Check Point Quantum Force (NGFW) Reviews

Check Point Quantum Force (NGFW) serves as our first layer of security defense system. The second use case is to provide internet access to our private network. All network address translation of the private network is being done by Check Point Quantum Force (NGFW).

In my daily operations, all security profiles have been configured in Check Point Quantum Force (NGFW) solution and network address translation is also enabled on this device, which provides our network internet reachability and security.

The best feature of Check Point Quantum Force (NGFW) is security profiles. This feature collectively secures our internet and private network from emerging cyber threats. Check Point Quantum Force (NGFW) includes different types of security profiles such as antivirus, spyware, IPS, IDS, and DNS security. All these security measures are part of Check Point Quantum Force (NGFW) and have been applied to the security policy to secure our traffic from any malicious traffic.

Check Point Quantum Force (NGFW) has impacted our organization positively because it acts as a first layer of defense, providing security. It has reduced security incidents and minimized the time required by our engineers. Time is saved with Check Point Quantum Force (NGFW) because our engineers are not performing manual tasks, which is an improvement from the solution.

As of now, I have not identified any lack of features with Check Point Quantum Force (NGFW). It is performing perfectly fine, and the performance is also good. I do not see anything noticeable that can be further improved. It is working fine for us.

I have been using Check Point Quantum Force (NGFW) next-generation firewall for more than three years.

Check Point Quantum Force (NGFW) is very stable in my experience, and the performance is excellent.

Scalability-wise, there is no issue with Check Point Quantum Force (NGFW) as it is handling our traffic growth excellently.

Check Point Quantum Force (NGFW) customer support team is excellent. They are proficient in troubleshooting and the technical aspects.

Check Point Quantum Force (NGFW) employs multiple security measures that serve as pillars configured in the device, and I rely on all these security measures collectively for our infrastructure. I would advise any organization that is looking for a next-generation firewall solution to consider Check Point Quantum Force (NGFW). It is one of the best OEMs currently present in the security domain, and this solution will be helpful for network security. I have given this review a rating of nine out of ten.

On-premises

I'm using Check Point Quantum Force (NGFW) as our internet gateways and I use it as SSL decryption as well as URL filtering.

In my organization, I use Check Point Quantum Force (NGFW) to limit all applications that are not required for our organizations. For example, when YouTube or Facebook needs to be blocked via application, YouTube cannot be blocked directly. We need to do SSL decryption so that the firewall can see all packets, inspect them, and block necessary applications and URLs.

Check Point Quantum Force (NGFW) provides numerous features such as threat emulations, anti-bots, and the most outstanding feature is ElasticXL.

Since R82, the ElasticXL feature in Check Point Quantum Force (NGFW) has seen significant improvement, allowing use of more than two gateways in an active-active state. If you need to upgrade any device, you can add the same device with plug-and-play capability.

Using Check Point Quantum Force (NGFW), we rarely get any threats in its Gaia OS, and compared to its competitors, we need to upgrade them. In the past five years, it has had the least CVE and is one of the most stable products I've ever seen.

Check Point Quantum Force (NGFW) can handle growth or changes in my organization's needs. With its ElasticXL feature, I do not need to buy two different firewalls. I can purchase another single firewall with its plug-and-play feature, which matches the growing potential of our organizations.

Check Point Quantum Force (NGFW) can improve its perspective on VPN, as the VPN configuration is tedious compared to other firewalls, and the failover of site-to-site VPN is not robust compared to other competitors.

In R82, it has provided enhanced link selection for VPN failover, but it is not working smoothly.

I've been using Check Point Quantum Force (NGFW) for more than a year.

Check Point Quantum Force (NGFW) is the most stable product I've ever seen.

The customer support for Check Point Quantum Force (NGFW) has been great. They have been providing support, and we have not faced any issues from their support.

Positive

I've been using Palo Alto for quite a while. I switched to Check Point Quantum Force (NGFW) because one of my friends recommended it for its features.

