Check Point NGFW Reviews

We use Check Point NGFW for separating the IT networks from the OT networks. It provides advanced threat prevention, access control, IP policy, zoning, virtual interfaces, and NAT capabilities. While it also provides VPN, we are currently not using it but are exploring the option.

The best features offered by Check Point NGFW include threat prevention and application and identity awareness. Identity awareness is utilized to enforce policies that help identify systems based on users and groups, which is especially useful in enforcing access control in our OT environments. The ability to add policies for granular network segmentation using virtual interfaces for VLANs is beneficial. Check Point firewall has protocol awareness, aiding in anomaly detection in traffic packets. Centralized management using SmartConsole is valuable as it allows both IT and OT network administrators to manage the same firewall with varied permissions. Compliance and audit support for certain frameworks, along with logging and policy enforcement report generation, are additional strengths. Check Point in the OT DMZ assists with improved OT network visibility and faster incident response with its built-in logging, reducing incident response time.

My main use case for Check Point NGFW is using it as a next gen firewall for perimeter security, for branch connectivity, VPN access, and deep packet inspection of north south traffic. That is the main use case.

Check Point NGFW has positively impacted my organization, which has around two thousand employees, by keeping us protected from cyber threats. It's challenging nowadays, but with Check Point NGFW deployed for perimeter security, we effectively block unwanted or malicious intrusions, allowing all organizational users to stay safe while performing their tasks without disruption. The positive impact is evident as users remain focused on their work, which contributes to improving our organizational economic growth.

We use Check Point NGFW to secure the perimeter of our customers. It is a great solution that enables us to prevent any type of attack from external threats by securing our infrastructure up to level seven of the ISO OSI stack. We implement blades like IPS, anti-bot, and antivirus. We deploy different solutions such as physical Check Point or VSX, and we have also deployed on VMware and on physical appliances. The deployment is very easy, and after deploying the firewall and enabling all the blades, we just need to manage it.

The best feature of Check Point NGFW is the Threat Prevention blade, specifically EPS. In recent months, Check Point has offered automation to automate threat prevention, making it a very strong blade to secure our perimeter. This blade has blocked many external attacks that could have led to data loss or server compromise for our customers. Additionally, Check Point NGFW can be used in cloud environments like Azure and AWS. It's a great solution, easy to deploy due to templates in cloud environments. Other valuable features include Identity Awareness, which allows us to manage access to resources by user rather than by IP address.

My main use case for Check Point NGFW is to protect my corporate network.The protection from Check Point NGFW is used for all application traffic.

The best features Check Point NGFW offers are often considered to be the AI-powered threat intelligence, which I find valuable.The AI-powered intelligence from Check Point NGFW has helped my organization to detect faster threats and requires less manual intervention, but I don't have numbers as it is private to my company.Check Point NGFW has positively impacted my organization by improving the security posture over our network and over the organizations.The improvement in my security posture with Check Point NGFW means that the operating system is patched and hardened.

We use Check Point NGFW for security purposes. Our clients use it for security reasons, as mentioned during the call.

The most valuable feature is the availability of two consoles. In the normal GA login, I can create interfaces and configure interface IPs, while in the SmartConsole, I manage the NAT quality and firewall access. This allows me to effectively configure the Check Point firewall.

We are working with Check Point NGFW as an internet firewall, a data center firewall, and a core firewall. We also deal with customers using the Maestro firewall for data centers.

One of the main advantages I have seen with Check Point NGFW is centralized management. The number of vulnerabilities is very few compared to commodity products, so customers don't have to worry even if it is exposed to the internet. Specific features include threat prevention, threat cloud, Infinity Portal for centralized cloud management, URL filtering, content awareness blade, identity awareness blade, and VPN blades. Customers only need to subscribe to what they require, so resources are free for other uses.

We use Check Point NGFW for edge firewalls as well as internal segregation firewalls. It easily allows us to separate critical traffic from non-critical office traffic.

We use Check Point NGFW for edge firewalls as well as internal segregation firewalls. It easily allows us to separate critical traffic from non-critical office traffic. Check Point ThreatCloud is excellent. Their central management console makes managing hundreds of firewalls very easy, and their antivirus that's part of the ThreatCloud is very good. Since implementing it, we have noticed a lot less getting through that maybe other antivirus within firewalls had failed to catch.

Historically, the primary uses for these gateways were perimeter security and internet filtering. However, we now push all our internal traffic through the gateways for LAN segregation and to isolate obsolete operating systems.

Our isolated operating systems and LANs only allow specific traffic from a specific source to access them, making these critical production/business systems more secure. It's not a simple case of just replacing these legacy operating systems but replacing the industrial machinery that they control - which would require an investment of tens of millions of pounds.

Isolating obsolete operating systems wasn't in the scope when implementing the gateways originally. However, it has enabled us to secure Windows XP/Windows 7/2003/2008 machines which are end of support yet are still required to run industrial software and interface with large machines, which are not easy to replace.

Isolating machines and networks, along with SSL inspection, wasn't in scope when the gateways were spec'd. That said, five years later, they are still rock solid, and along with the Threat Cloud intelligence service, this ensures that our firewall is equipped with up-to-date threat intelligence, enhancing its ability to detect and mitigate emerging threats.