Check Point Quantum Force (NGFW) Reviews

My main use case for Check Point Quantum Force (NGFW) is to use it as a security gateway where we have configured SSL VPN, IPsec VPN and configured firewall for network security.

I am using Check Point Quantum Force (NGFW) to provide our employees remote access VPN, as well as security while accessing any website to secure them from cyber threats.

All use cases for Check Point Quantum Force (NGFW) are covered.

The best features that Check Point Quantum Force (NGFW) offers in my experience include great security features such as IDS, IPS, and the feature of VPN including SSL and IPsec, both of which are outstanding.

The features of Check Point Quantum Force (NGFW), such as IDS, IPS, and the VPN options, help me in my day-to-day work by preventing threats. Our LAN devices are protected through these features. For VPNs, SSL VPN provides great connectivity; if any user works from home, they can easily access our organization data or the servers remotely. For IPsec VPN, our branches are easily connected, and we can communicate with other devices present at the branch level.

Check Point Quantum Force (NGFW) has impacted our organization positively by providing outstanding security features to prevent emerging threats, and our organization LAN network is protected from web threats.

After deploying the firewall, I have noticed that our LAN network is very secure.

Check Point Quantum Force (NGFW) provides great visibility and security for our LAN network, which shows return on investment.

Check Point Quantum Force (NGFW) could be improved by making its pricing more reliable since sometimes it feels the price is a little bit high.

There are no needed improvements for Check Point Quantum Force (NGFW) right now since everything looks perfect for the security features and the gateway.

I have been using Check Point Quantum Force (NGFW) for almost two years.

Check Point Quantum Force (NGFW) is very stable.

Check Point Quantum Force (NGFW) has good scalability and can grow with our organization's needs.

My experience with customer support for Check Point Quantum Force (NGFW) was great; they are supportive and knowledgeable, resolving any technical issues in less time.

I have not used any different solution, as we are using Check Point Quantum Force (NGFW) only.

Before choosing Check Point Quantum Force (NGFW), we evaluated the Fortinet firewall, but we selected Check Point.

I will definitely refer others to use Check Point Quantum Force (NGFW).

We have a business relationship with Check Point as a partner, in addition to being a customer.

On a scale of 1-10, I rate Check Point Quantum Force (NGFW) an 8.

On-premises

My main use case for Check Point NGFW is using it as a next gen firewall for perimeter security, for branch connectivity, VPN access, and deep packet inspection of north south traffic. That is the main use case.

Check Point NGFW has positively impacted my organization, which has around two thousand employees, by keeping us protected from cyber threats. It's challenging nowadays, but with Check Point NGFW deployed for perimeter security, we effectively block unwanted or malicious intrusions, allowing all organizational users to stay safe while performing their tasks without disruption. The positive impact is evident as users remain focused on their work, which contributes to improving our organizational economic growth.

The best features Check Point NGFW offers include application control, which makes it granular control for managing applications. There are thousands of applications in the Check Point repository, making it easy to write a policy according to requirements based on application needs. Another feature such as URL filtering works efficiently, allowing us to categorize websites for user access. We can create allow and deny policies based on organizational needs. Additionally, there is IPS for preventing threats, which can take action against malware or unwanted traffic trying to enter the network. This keeps us safe and protected against cyber threats.

Check Point NGFW also has an antivirus capability and allows identity-based policies with easy integration of LDAP or two-factor authentication methods. HTTPS inspection stands out as Check Point NGFW excels in identifying threats because it inspects all traffic, including encrypted traffic, for malicious activities. Check Point has good hardware capabilities to accelerate and manage overall traffic load, accommodating heavy loads easily. SmartConsole centralizes firewall management for better control over multiple firewalls and policies.

For improvements, I believe integrating AI-driven features for bulk operations or complicated tasks would be beneficial for Check Point NGFW. A feature that allows users to prompt the AI for backend tasks would save operational teams time and streamline processes. Additionally, improving the dashboards for better visibility and metrics regarding attack traffic would also benefit the monitoring team.

I have been using Check Point NGFW for two and a half years.

I rate the overall stability of Check Point NGFW at a ten out of nine because, while it performs exceptionally, SmartConsole needs improvement regarding performance. Sometimes it takes time to install policies, but I believe future enhancements will improve this aspect.

Overall, I would rate Check Point NGFW as a nine for its good performance, leaving one point for future improvements, particularly in SmartConsole performance.

The scalability of Check Point NGFW is good. We can utilize its entire feature set, including URL filtering, application control, IPS, and threat intelligence. Integrations with LDAP and other two-factor authentication solutions are easily accomplished, adding to its good integration perspective.

