud objects, RADIUS integration, and load balancing capabilities is wonderful. All of these things are built into their NGFW policy which we leverage to implement on our Remote Access policy.

The ability to allow split-tunneling while still following our corporate policy needs to be on the table. Right now, in order to allow the same policy to apply, the users' traffic must be routed up to our NGFW before going out to the internet. Having a method to apply the same policy to the client for outbound traffic while connected to the VPN would be huge.

Some things like the compliance aspect of the VPN Client can be updated to bring it a little more modern. It's very useful for checking things like Windows Updates levels before connecting, however, it could use a facelift since it's still quite old-looking.

I've been managing Check Point's Remote Access VPN for five years at my current employment, and had used it before at a previous employer.

The solution has been solid for me for over five years.

I get the impression this could scale up to whatever you need. Scaling issues might only be moving to clustered resources and setting up load balancing on gateways. Once you get big enough you should be able to scale up to your needs.

Support has been great 98% of the time. There's always one bad experience, yet, overall I wouldn't rate them based on that. If they need to get their experts online to help solve a problem, they have plenty and are willing to work through really deep subjects. I never worry with their support.

Positive

At our organization, we did not use another solution before this. That said, I have used other products in the past. It's been many years, so I'm sure those other vendors have had time to update their products too, however, since I've been managing Remote Access with Check Point, I've always been really impressed.

Setting up the VPN Clients is simple once you've already got the gateway in place. If you have to setup the Gateway, it will take a bit of knowledge and expertise.

Our in-house team set it up. That said, I have been working with network devices for a long time.

ROI on the VPN User license itself returns within a couple of months of you using it. However, if you have to make the investment into buying gateways for the product, then the ROI could be one year (if your whole organization is working from home), or up to three years if you barely use it.

You need to be an NGFW customer already. Otherwise, you'll need to purchase the gateways in order to terminate the VPN. That much should be obvious to anyone. Once you have the gateway in place, there is a VPN User license you need to purchase, however, it is very minimal in cost compared to other infrastructure.

We inherited the Check Point when we took over. Then, when the topic of remote access came up, it made sense to use what we had and just buy additional licensing rather than buy a whole new product.

Check Point products are typically not cheap, however, I've found it's often due to the fact that you can do a lot with it. 

I recommend Check Point products to anyone who is going to have the time and expertise to administer them. You're going to be able to do what you want to do, engineer a design that works for you. If you want to just plug it in and forget about it, then this might not be the product for you. That said, for those who do just want to plug something in and forget about it, I warn you to be cautious. When it comes to Remote Access, you don't want to ignore this. You want to be looking at it and you want to monitor it, otherwise attackers will take advantage of that weakness. This is where Check Point allows you to monitor the edge, while granularly controlling it.

We use Check Point Remote Access VPN to provide access to our corporate network and resources to remote users in a secure way. Users have access that is limited or defined by the server.

Access is granted for identified devices post-posture validation. 

Access should be provided via VPN using multifactor authentication other than username/credentials. Users are able to connect from anywhere at anytime using both mechanisms (i.e. User VPN client or browser). 

This solution mitigates or minimizes data leakage issues.

It is stable and scalable and requires minimal management and access provisioning.

This solution has improved our organization by providing access to corporate resources in a secure fashion. It uses complete end-to-end encryption from the end-user machine to the VPN device.

Access policies are created on the firewall for restricting access to resources and applications based on the user profile/policy.

Our security gateway is integrated with Active Directory and access to resources/applications is provided based on the security group created in Active directory.

This product has inbuild/native integration with MFA solutions.  

It does not require any additional hardware in cases where the organization already has the Check Point NGFW. The mobile access blade and remote access VPN can be enabled on the same security gateway. Check Point provides a common dashboard and management console used in conjunction with the NGFW.

Multiple access can be provided using multiple realms, based on the user ID or security group, and access can be provided accordingly. Each realm will have a pool of IP addresses for which access will be provisioned on the firewall.

Organizations that already use the Check Point NGFW Solution do not require any additional hardware, which makes the implementation straightforward and reduces the time to go live. The only requirement is to purchase an additional license from Check Point, and then enable the mobile access blade. After this, the solution is ready to roll out and provide access based on the configured policy. 

Access is restricted based on user ID, security group, and device type. 

Access is provisioned post-posture policy validation and it offers protection against users connecting to the corporate network from non-corporate devices, which minimizes data leakage possibilities. 

Access is available from browsers or VPN clients using MFA. This is helpful in cases where the machine does not have the client installed or the client is corrupted.

We are able to restrict access based on geo-location and device type. Devices can be Android, iOS, Windows, or Linux.

It provides threat prevention capabilities while uses connect via VPN for Windows devices.

Access is provisioned based on a single L3 tunnel being established between the endpoint and the VPN device. If an attacker gains access to this session then all of the tunnel traffic is compromised. It needs to move to next-generation style access, provisioning such as per-app VPN.

The GUI interface for configuring the SSL VPN is not user-friendly and requires expertise. 

Devices are exposed over the internet and it can lead to a security threat.

When a critical patch needs to be applied to the VPN, downtime is required for the entire NGFW. This can impact the business when it has a single security gateway.

This product cannot manage sudden user growth, as each security gateway has limitations in terms of performance and throughput.

