Check Point Remote Access VPN Reviews

We are using Check Point Remote Access VPN for remote administration of our data centers and on-premises systems. If someone needs to work on the servers remotely, they have to connect through this VPN.

The main purpose of the product is for firewall purposes that we are using, and the VPN provides secure access for remote connections. It adds simplicity, as the solution is simple enough, with an easy interface. 

The functionality enables secure access for remotely connecting users, which is necessary for our operations.

We use Remote Access VPN as a secondary VPN for our IT admins. We use this solution on a different production Internet line. If there is a network shortage on our primary line, we can use Check Point to access and check the systems.

We use the solution in a basic configuration. The ease of use and the user interface for troubleshooting issues have been helpful.

Before COVID-19, one major use case was for remote VPN access. However, since the pandemic, remote work has become more prevalent, and now, the primary use case for the Check Point Remote Access VPN is when users need to connect to office resources from outside the network.

With remote Check Point Remote Access VPN, they can access our data center or office network and utilize resources. Additionally, we can publish applications on the public network for anyone to access. As a consultant, I work with multiple vendors across various industries, including banking and IT customers.

One feature that is highly valued by our clients in remote access VPN is the IPsec suite. With IPsec, we can encrypt our data, ensuring that no one can perform a man-in-the-middle attack or decrypt the data. It utilizes powerful mathematical calculations and end-to-end encryption, preventing hacking attempts.

We use Check Point Remote Access VPN to provide access to our corporate network and resources to remote users in a secure way. Users have access that is limited or defined by the server.

Access is granted for identified devices post-posture validation. 

Access should be provided via VPN using multifactor authentication other than username/credentials. Users are able to connect from anywhere at anytime using both mechanisms (i.e. User VPN client or browser). 

This solution mitigates or minimizes data leakage issues.

It is stable and scalable and requires minimal management and access provisioning.

This solution has improved our organization by providing access to corporate resources in a secure fashion. It uses complete end-to-end encryption from the end-user machine to the VPN device.

Access policies are created on the firewall for restricting access to resources and applications based on the user profile/policy.

Our security gateway is integrated with Active Directory and access to resources/applications is provided based on the security group created in Active directory.

This product has inbuild/native integration with MFA solutions.  

It does not require any additional hardware in cases where the organization already has the Check Point NGFW. The mobile access blade and remote access VPN can be enabled on the same security gateway. Check Point provides a common dashboard and management console used in conjunction with the NGFW.

Multiple access can be provided using multiple realms, based on the user ID or security group, and access can be provided accordingly. Each realm will have a pool of IP addresses for which access will be provisioned on the firewall.

With this solution, we can:

1) Securely and privately access our data from anywhere with the Check Point VPN. 

2) Connect securely from any device and any asset.

3) Have 2FA enabled while connecting to the VPN in an official mail. If any person has your VPN credential, he can initiate contact for security codes to connect to the VPN.

4) Integrate our data.

5) View VPN events from the console.

6) Easily install and connect the VPN. 

7) Provide colleagues with secure and seamless remote access to the corporate network.

8) Get a full picture with complete network visibility.

The product has improved the organization by:

1) Deploying high performance. Check Point's private VPN gateways can secure our colleagues/teams working remotely with dedicated IPs and provides private resource access. It empowers our personnel to connect with relevant access permissions to access corporate resources.

2) Ensure a user of our organization aligns with traffic privacy with one of many tunneling protocols so that all transmitted data is completely encrypted. The level of security provided by Check Point ensures that only authorized connections are established, so if users are connected, they are protected.

When it comes to Check Point Remote Access VPN, my company is still in the testing phase and will be due for a rollout with our client, who has wanted a VPN connection since last summer.

If I compare the solution with some of the other products my company has used in the past, I can definitely see that it has some valuable features that allow me to see the traffic and what a client does. With the tool, I cannot only see a session but also the resources our company's clients are connected to since I can do so with the help of firewall logs. I like the overall visibility of the product.

The thing I like about Check Point Remote Access VPN stems from the fact that it terminates at the firewall wherever the client is going, and it works in an unencrypted manner, which allows me to see where the traffic is going. I can gain access to the clients' networks with NetScaler and with the aid of a packet sniffer.

Right now, my company connects with the vendors of Check Point whenever any maintenance is required, and not to our domain.

Check Point Remote Access VPN is a highly secured product with which, in our company, we can get end-to-end VPN connectivity so that the communication part is highly secured.

The most valuable feature of Check Point Remote Access VPN is its ability to deploy. It follows the same process as their stateful inspection firewall or IPS. If you know how to enable one feature, you can enable and configure others. The learning curve isn't steep.

The product needs to improve its support.