Check Point NGFW's customer support is very good. Occasionally, responses can be delayed, but I understand there are circumstances on their side, which is acceptable. I hope their support will improve in the future.

Positive

My experience with Check Point NGFW's pricing reveals it is a bit higher than other vendors. However, considering the security and features Check Point NGFW offers, it's justified. Licensing can be complex and requires careful planning due to add-on licenses, so it's essential to plan what licenses our organization needs accordingly. The initial learning curve for new administrators can be challenging since it is not very user-friendly. However, for those who understand the product, handling all tasks becomes easier. For beginners, it can be complicated to grasp the Check Point NGFW architecture, and advanced reporting could be improved with better visuals or dashboards.

I recommend others looking into using Check Point NGFW to utilize all available licensing for application control, URL filtering, and IPS. It's essential to enable HTTPS inspection to understand its impact on firewall performance and plan accordingly. If the hardware is sufficient, higher models should handle heavy loads effortlessly. I suggest exploring SmartConsole features, as there are many available. Although not everything can be utilized, maximizing its capabilities is beneficial. Additionally, the inspection settings for IPS and TCP/UDP protocols should be adjusted according to best practices to ensure smooth operations without blocking legitimate traffic due to strict configurations. Overall, I rate Check Point NGFW a 9 out of 10.

On-premises

We use Check Point NGFW to secure the perimeter of our customers. It is a great solution that enables us to prevent any type of attack from external threats by securing our infrastructure up to level seven of the ISO OSI stack. We implement blades like IPS, anti-bot, and antivirus. We deploy different solutions such as physical Check Point or VSX, and we have also deployed on VMware and on physical appliances. The deployment is very easy, and after deploying the firewall and enabling all the blades, we just need to manage it.

The best feature of Check Point NGFW is the Threat Prevention blade, specifically EPS. In recent months, Check Point has offered automation to automate threat prevention, making it a very strong blade to secure our perimeter. This blade has blocked many external attacks that could have led to data loss or server compromise for our customers. Additionally, Check Point NGFW can be used in cloud environments like Azure and AWS. It's a great solution, easy to deploy due to templates in cloud environments. Other valuable features include Identity Awareness, which allows us to manage access to resources by user rather than by IP address.

It's not easy to say what needs improvement because it is a very strong solution. I think the VSX technology could be made easier to manage with elastic scalability and evolving technology. However, overall, Check Point is a strong solution that works very well, and I'm satisfied with it as is.

I have been using the solution for about seven years.

Scalability is very good. For example, if you have a VSX cluster, you can add a new member and use the VSX configure feature to push all the configurations to the new gateway. This makes it equal to the other members. Also, the scale set on cloud environments is the best concept of scalability because you can have templates that create new instances in case of high CPU utilization and decrease when it goes down.

The customer support is very, very good. We have premium direct support with all our solutions, and within a few minutes, we can be in contact with the TAC of Check Point. Also, the R&D provides us with custom fixes when needed.

Neutral

We also use a Fortinet solution, which is a competitive vendor. Fortinet offers vDOMs that allow for the creation of logically separate firewalls. However, Check Point is better. In the last three years, Fortinet has had a lot of CVEs that impacted security, whereas Check Point hasn't. Check Point is very secure.

The setup is not complex. We just need to install the operational system Gaia with an ISO file and perform a first-time wizard to set the initial configuration like DNS, NTP, and network interfaces. After that, we connect the firewall to the management server, which can be a Security Management Server or a Multi-Domain Management Server. Then, we can start creating new policy packages, new rules, and install them on the gateway.

In terms of time savings, Check Point NGFW saves time. By using NGFW with VSX, we can deploy many virtual firewalls using the same hardware. This is a time-saving measure because we don't need to deploy a cluster or a firewall each time; we just create a virtual system on the management server using the same appliance.

We evaluated Fortinet and Palo Alto. When we need to do a cost estimation for our customers, we consider these vendors. However, my team's experience is very strong with Check Point, so we try to buy a Check Point solution whenever possible.

I advise others to use Check Point NGFW because it is a great solution. I rate Check Point NGFW a nine. Considering the time of deployment, the quality of support, and the features and blades the vendor offers, it is on top of the world in this field. A nine is the right number.

Hybrid Cloud

Other

We are working with Check Point NGFW as an internet firewall, a data center firewall, and a core firewall. We also deal with customers using the Maestro firewall for data centers.