I've seen a return on investment with Check Point Quantum Force (NGFW) because of the fewer employees needed. Everything has been set, and we do not have to make major changes to the firewall. We just have to add and give a little prompt, and we do not need to take any downtime because we do not need to frequently upgrade the firewall, as it does not have any security vulnerabilities in its OS compared to its competitors.

The pricing for Check Point Quantum Force (NGFW) is competitive with other firewalls, but it is still a little more expensive compared to Sophos and Fortinet. However, compared to Palo Alto and Cisco, it comes neck-to-neck, and the licensing is the same.

Before choosing Check Point Quantum Force (NGFW), I evaluated other options such as Palo Alto Networks.

We have not had to upgrade Check Point Quantum Force (NGFW) more than once a year, and that too just to get more updated features, not for security reasons.

What I would recommend to others considering Check Point Quantum Force (NGFW) is that if you do not want to compromise on security, Check Point Quantum Force (NGFW) is the best product. However, if you are looking for a firewall where you need to have a VPN site-to-site failover, then I would not suggest this firewall.

I rate Check Point Quantum Force (NGFW) a nine out of ten.

On-premises

The main use case for Check Point NGFW is providing perimeter security, as the Check Point firewall is deployed at the edge to control all incoming and outgoing north-south traffic, used as a combination of features including URL filtering, application control, IPS, content awareness, identity provider, IPsec tunnel, and SSL VPNs, and was specifically deployed in one of the head office locations as a perimeter firewall to control all in-out traffic.

Performance wise NGFW has handled high volumes of traffic with minimal latency , even during peak times, and the regular updated & support from check point have ensured continue reliability. One of the key improvements we have noticed is better visibility into application usage and user behaviour, allowing us to enforce more granular policies. Check point NGFW has significantly strengthened our organization's network security posture.

The best features offered by Check Point NGFW that stand out are its high detection rate for catching threats, uptime with very low business disruptions even during firmware upgrades, and features such as application control, URL filtering, IPS, and HTTPS inspection, all of which provide granular control over applications with thousands of applications available for policy implementation.

With around 3,000 users working under the organization, the Check Point NGFW safeguards users by protecting their internet browsing experience with features such as antivirus, anti-spoofing, and URL filtering control, ensuring we have control over what users can access and block malicious content from entering the organization's network.

HTTPS inspection for web traffic with Check Point NGFW decrypts and inspects all internet traffic, allowing the firewall to read the content being passed through, and with a threat detection rate around 99%, we have not noticed any breaches or business disruptions.

HTTPS inspection with Check Point NGFW works by decrypting incoming and outgoing HTTPS traffic, allowing the firewall to inspect and detect threats by reading the entire packet in clear plain text.

Check Point NGFW includes SSL VPNs as part of its feature set.

Performance under load : In high traffic environment, we've observed occasional performance bottleneck. 

Licensing Flexibility : The licensing model can be rigid and expensive, particularly for small to mid-sized organisations. 

I have been using Check Point NGFW for the last two years while working in operations and providing technical support. In our daily use cases, I utilize it as a next-generation firewall for overall features such as application control, URL filtering, IPS, and many other capabilities.

I am Somesh Kadam, a cybersecurity professional with two years of experience in implementation and technical support. I currently work with Softcell Technologies as a Technical Specialist, where I have extensive hands-on experience with firewalls such as Check Point, Fortinet, Palo Alto, and email security. I am currently exploring Zscaler as well.

On-premises

My main use case for Check Point Quantum Force (NGFW) is perimeter security. In practice, I am protecting a data center.

The best features that Check Point Quantum Force (NGFW) offers in my experience are threat prevention, which gives deep visibility and protection against real-time threats, along with features like IPS, anti-bot, sandboxing, and URL filtering. The centralized management with the Smart Console is extremely powerful with a user single pane of glass view across all the firewalls, policy, logs, threat events, and it also correlates incidents.

Those features help me in my daily work by allowing us to rely on threat prevention, which actively blocks malicious traffic before it causes any issues. I particularly use sandboxing for any zero-day attacks, and the Smart Console is a huge time saver since we manage all the configurations, logs, etc., from a single console instead of using multiple tools.

