Check Point NGFW Reviews

My main use case for Check Point NGFW is using it as a gateway firewall, since it's an enterprise-grade security device with tons of features such as threat prevention, IPS, app control, URL filtering, antivirus, anti-bot, anti-malware, and sandboxing, to name a few on top of my mind, and recently, as per the last solution I consulted or sold to a customer, they were using NGFW as a gateway firewall.

Apart from using Check Point NGFW as a gateway firewall, we use it as a device for application visibility and control, as Check Point NGFW is designed to detect and block sophisticated threats such as malware and advanced persistent threats (APTs) which can be a critical component for many deployments.

The last solution I worked on involved protecting a company with approximately 200 to 300 in-house employees, where the gateway firewall was installed to protect the network parameter and the gateway points within the organization's infrastructure, acting as a barrier between a trusted internal network and an untrusted external network.

The best features Check Point NGFW offers include their tight integration among different products forming a single ecosystem, and the ease of setup is notable, as Check Point is always a leader in security and getting a device with a lot of features managed by a central console, which we call SmartConsole.

The tight integration and ease of setup made a significant difference, as most Check Point NGFW devices come with a default configuration and once powered up, they automatically reach out to the Check Point cloud for an initial configuration download, which is completely autonomous. In my experience, this resulted in an initial setup that took around 3 to 4 hours for more complex configurations.

The combination of zero-touch deployment and SmartConsole allows Check Point NGFW for fast, easy, and scalable fiber deployment, as anyone can get Check Point NGFW up and running with minimal manual intervention, reducing the initial and complex setup, saving time, and alleviating headaches for IT.

Check Point NGFW has impacted our organization positively by reducing time due to zero-touch deployment and SmartConsole, where preconfigured devices automatically connect to Check Point cloud for setup, and this also helps in achieving a complete security posture for the organization.

I am using Check Point NGFW to protect against known and unknown emerging threats. It is our first option because it provides advanced intrusion prevention, application control, and threat intelligence features. We have integrated it with threat prevention features, enabling real-time threat detection and prevention. Services such as IPS, anti-bot, antivirus, and URL filtering are combined into our daily operations.

Check Point NGFW provides granular application control and detailed visibility over application and user activity. It integrates with the ThreatCloud ecosystem, enabling real-time threat detection and prevention. The User Identity Awareness blade integrates with Active Directory, identifying user traffic sources. Check Point NGFW is highly scalable and has centralized management through SmartConsole, which manages policies, logs, and threat data. It reduced our incidents and decreased the time to analyze cyber threats by 70 percent.

I use it for UTM [Unified Threat Management]. I use a gateway firewall at the office.

Next Generation Firewall, along with Threat Emulation and Threat Extraction, is what I use. Real-time prevention is there to protect against zero-day malware and Check Point Sandbox.

And then, the CPU-based emulation is a better feature than any technologies not having that. Check Point has a CPU-based emulation. Normally, Fortinet and others, they do it differently. But these people work on a technology called CPU-based emulation. 

This CPU-based emulation is a unique CPU-level technology that catches malware before it has an opportunity to deploy or evade detection. They call it SandBlast. Check Point SandBlast Threat Emulation. That is a great feature, which they are using. It controls attempts to bypass OS security controls also. And then it avoids deep security.

I use our Check Point firewall for all the NATing of my applications. I use it for external traffic monitoring where my Internet links are connected, and I use it as a gateway.

We use Check Point NGFW for separating the IT networks from the OT networks. It provides advanced threat prevention, access control, IP policy, zoning, virtual interfaces, and NAT capabilities. While it also provides VPN, we are currently not using it but are exploring the option.

The best features offered by Check Point NGFW include threat prevention and application and identity awareness. Identity awareness is utilized to enforce policies that help identify systems based on users and groups, which is especially useful in enforcing access control in our OT environments. The ability to add policies for granular network segmentation using virtual interfaces for VLANs is beneficial. Check Point firewall has protocol awareness, aiding in anomaly detection in traffic packets. Centralized management using SmartConsole is valuable as it allows both IT and OT network administrators to manage the same firewall with varied permissions. Compliance and audit support for certain frameworks, along with logging and policy enforcement report generation, are additional strengths. Check Point in the OT DMZ assists with improved OT network visibility and faster incident response with its built-in logging, reducing incident response time.

My main use case for Check Point NGFW is that it was deployed at the network edge to protect and manage incoming and outgoing traffic from the corporate network, which is controlled by Check Point firewall. We have implemented application control, URL filtering, content filtering, and similar features. This enables us to manage the traffic by creating granular policies, IP space, or user-based policies. The main use case is to control the inward traffic and stop cyber threats at the network edge only.

Check Point NGFW offers excellent features such as implementation of content awareness, application filtering, URL filtering, HTTPS inspection, IPS, and identity-based integration with LDAP, which we were able to implement. The user-based policies we have configured help us avoid unwanted malicious sites and ensure there is no malware being downloaded into the network, meaning there are no disruptions in network production. All users are focusing on their desired tasks, which has a positive impact by avoiding business disruptions. That's the main impact I can say, as it indirectly helps the organization keep their users focused and stay away from any kind of cyber threats.

Check Point NGFW has positively impacted my organization as the incidents have reduced, resulting in no disruptions in the network. Everything is running smoothly and the organization is protected by Check Point firewall. The users are doing their desired tasks very efficiently, and everything is live in the network or applications, providing excellent security. Therefore, there is no business disruption so far.

My main use case for Check Point NGFW is to protect my corporate network.The protection from Check Point NGFW is used for all application traffic.

The best features Check Point NGFW offers are often considered to be the AI-powered threat intelligence, which I find valuable.The AI-powered intelligence from Check Point NGFW has helped my organization to detect faster threats and requires less manual intervention, but I don't have numbers as it is private to my company.Check Point NGFW has positively impacted my organization by improving the security posture over our network and over the organizations.The improvement in my security posture with Check Point NGFW means that the operating system is patched and hardened.

My main use case for Check Point NGFW is using it as a next gen firewall for perimeter security, for branch connectivity, VPN access, and deep packet inspection of north south traffic. That is the main use case.

Check Point NGFW has positively impacted my organization, which has around two thousand employees, by keeping us protected from cyber threats. It's challenging nowadays, but with Check Point NGFW deployed for perimeter security, we effectively block unwanted or malicious intrusions, allowing all organizational users to stay safe while performing their tasks without disruption. The positive impact is evident as users remain focused on their work, which contributes to improving our organizational economic growth.

We use Check Point NGFW to secure the perimeter of our customers. It is a great solution that enables us to prevent any type of attack from external threats by securing our infrastructure up to level seven of the ISO OSI stack. We implement blades like IPS, anti-bot, and antivirus. We deploy different solutions such as physical Check Point or VSX, and we have also deployed on VMware and on physical appliances. The deployment is very easy, and after deploying the firewall and enabling all the blades, we just need to manage it.

The best feature of Check Point NGFW is the Threat Prevention blade, specifically EPS. In recent months, Check Point has offered automation to automate threat prevention, making it a very strong blade to secure our perimeter. This blade has blocked many external attacks that could have led to data loss or server compromise for our customers. Additionally, Check Point NGFW can be used in cloud environments like Azure and AWS. It's a great solution, easy to deploy due to templates in cloud environments. Other valuable features include Identity Awareness, which allows us to manage access to resources by user rather than by IP address.