One of the main advantages I have seen with Check Point NGFW is centralized management. The number of vulnerabilities is very few compared to commodity products, so customers don't have to worry even if it is exposed to the internet. Specific features include threat prevention, threat cloud, Infinity Portal for centralized cloud management, URL filtering, content awareness blade, identity awareness blade, and VPN blades. Customers only need to subscribe to what they require, so resources are free for other uses.

Check Point NGFW should concentrate more on the SMB market, as solutions in this space are not as strong in security. In terms of SD-WAN technology, Check Point's offerings are not as mature as competitors. There are some issues during initial setup, particularly with establishing connectivity with the Infinity Portal.

I have been working with Check Point NGFW for one year.

During initial setup, deployment teams usually face issues establishing the initial connectivity with the Infinity Portal.

As far as I have seen, Check Point NGFW is very stable. I have worked with Check Point products for 15 years and haven't found any stability or performance issues.

Check Point NGFW is very scalable. They offer multiple solutions from SMBs to enterprise data centers, making it an easily scalable solution with no issues in scalability.

We have escalated issues to Check Point technical support multiple times and have received timely and very good responses, especially from the local support team available in our country.

Positive

I have worked with almost all the major products: Fortinet, Palo Alto, Cisco ASA, and FTD.

There can be issues during the initial setup, particularly with establishing connectivity with the Infinity Portal.

I am currently in presales and not directly involved in deployment, but I have been part of a deployment team before.

Compared to other solutions, the pricing of Check Point NGFW is high. However, for customers particularly concerned with security, such as in enterprises, data centers, financial sectors, or government sectors, the pricing is justified. If a customer is not highly focused on security, a less expensive firewall may suffice.

I have experience with major vendors such as Fortinet, Palo Alto, Cisco ASA, and FTD.

I would recommend Check Point NGFW due to their long history of providing secure solutions and their pioneering stateful inspection technology. Their threat cloud is one of the richest AI clouds available. They also offer strong R&D, which results in fewer vulnerabilities in their products. Overall, I rate Check Point NGFW an eight out of ten.

On-premises

We use Check Point NGFW for security purposes. Our clients use it for security reasons, as mentioned during the call.

The most valuable feature is the availability of two consoles. In the normal GA login, I can create interfaces and configure interface IPs, while in the SmartConsole, I manage the NAT quality and firewall access. This allows me to effectively configure the Check Point firewall.

Check Point would benefit from having a single console for both basic and policy configurations. Currently, two different consoles are required, which could be more streamlined.

I have experience working with Check Point NGFW as part of the implementation team, working in both production environments and configuring firewalls.

I rate the stability of the solution as nine out of ten. While the solution is generally stable, there are complications, such as requiring SmartConsole for deployment and upgrades, which can be time-consuming.

Scalability must be carefully planned for, considering future growth and user base increases. The solution is suggested with a five-year plan in mind to accommodate growth. In cloud environments, scalability is adjusted based on customer requirements.

I rate technical support from Check Point at ten out of ten. The support is excellent.

Positive

The initial setup can be complex. Proper planning and scope of work are crucial to ensure a smooth setup.

I work as a network engineer in the implementation team. We handle deployments and configurations of Check Point firewalls.

In comparison to Fortinet and other products, the pricing may be considered high. Customers often look for budget-friendly options and may choose based on cost considerations.

As a technical expert, I would recommend Check Point NGFW. However, from a customer's budgetary perspective, they must evaluate their options.

I'd rate the solution nine out of ten.

We use Check Point NGFW for network security purposes, where we have configured VPN, site-to-site VPNs, and advanced threat prevention for protecting our network infrastructure.

We utilize Check Point NGFW for network security, implementing the firewall for different aspects, such as threat prevention for securing our network and using tunnels to connect our different branches to one another.

In my experience, Check Point NGFW offers some of the best features.

VPN is one of those standout features.

The best features of Check Point NGFW are the site-to-site VPN capability, the advanced feature of VPN configuration, threat prevention, and advanced URL filtering, having all the security features present in the next generation firewall.

Check Point NGFW improves our security positively. The security improvement has improved significantly by using Check Point NGFW.

The pricing is a little bit high, so it should be considered from a customer aspect.

I have been using Check Point NGFW for almost one and a half years.

In my experience, Check Point NGFW is stable with no issues regarding reliability.

Check Point NGFW has been easy to scale as our needs have grown.

The customer support was good, and we just need to raise a ticket from the customer support portal where the device has been registered, and we received instant support from the technical engineer.

I would rate the customer support between nine to ten; the support was excellent.

Positive

I did not use a different solution before Check Point NGFW.

The initial setup with Check Point NGFW is a little bit complex for those who are new to it.

Check Point NGFW has definitely shown improvement in terms of time and money cost-wise.