Check Point Quantum Force (NGFW) has positively impacted our organization by notably reducing intrusion prevention attempts, as we see a reduction in phishing-related malware that were previously bypassed but now are blocked, leading to reduced security incidents. Our SOC reported around a 20 to 30% drop in tickets due to blocked C2 traffic. We also see operational efficiency improvements by freeing up engineering hours for strategic tasks and gaining visibility and compliance through the dashboard and logs.

While the Smart Console is powerful, I find that it can feel heavy and slow with a large rules base, where a simple policy change sometimes takes longer than expected, impacting agility in a fast-moving environment. The licensing and advanced feature add-ons, like sand blast, require separate licenses, adding complexity to budgeting and license adoption.

Additionally, these challenges can lead to slower response times for urgent changes due to extra coordination for licensing procurement and time spent.

I have been using Check Point Quantum Force (NGFW) for about a year.

Check Point Quantum Force (NGFW) is stable, and I have not experienced any major downtime or reliability issues.

In my experience, the scalability of Check Point Quantum Force (NGFW) has been very solid, as the appliances are designed to handle high throughput. We have been able to scale up seamlessly as user traffic and data grew without major performance issues. It is easy to scale up by adding capacity through clustering or upgrading the license, and it effectively handles spikes in remote user connections or increased east-west traffic without noticeable bottlenecks.

The only consideration is ensuring proper sizing upfront, as being undersized for future growth can complicate upgrades, but overall, it scales with business needs as long as capacity planning is done correctly.

I have interacted with Check Point Quantum Force (NGFW) customer support several times, and overall, my experience has been positive, though there is room for improvement. The support engineers are highly knowledgeable and provide clear troubleshooting and resolution steps when cases are prioritized. They effectively follow the escalation path.

However, I have found that response times for non-critical tickets can be slower than expected, requiring more follow-ups for updates, and sometimes documentation lags behind new feature releases, causing reliance on support more than I would like.

My experience with pricing, setup cost, and licensing for Check Point Quantum Force (NGFW) is that pricing and licensing are on the higher side compared to some competitors, but it reflects enterprise-level security and threat prevention. The setup cost is reasonable when bundled with support and subscription, and while licensing is not the cheapest option, it is transparent once understood.

I have seen a return on investment with Check Point Quantum Force (NGFW), measurable through security and operational efficiency gains, like reduced incidents assisted by ATP and IPS. Centralized policy management has increased operational efficiency, improved response times with threat intelligence, and resource optimization. Since multiple security functions like firewall, IPS, AV, and sandboxing do not require separate point solutions, this lowers the overall overhead.

Before choosing Check Point Quantum Force (NGFW), I evaluated Fortinet.

I would rate Check Point Quantum Force (NGFW) an eight out of ten.

My rating of eight comes from excellent threat prevention and strong IPS, while the two drawbacks are the management complexity and occasional performance overhead with deep packet inspection and the licensing modularity, which requires separate add-ons.

My advice for others considering Check Point Quantum Force (NGFW) is to take time to plan their deployment carefully and fully understand the licensing model upfront, as it can get a bit complex. I recommend leveraging Check Point's management and automation features early on, as they will save day-to-day operation time, and investing in training your team is also worth it, as it enables them to maximize the firewall's advanced capabilities like threat prevention and centralized policy management. In summary, it delivers strong security and scalability, but you will get the most value if you prepare your team and environment ahead of time.

On-premises

My main use case for Check Point NGFW is to protect my corporate network.The protection from Check Point NGFW is used for all application traffic.

The best features Check Point NGFW offers are often considered to be the AI-powered threat intelligence, which I find valuable.The AI-powered intelligence from Check Point NGFW has helped my organization to detect faster threats and requires less manual intervention, but I don't have numbers as it is private to my company.Check Point NGFW has positively impacted my organization by improving the security posture over our network and over the organizations.The improvement in my security posture with Check Point NGFW means that the operating system is patched and hardened.