The fully-featured security module is only supported on Windows and Mac systems, which means that organizations with Linux will face issues providing secure access. Specifically, modules such as Threat prevention, Access control, and Incident analysis are supported only on Windows and Mac.

It's very stable in terms of downtime, although it required updates.

The solution can be easily scaled by adding a security gateway.

The Check Point technical support is excellent.

We used Aventail SonicWALL as a standalone product. We switched because it was expensive in terms of management and maintenance. As we already had Check Point NGFW, it was easy to enable the VPN on the same device.

Enabling the VPN was simple and straightforward with the purchase of an additional license from the OEM. Once we acquired the license, it involved enabling the module on the security gateway. The solution was ready to go live within 10-15 minutes.

The implementation was completed by our in-house team with the assistance of the OEM.

Organizations that already have the Check Point NGFW need to purchase an additional license to have access to the VPN functionality.

We evaluated Pulse and Citrix before choosing this option. 

Traditional VPNs that work on L3 or L4, with a single VPN tunnel, are typically hosted on-premises. As organizations are adopting cloud computing, it makes sense to have a VPN solution hosted on the cloud for better control and security.

We use it to connect our sites. We have a couple of sites that need to interconnect. They are in our cloud and our premise data center. 

The scalability needs improvement.

I have been using Check Point Remote Access VPN for five years. 

The solution is not very scalable. 

The initial setup is not very straightforward. I would rate the setup a four out of ten. The solution is easy to maintain. 

The solution is pretty expensive. I rate it an eight out of ten. 

Overall, I will rate the solution a seven out of ten. 

In the context of general user remote access, we utilize Check Point VPN concentrators that serve as both Internet firewalls and error ID locations. Our remote access system, constructed on a Check Point foundation, consists of four systems.

Currently, I'm part of the network team, and my primary concern revolves around maintaining a stable connectivity setup. It's important for this connectivity solution to have provisions, possibly within AWS, that enhance security measures and provide more security-related advantages. From my standpoint, our solution serves a general purpose. It operates effectively, particularly during challenges like adversities or infrastructure issues. Overall, it suits our needs well.

There were some issues with automation and instability. But overall, these self-integrated products offer exceptional support and prove highly beneficial from an administrative standpoint. It isn't overwhelming, as seen with instances like in other vendors. The platform is convenient to manage and scalable.

I have been working with Check Point Remote Access VPN for one year. 

The solution is scalable. I rate the scalability a nine out of ten. 

Technical support is essential in our case. We encountered a few instances related to next-generation firewalls, though they might not be of direct interest.

In general, the response rate to our inquiries has been quick. Our cases are categorized as server-to-server or critical solutions, resulting in immediate internet connectivity for addressing the issue. The level of support we receive is of a very high standard.

Positive

We previously used Cisco AnyConnect. Both solutions are similar. However, the difference lies in the security features rather than the networking aspects.

Ultimately, the decision was made to expand and implement Check Point for the entire user base. This choice was reasonable based on the circumstances and the initial security in Check Point. We also had a phase where we utilized both solutions simultaneously. Eventually, due to our requirements, switching solely to Check Point proved to be the more precise decision, aligning with our corporate requirements.

The initial setup is not very easy and we are partnered with highly qualified engineers to deploy the solution. The process involves designing the overall network module, carrying out installations, configuring appropriately, and initiating the initial setup. The array agent is then deployed to individual personal computers. It takes almost one quarter.

We had a partnered team with highly qualified engineers to deploy the solution.

When working with remote access, the goal is to define the exact issue we aim to resolve. Identifying a suitable solution for discussions is crucial while focusing on establishing a high-level solution design. Following this, the implementation can proceed. Formulating a solid architecture utilizing Check Point isn't overly complex. The service switches provided within the system confer a sophisticated level of functionality.

Based on these, I would rate it a nine out of ten.

This product provides a secure connection to the corporate network from anywhere and safe traffic of data regardless of the possible threats in the WAN it's connected to. It also provides secure access to company apps and controls the traffic depending on each company's policies. Through it, we create layers that control or limit data traffic for specific users. I've been trained in the product and know it's one of the most effective in the business and admit to facilitating my customers to get it from our Check Point partners.

A clear example of the positive impact this license has had in my organization was back in 2020. The software was in use since before the pandemic hit so our personnel was familiarized with the product; the transition was smooth and secure from the office to work from home. Access policies were run through the active directory applied on all kinds of end points, from cell phones, tablets, laptops, desktops - you name it. Access could be restricted by location and using network security assessments that prevented connecting to corrupted networks. 

We already use the Check Point Firewall and those are the ones the organization's employees connect to for the remote VPN and it made it really easy to activate this function as new hardware was not needed. 

The team has full visibility of the users that connect allowing them to keep control of who is in the network and what data they are allowing to come in and out. Be it if our users are at home or in the office the same policy applies to them allowing us to view the traffic within our organization.

In my organization, there aren't Linux users, however, I know it has difficulties offering secure access for customers who use this operating system. 

Also, this product has limitations with headcount addition, as there are performance limitations in each security gateway the software has. 

The ability to allow split-tunneling while still following our corporate policy should be offered. 

Some things like the compliance aspect of the VPN Client can be updated so the product stays up to speed with the ever-changing environment in software security.

For the past eight years, I've been working at a company where I was first in software security sales for three years and then five years in hardware sales. Since I have a background in security, I've been part of training and sales where Check Point products are involved. I have tested most products Check Point offers due to our partnership.