The pricing, setup cost, and licensing were straightforward, but the pricing is a little bit high compared to other vendors such as FortiGate and Sophos.

We considered FortiGate as one of the options before choosing Check Point NGFW.

I advise others looking into using Check Point NGFW to understand their infrastructure, scenario, and needs, and then decide on scalability before choosing Check Point NGFW.

We are partners with Check Point, but we are not a customer in other business relationships. As a partner, we work with different vendors such as Sophos, FortiGate, Check Point NGFW, and ASA.

On a scale of one to ten, I would rate Check Point NGFW a ten; it is excellent.

On-premises

Other

Previously, there was no security device in our organization, so we deployed Check Point Quantum Force (NGFW) for security that provides connectivity between the private network to the internet to our organization's private network. We are using this device to access the internet with security and compliance.

We have servers deployed in our private network, so we have created a destination NAT, and we are accessing one or two servers from outside, which has been configured.

In Check Point Quantum Force (NGFW), there are multiple security groups including URLS, application control, and many blades, which all collectively secure our network, providing visibility with the logs.

Since we deployed this security device, the connection is stable and every user is protected from cyber threats with the latest security signature update. Users have better access and do not face delays while accessing or browsing the internet. The security groups that were configured stand out to me the most.

The security, command line, and everything works perfectly, and we are getting both security and stable connections.

Working with the command line of Check Point Quantum Force (NGFW) while troubleshooting network issues or configuration is complex because it's a Linux-based CLI. I would suggest providing thorough documentation that will make the job easier for engineers.

I have been working in my current field for more than three years.

It is reliable, as we are not facing any problems with its stability and reliability.

It is scalable, as it can handle the user accounts, and there are no issues with handling increased traffic.

We have support to troubleshoot any issues, problems, or technical concerns. We can raise issues through the support portal and the response has been good.

Neutral

We evaluated Fortinet and Cisco ASA along with Check Point Quantum Force (NGFW) before making our choice.

We are currently using Check Point Quantum Force (NGFW).

I was not part of the team involved in purchasing or licensing decisions.

I advise any organization looking for a security firewall to consider Check Point Quantum Force (NGFW) solutions. I rate Check Point Quantum Force (NGFW) eight out of ten.

On-premises

All the internet traffic from LAN to WAN passes through Check Point Quantum Force (NGFW), so all the inspection, threat inspection, app control, user control, and threat prevention configurations are implemented in Check Point Quantum Force (NGFW). With the help of Check Point Quantum Force (NGFW), we are able to access the internet in a secure manner, and the private IPs are NATed in this device.

Check Point Quantum Force (NGFW) offers an outstanding user interface that is easy to manage and understand what tabs are meant for, making configuration steps straightforward. Its automated NAT process is also outstanding.

Previously there was no network segmentation, but after deploying Check Point Quantum Force (NGFW), we have implemented network segmentation for multiple departments based on user roles.

Check Point Quantum Force (NGFW) offers traffic inspection and logs, which greatly improve security and allows access to the internet in a secure way, protecting users from malicious files while downloading documents. Logs are stored in the Next-Generation Firewall device itself. This solution has saved time and improved employee productivity by controlling user traffic.

Documentation for Check Point Quantum Force (NGFW) can be improved, especially the KB, knowledge base, for some parts of the configuration.

We have been using Check Point Quantum Force (NGFW) for more than three years.

Check Point Quantum Force (NGFW) is stable and has been reliable for us.

Check Point Quantum Force (NGFW) has good scalability and has been able to grow with our organization's needs.

The support team is supportive when it comes to Check Point Quantum Force (NGFW) customer support, and I have had experience interacting with their support team.

Positive

We were using a different solution before Check Point Quantum Force (NGFW).

Based on our organization's needs, we decided to implement Check Point Quantum Force (NGFW) based on the device capabilities and security compliance, which includes multiple security blades that come built-in. The setup cost and licensing are appropriate for our organization.

The time saved with Check Point Quantum Force (NGFW) is significant because previously there was no inspection or logins, and now we have the logins of users and we can control their traffic, which has made the productivity of the employees better, resulting in both money and time savings.

Before choosing Check Point Quantum Force (NGFW), we evaluated Fortinet Next-Generation Firewall.

Check Point Quantum Force (NGFW) appears somewhat costlier for smaller organizations, though the costing can be reliable for them.

I will advise others to consider using Check Point Quantum Force (NGFW) based on my positive experiences.

We are partners with Check Point Quantum Force (NGFW) and have a business relationship other than being just a customer.

I rate Check Point Quantum Force (NGFW) as 8 out of 10.