Check Point NGFW is good so far with that process, but there is always room for improvement.It would be beneficial for Check Point NGFW to integrate more advanced AI and machine learning algorithms for better threat detection and response.

I have been using Check Point NGFW for five years.

I did not purchase Check Point NGFW through the AWS Marketplace.Deploying Check Point NGFW in my environment is easy.The configuration process for Check Point NGFW requires some experience, but it is straightforward.

In my experience, Check Point NGFW has no downtime.

Check Point NGFW's scalability for my organization is good as it has been able to keep up as our needs have grown.

The customer support for Check Point NGFW is good, and I have not had to reach out often.I would rate the customer support for Check Point NGFW a seven on a scale of one to ten.

Neutral

I did not previously use a different solution before Check Point NGFW.

The initial setup with Check Point NGFW for me is straightforward.

My experience with the procurement process for Check Point NGFW is that it was easy.

I don't have specific metrics or examples in my mind, but it is good to have Check Point NGFW as a security device to protect the platform.

My thoughts about the metering and billing experience with Check Point NGFW are that it may be a bit pricey.Regarding pricing, setup cost, and licensing overall, it is considered more expensive compared with other providers.

Before choosing Check Point NGFW, I did not evaluate other options.

Check Point NGFW is deployed in my organization in a hybrid model, as it is both on-premise and cloud.For the hybrid deployment, we use AWS.I don't have any examples of how Check Point NGFW integrates with other AWS services I use because I don't use it much on the cloud.My advice for others looking into using Check Point NGFW is that it is good and offers security for companies.I rate Check Point NGFW an eight out of ten because it has good capabilities.My company does not have a business relationship with Check Point NGFW other than being a customer.I was offered a gift card for this review.I only use Check Point NGFW and no other tech products.I found this interview too long with too many questions, and I suggest reducing the number of questions.

Hybrid Cloud

Amazon Web Services (AWS)

We use Check Point NGFW for separating the IT networks from the OT networks. It provides advanced threat prevention, access control, IP policy, zoning, virtual interfaces, and NAT capabilities. While it also provides VPN, we are currently not using it but are exploring the option.

The best features offered by Check Point NGFW include threat prevention and application and identity awareness. Identity awareness is utilized to enforce policies that help identify systems based on users and groups, which is especially useful in enforcing access control in our OT environments. The ability to add policies for granular network segmentation using virtual interfaces for VLANs is beneficial. Check Point firewall has protocol awareness, aiding in anomaly detection in traffic packets. Centralized management using SmartConsole is valuable as it allows both IT and OT network administrators to manage the same firewall with varied permissions. Compliance and audit support for certain frameworks, along with logging and policy enforcement report generation, are additional strengths. Check Point in the OT DMZ assists with improved OT network visibility and faster incident response with its built-in logging, reducing incident response time.

Check Point NGFW could improve by continuing innovation and enhancing integration with popular SIEMs. More granularity and control for threat prevention, especially on the OT side, would be beneficial.

I have been using Check Point NGFW for over five years now.

The use of Check Point firewalls has helped improve our security posture without any downtime, thanks to the high availability architecture.

The solution is scalable because additional Check Point blades can be added to grow the network. It offers virtual and cloud options, making it suitable for expanding dynamic OT networks that span edge, remote locations, or hybrid clouds.

I rate customer support a nine. While it is exceptional, I believe there is always room for improvement.

Positive

The initial setup was complex, particularly with understanding different cloud infrastructures.

Incident response time has reduced significantly, and downtime due to network issues has been minimized, leading to an improved return on investment.

We briefly looked at Fortinet and Cisco options but chose Check Point because we are a Check Point shop.

I advise thoroughly planning ahead, understanding your environment, and ensuring a good network segmentation standard is set up. Pre-plan deployment using automated scripting. Familiarize yourself with SmartConsole and SmartEvent, especially in a multi-site setup. Begin enabling threat prevention gradually and plan for high availability using HA clustering with dual power supplies. On a scale of one to ten, I rate Check Point NGFW as ten.

