What is our primary use case?
My main use case for Check Point Remote Access VPN is to allow remote users access into our network to get access to our resources that are secured behind the Check Point firewall.
A remote user typically connects to Check Point Remote Access VPN and from there they have access to network resources such as shared documentation, computers that are on the network, as well as network resources such as web pages and intranet sites that are served behind the firewall.
Additionally, we use Check Point Remote Access VPN in a unique way because it is tied in with our Active Directory, so we use group authentication to allow users to gain access to the network.
What is most valuable?
The best features that Check Point Remote Access VPN offers are the integration with our Active Directory and the multi-factor authentication that it allows.
We experience multi-factor authentication through SMS text messages as our second layer of authentication after group Active Directory authentication, where Check Point sends a text message, or we use a third party to send a text message to the user's phone, and then from there, they enter that in as their second factor of authentication prior to being allowed access to the network.
Check Point Remote Access VPN has positively impacted our organization by allowing easier management of remote users, and it also gives us better insight into logging behind the scenes.
What needs improvement?
Regarding logging and management, while some of the logging is really good, other times it's not so great, and we've had to reach out to Check Point a few times for assistance, and the support we've gained hasn't been up to par with what Check Point usually offers as part of their support.
When it comes to improvements, not specifically the remote access VPN, but the support associated with Check Point products has fallen over the last two years, and the response time is much worse, with the first layer of support lacking sufficient knowledge on how to troubleshoot issues.
For how long have I used the solution?
I have been using Check Point Remote Access VPN for over five years at this point.
What do I think about the stability of the solution?
Check Point Remote Access VPN is stable.
What do I think about the scalability of the solution?
It seems fine; we haven't had any issues with scalability.
How are customer service and support?
My overall experience with customer support is not great; our typical first level of support that we receive is lackluster, usually involving someone that doesn't really understand our issue, and it takes multiple days to get the issue escalated to someone that can actually help.
After that point in time, there's often deflection that happens on the second level of support in trying to defend rather than address the issue, and we have received some hot fixes to address some of our problems, but it's never explained what actually is being fixed.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We previously used a Cisco router for quite some time, and it was very cumbersome to set up and deploy and manage, so we switched to Check Point Remote Access VPN just because of its high reputation in the industry.
What was our ROI?
I don't have any metrics on return on investment.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing was positive; our vendor that we use for it is quite good.
Which other solutions did I evaluate?
Before choosing Check Point Remote Access VPN, we evaluated other options, including SonicWall, which was one of the major competitors we looked at.
What other advice do I have?
We utilize Check Point for our firewall, IDS and IPS as well.
I give Check Point Remote Access VPN a rating of seven out of ten because we did have some problems with getting some of our users to be able to access the VPN through Active Directory authentication, and it took quite some time to get that troubleshooting addressed through Check Point support. We eventually did figure it out, but it took longer than it should have.
My advice for others looking into using Check Point Remote Access VPN is to be aware of the support and how it's gone downhill lately; other than that, the product line itself is good.
In summary, Check Point Remote Access VPN is a good product, but I would just like to see customer support get back to what it used to be when we first bought it, as it seems like it's gone downhill, potentially because of outsourcing, but that's speculation.
Which deployment model are you using for this solution?
On-premises