I have been using Check Point Quantum Force (NGFW) for around one year. My main use case for Check Point Quantum Force (NGFW) is perimeter security in the data center. I do not have anything else to add about my use case as there is no specific scenario or type of threat I'm protecting against.

I find the features of Check Point Quantum Force (NGFW) very valuable because it offers strong security that uses AI to stop almost all cyber security threats, including new and unknown ones, while delivering super fast performance, being easy to manage, and highly reliable.

The AI aspect of Check Point Quantum Force (NGFW) helps in my daily work by recognizing patterns of attack, even new and unknown ones, and blocking them in real time. It studies global attack data and gets better at detecting future threats.

Check Point Quantum Force (NGFW) has positively impacted my organization by providing an easy-to-use Smart Console interface that is clean, fast, and easy. The system allows management of all policies, logs, and alerts, and for troubleshooting, the logs show exactly what was blocked and why.

The network security team spends less time solving issues because the system provides clear and detailed visibility into what happened, what was blocked, why, and by which security layer. This helps the team troubleshoot quickly and get back to more important tasks.

Improvements could be made in areas such as user interface and dashboard, reporting and customization, complexity, support and stability issues, as well as license and pricing. A unified dashboard console where all features, from firewall rules to threat logs, can be managed seamlessly would be beneficial.

The stability issues involve the need for improvement in firmware or software to reduce bugs and enhance support SLA.

Support needs to show greater consistency and speed, especially in the area of non-enterprise clients or smaller customers. Improving the escalation procedure with timely follow-ups is also necessary.

I have been using Check Point Quantum Force (NGFW) for around one year.

In my experience, Check Point Quantum Force (NGFW) has been stable with no issues related to crashes or downtime.

Check Point Quantum Force (NGFW) handles increased workloads or more users easily, demonstrating good scalability.

Customer support has been available through phone, email, or online portal ticket, and I have had to contact them. I would rate the customer support as a ten.

Positive

I did not previously use a different solution.

I have seen a return on investment by saving time on manual log checks and unclear threats. After using Smart Console, which provides clear visibility, my team is estimated to save five to ten hours per week in reporting.

My experience with pricing, setup cost, and licensing is straightforward without any challenges.

Before choosing Check Point Quantum Force (NGFW), I evaluated Fortinet among other options.

I rated Check Point Quantum Force (NGFW) a nine out of ten because it represents top security, high performance, and unity, but it loses one point due to support being hit or miss, confusing licensing, a challenging user interface or learning curve, and possibly high pricing.

Our company has a business relationship with the vendor as we are a partner. I was not offered a gift card or incentive for this review. I found this interview to be very good and have no suggestions for changes in the future.

On-premises

We use Check Point NGFW for enterprise firewalling, VPN, data loss prevention (DLP), user authentication, and zero-trust connectivity. All the functions of Check Point NGFW are utilized.

The most valuable features in my experience include perimeter firewalling, cloud and mobile security, application control, URL filtering, DLP, threat prevention, intrusion protection, and safeguarding against malware, botnets, and zero-day attacks. Check Point NGFW's multi-layered security architecture enhances data protection strategies by unifying security management, which is crucial in environments with too many separate products. The application and identity-based inspection are critical for understanding the data packets within the network.

The primary area for improvement would be the configuration process. While Check Point NGFW is not inherently difficult to configure, it might be intimidating for newcomers. Other products, like FortiGate, are perceived as more intuitive because they are easier to configure from the start. This has led to a perception that may affect market share.

I have been working with Check Point NGFW for many years, probably around ten years.

I have encountered stability issues primarily with VPN, which required a code upgrade. However, overall stability is high, and I rate it a nine out of ten.

Check Point NGFW is quite scalable. I have used units that never exceeded their capacity. If specified correctly, even the smaller boxes offer high session and bandwidth rates, making the solution highly scalable, even up to telco-level requirements.

My experience with Check Point's technical support has been positive, especially during setup processes. Even challenging issues like those with VPNs have been resolved efficiently with their help.

Positive

The initial setup of Check Point NGFW can be daunting for new users, but once you understand it, the setup is straightforward. For me, it's an eight out of ten in terms of ease of the initial setup.

The perception is that Check Point NGFW is expensive, especially when all software modules are included. For larger enterprises with comprehensive service requirements, it is reasonably priced. However, in the medium-sized business market, it can be seen as expensive, leading to switches to alternatives like Fortinet.

I rate Check Point NGFW an eight out of ten. It's a solid solution, particularly for large enterprise businesses, especially in banking and government, where there is always a need to diversify between different products. The overall product rating I would give is an eight.

On-premises