Hybrid Cloud

Other

My main use case for Check Point Quantum Force (NGFW) is that we totally rely on this technology to provide our employees internet access and the connectivity between other branches of my organization while also providing SSL VPN to our work-from-home employees.

A specific example of how I use Check Point Quantum Force (NGFW) for connectivity between branches is that we have configured IPSec tunnels between multiple branches, allowing employees from remote branches to directly access the private network devices or remotely access any desktop. For SSL VPN, we have provided remote access VPN for our work-from-home employees.

Previously, before Check Point Quantum Force (NGFW) remote access VPN, our employees had to connect into our network to access some private network resources that were deployed in our local network. After implementing Check Point Quantum Force (NGFW), we enabled these features, allowing connections from remote locations.

Check Point Quantum Force (NGFW) has positively impacted my organization as the user experience of accessing the internet has really improved, and we are enjoying good security as well as seamless connectivity between the branches.

I have noticed specific outcomes, such as it hastening the access to remote branch resources, allowing us to take the remote desktop of any employee residing in the branches, which has significantly improved the experience.

According to my experience, the best features Check Point Quantum Force (NGFW) offers are its ability to provide internet access to all my employees and the security it provides to access the internet in a secure manner, ensuring no security breaches. Additionally, the VPN connectivity between branches and SSL VPN is also a standout feature.

Regarding the security aspect, Check Point Quantum Force (NGFW) includes features such as IPS and IDS and antivirus, which are excellent and provide good security to our private network.

I believe Check Point Quantum Force (NGFW) can be improved by being made more affordable for small organizations.

I have been using Check Point Quantum Force (NGFW) for more than three years.

Check Point Quantum Force (NGFW) is pretty stable, with no issues regarding performance or throughput.

Check Point Quantum Force (NGFW) is currently handling our organization's growth well, with no issues regarding scalability.

The customer support for Check Point Quantum Force (NGFW) is very good in technical matters, and I have had no issues contacting them.

I have been using Check Point Quantum Force (NGFW) only since starting.

I have seen a good return on investment as Check Point Quantum Force (NGFW) is saving my employees' time, securing our infrastructure, and providing seamless connectivity.

My experience with pricing, setup cost, and licensing was straightforward. As a partner of Check Point, there is no issue with the pricing or setup cost.

Before choosing Check Point Quantum Force (NGFW), I evaluated FortiGate Next-Generation Firewall.

On-premises

My main use case for Check Point NGFW is that it was deployed at the network edge to protect and manage incoming and outgoing traffic from the corporate network, which is controlled by Check Point firewall. We have implemented application control, URL filtering, content filtering, and similar features. This enables us to manage the traffic by creating granular policies, IP space, or user-based policies. The main use case is to control the inward traffic and stop cyber threats at the network edge only.

Check Point NGFW offers excellent features such as implementation of content awareness, application filtering, URL filtering, HTTPS inspection, IPS, and identity-based integration with LDAP, which we were able to implement. The user-based policies we have configured help us avoid unwanted malicious sites and ensure there is no malware being downloaded into the network, meaning there are no disruptions in network production. All users are focusing on their desired tasks, which has a positive impact by avoiding business disruptions. That's the main impact I can say, as it indirectly helps the organization keep their users focused and stay away from any kind of cyber threats.

Check Point NGFW has positively impacted my organization as the incidents have reduced, resulting in no disruptions in the network. Everything is running smoothly and the organization is protected by Check Point firewall. The users are doing their desired tasks very efficiently, and everything is live in the network or applications, providing excellent security. Therefore, there is no business disruption so far.

To improve Check Point NGFW, I would suggest that AI features, such as Auto AI autopilot, would be greatly appreciated because they can automate most of the tedious tasks that take a lot of time. Having features such as AI can make the process easier.

A specific task I'd like to automate with AI in Check Point NGFW is adding multiple users, users and address group configuration of address groups and addresses, along with exporting firewall addresses in a certain format. That kind of feature should be there, or if we try to export the data from the Check Point firewall, we get only group address group names without seeing whatever members of the address are included.

Check Point should provide the feature of exporting group data with address groups, so when I export address books, only the group name is visible in the Excel file. Instead, it should show the actual members of the groups getting exported. That kind of feature would be appreciated.

I've been using Check Point NGFW for more than one and a half years as an admin.

In my experience, Check Point NGFW is stable.

The scalability of Check Point NGFW is good, and we can integrate it with third-party solutions, such as Nexus 2FA. I have seen this kind of setup in one of the client environments.

Customer support for Check Point NGFW is quite good. I would rate the customer support an eight on a scale of one to ten.

I did not previously use a different solution before Check Point NGFW.

The initial setup with Check Point NGFW is straightforward.

I have seen a return on investment with Check Point NGFW as it helps reduce business disruptions, indirectly allowing the organization to focus on their desired tasks and get things done properly while saving time and avoiding unexpected disruptions. This time savings has contributed to company growth happening at the backend.

My experience with pricing, setup cost, and licensing for Check Point NGFW indicates that the pricing is comparatively higher compared to other vendors, but it is worth it when considering the features. It is justifiable.

I don't have knowledge about evaluating other options before choosing Check Point NGFW.

When using application control and URL filtering, I would share my experience where the organization used these features to block unwanted applications and allow only legitimate specific applications such as LinkedIn, Dropbox, and OneDrive, which should be accessible to all employees. Rest applications such as Facebook, YouTube, WhatsApp, WeChat, and other file-sharing applications should be blocked in the networks, and no one should access those applications. For web filtering, users can only visit legitimate websites; they should not visit any hacking or malicious websites, only financial, government websites, and internal applications should be accessible to users. We have configured these types of policies for the organization.

My advice for others looking into using Check Point NGFW is to utilize multiple features of the Check Point firewall. There is a huge list of features in the SmartConsole, so implementing most of the features such as application control and HTTPS inspection can be beneficial.

I would rate Check Point NGFW a nine out of ten because I am expecting a few features that are missing in the Check Point firewall, which I already mentioned.

On-premises

We are relying on Check Point Quantum Force (NGFW) for internet connectivity, user defense, and connectivity to other branches.

Any traffic going to the internet first goes through Check Point Quantum Force (NGFW), where it is inspected, and then flows through the internet. Our branches are connected through the IPsec tunnel.

The usability of Check Point Quantum Force (NGFW) is outstanding, making it easy for anyone to configure and troubleshoot.

When configuring NATing policies, during object creation for the outside or LAN subnet, enabling NATing requires just enabling it during object creation, and NATing will be automatically enabled for that subnet.

Since implementing Check Point Quantum Force (NGFW), our organization's network is secure and our connectivity has improved compared to previous solutions.

We are getting better visibility and logs, and with multiple security layers such as SandBlast, IPS, IDS, and threat prevention, these capabilities collectively secure our network.

The command line interface of Check Point Quantum Force (NGFW) needs improvement. During troubleshooting of configuration-related issues, it is difficult to work through the CLI as it is entirely Linux-based. A better knowledge base could be updated for guidance.

We have been using Check Point Quantum Force (NGFW) for more than three years.

Check Point Quantum Force (NGFW) is stable; we do not face any downtime or reliability issues and are not experiencing any challenges.

The scalability of Check Point Quantum Force (NGFW) is good; we are not facing any challenges with the scalability.

The customer support for Check Point Quantum Force (NGFW) is supportive, and my interactions with them have been positive experiences.

We have been using Check Point Quantum Force (NGFW) as our only solution and did not use different solutions previously.

We have seen a return on investment with Check Point Quantum Force (NGFW) because we are not experiencing any network problems after implementing the solution.

We evaluated Fortinet next-generation firewall before choosing Check Point Quantum Force (NGFW).

Apart from the complex CLI commands, everything about Check Point Quantum Force (NGFW) functions excellently.

After deploying Check Point Quantum Force (NGFW), we have achieved security and seamless connectivity, including branch connectivity. Everything appears defined and processed, and we have not encountered any issues after deployment.

If someone is looking for next-generation firewall capability, they should consider Check Point Quantum Force (NGFW) as a good solution.

I rate Check Point Quantum Force (NGFW) 9 out of 10.

On-premises

The checkpoint firewall is used as perimeter security for HO Location of the organisation.

It is deployed at edge to use it as next gen firewall including features like, Antivirus, IPS, Application control, URL Filtering etc.

Check Point Firewall offers strong NGFW (Next-Generation Firewall) features with smart security blades like IPS, Application Control, URL Filtering, Antivirus, Anti-Bot, Threat Emulation, and more—all in one device. It’s easy to integrate with other systems like Active Directory, SIEMs, and cloud platforms. I like how well it scales—whether it's a small office or a big enterprise, it works smoothly. The SmartConsole gives one place to manage everything. Tech support is knowledgeable and helpful, especially if you have a support plan. What makes Check Point unique is its ThreatCloud intelligence and the ability to create very detailed, identity-based rules. It also lets you handle complex networks with great control and visibility. Overall, it’s secure, flexible, and built for professionals who want full control over their network.

If you know checkpoint product well its easy to use and implement

Check Point NGFW helps solve key security problems like advanced threats, malware, phishing, and unauthorized access. With security blades like IPS, Anti-Bot, Threat Emulation, and Application Control, it protects both internal and internet-facing systems. One big issue it solves is hidden threats inside encrypted traffic—thanks to HTTPS inspection, it can scan encrypted data without slowing down performance.

What makes it even better is Check Point’s high-performance hardware, which is built to handle heavy traffic loads smoothly—even when features like HTTPS inspection and deep packet inspection are active. It also gives great visibility and control through SmartConsole and lets us manage users with identity-based policies.

Benefit : Faster detection, better protection, smooth performance, and easier management—all in one trusted platform.

Check Point Next-Generation Firewall (NGFW) offers robust security features that are highly beneficial for organizations when deployed as perimeter security. It combines traditional firewall capabilities with advanced threat prevention features such as Intrusion Prevention System (IPS), Application Control, Anti-Bot, URL Filtering, and Threat Emulation. These features help protect the organization from known and unknown threats, including zero-day attacks. With centralized management and real-time threat intelligence from ThreatCloud, it provides clear visibility and efficient policy enforcement. Its granular control over applications and users ensures secure access while maintaining network performance. This makes it a strong first line of defense at the network perimeter.

The product could benefit from improvements in simplifying policy management and minimizing false positives in threat prevention. Future releases would be enhanced by the addition of advanced reporting dashboards and deeper integration with third-party security solutions. AI-driven features would be highly valuable—particularly those that enable bulk operations and efficient handling of large numbers of objects or object groups. These capabilities would significantly reduce manual effort and save time for operational teams. Additionally, the inclusion of an AI-powered co-pilot mode to assist with configuration optimization and support prompt-based configuration would be greatly appreciated.

I have been using checkpoint firewall since 2 years.

Stability is good. Overall performance is good if you have higher end device then will work smothy.

Performance is good but sometimes smart console takes lil bit time to install policies. But thats not a major concern. Overall is good and faster.

TAC support is good , sometimes we get delay response but there are situations also from their side but in most cases its on time and good.

Positive

No

Initial setup is simple and straightforward. Complex for those who are just starting working with checkpoint but not much complex. If you learn the product well it will be easy to use and setup.

Through vendor team.

It saved time from business disruptions. Time gets utilised wisely that a positive impact of implementing Checkpoint NGFW firewall. 

Check Point NGFW offered a good balance of features and price. The licensing model was relatively straightforward.

I advise potential buyers to definitely take advantage of the trial period to test it in your environment, as it helped us solidify our decision. Ensure that your team gets proper training because, while it is easy to use, training maximizes its potential. I would rate the overall solution a 9 out of 10.

On-premises