Check Point WAF (formerly CloudGuard WAF) Reviews

We have tried to find and solve problems when developing applications, encouraging each one of our developers to comply with security standards worldwide based on the best practices published so that each one promotes and exposes a robust line of security. Based on this need to achieve the best security guidelines and try to make the development exponents easy, fast, and scalable, we sought solutions for the company. 

This solution has come to generate the baseline of the steps that must be followed to have analysis as well as a robust and perfect development of each of the applications that we are going to put into production. It is giving us a view of the code that is being used. With this visibility, we are achieving standardization of use, development, and production for each of the applications that are being developed in the different innovation groups that we have within the organization. This approach allows us to move faster when establishing lines of security. 

Its fastest and most outstanding characteristic is ensuring a development line that will not lead to applying applications or code development. In the past, people attempted development, leading to bad practices due to ignorance. This is where the solution gives us the possibility of being better, more efficient, and faster. We can test the levels of complexity and protection based on the development, the baseline of the step-by-step recommendations. 

We need to have many of the baselines or development guides providing less complex writing or development. We need to be able to add in the different languages ​​in Latin America. It needs to be multilingual and include languages from our region. One of the agencies promotes, for example, Latino development. 

Other than that, the solution is quite fast. It is scalable and does not need a lot of equipment. Based on the SAS trends, it is seen as important to understand and adopt these types of solutions. 

I've used the solution for one year.

Check Point CloudGuard Application Security is one of the most robust tools on the market. For that reason, we decided to implement it in our company. All our operations were migrated to the Azure cloud area, where we maintain a large part of our load. 

We needed a tool that offered us the security of keeping all assets safe. The APIs that we have integrated into our systems could also provide protection and restrict all malware attacks in our environment, preventing us from dealing with all kinds of vulnerabilities.

Check Point CloudGuard Application Security strengthened the security in our company and helped the IT department achieve excellent security across the network. 

We also found that the tool had an excellent integration with the Azure cloud, which is the main reason as to why we chose it.

It's also helped us a lot to ease security on remote workloads, as we have several of our employees in hybrid roles. 

It helps us streamline our revenue streams, and we're spending less money on application security.

The tool presents several valuable features in the security of applications and devices.

The product can be tested for free for a few days or months.

It improves the security of systems and APIs through the prevention of vulnerabilities that it manages.

The configuration and installation of the tool are very simple.

It helped us to gain an economic return since it helped us to minimize expenses in administrative areas. This is something that the corporate area of the company liked, as they are always looking for ways to save money and reduce budgets.

The tool works perfectly, and improvements should be made, if any, in various technical and administrative aspects.

They have to improve the login functionality. At present, some slowness is experienced at the time of entering.

Profiling takes a long time. they need to to minimize steps and wait times.

The documentation of each of the tools that they offer needs to be better. They should create a repository where we can find everything. They should also improve the quality of technical support that they offer since that has been one of the lowest points that we have found in their offering.

The product was implemented approximately one year ago.

The stability of the tool is excellent, and it is very robust, providing us with peace of mind.

The solution maintains excellent scalability and is very functional.

The experience with support has not been good. We have already had several escalations since problems do not resolve quickly.

Positive

Previously we had Fortinet. We changed when the technology became very outdated.

The first setup is done with a platform engineer, and the process was very easy.

The implementation was done internally. The first phase was handled by an engineer from the provider.

It is always good to make an excellent investment in security. Companies that do this will be profitable in the future.

The tool does have a high cost compared to others on the market. However, it has more features.

We did not evaluate other options since we had Check Point tools. What we did was update and configure pre-existing solutions to use in the cloud.

This is an excellent tool that provides secure connections.

There is a great improvement in the security of the organization. Our assets and infrastructure are enhanced by Check Point CloudGuard Code Security. It shields the organization against exposed API keys and confidential credentials against ransomware attacks. 

It uncovers hidden hiccups in the coding system that can affect our workflow and production ecosystem. Uncovering security blindspots has enabled sectors across the enterprise to plan and set security measures that cannot be compromised easily. 

This product scans the application configurations to enhance compliance.

This application has safeguarded the company from the exposure of data and confidential files. It has given us an opportunity to create cloud computing systems that have replaced manual processes. 

The automated system has enabled the coding team to create robust applications that can be configured efficiently with other applications. Check Point CloudGuard Code Security accelerates code deployment infrastructure to help the company become faster and more productive. 

It has enabled us to plan for available IT resources and allocate efficient time for task implementation.

The data center security system has provided real-time analytics on performance and data configuration processes. 

The threat detection system has advanced our research and coding practices. The platform has prevented secret leaks that occur mostly due to human error and weak security firewalls. 

CloudGuard Code Security has enabled the company to come up with suitable policies and enforce them to enhance the smooth running of programs. 

Data virtualization enables each member to view the hidden sensitive data and control workflows.

The application configuration process is simple, and it cannot be affected by external factors. 

Poor data interpretation during the scanning process can lead to poor decision-making and affect lead to insecurity. This platform has advanced data security and enhanced compliance. 

There is progressive growth and few cases of attacks across the enterprise. This software has safeguarded assets and built secure and reliable infrastructure. 

We have managed to uphold the company and set standard policies during the entire software development lifecycle. 

I am satisfied with the performance and results enhanced by this product since we deployed it.

I've used the solution for 17 months.

Check Point CloudGuard Code Security is stable and highly effective.

I am impressed by the scalability and general performance of this product.

The customer support staff is reliable and always proactive.

Positive

I have only engaged with this solution.

The initial setup was efficient and straightforward.

The vendor team helped us set up the system.

We have witnessed an increased ROI - from 35% to 55%.

The setup cost is suitable for SMEs.

I have not used other similar applications.

The set goals on the performance contract have been achieved.

Check Point CloudGuard Application Security is the one-stop solution for the security of applications and providing API protection to servers and facilities 24/7. 

The security of API integrations is the need of the hour for all kinds of businesses. All the workloads and cloud servers are singularly managed through a unified security mechanism, which ensures round-the-clock protection of applications and servers from endpoints and malware threats.

For our organization, it plays a critical role in easy deployment and API integration with all kinds of cloud servers and platforms of external stakeholders.

It has provided 24/7 security to our servers on-premise and works remotely for our remote workforce and workloads. 

It offers all-around protection from malware attacks and endpoints and has helped us to bring more compliance in the organization and also ensure that no slips ups happened on aspects of security for servers and cloud systems integrated pan country with different external stakeholders system. 

It helps to bring confidence in clients, and there is better retention of business for a longer period of time.

Also, it helps us to streamline our revenue streams, and comparatively, we are burning less money on application security now. 

The best features for ensuring application and cloud servers security are:

1. High-grade and extremely advanced security features like Intrusion Prevention System (IPS) for restricting entry of potential ransomware into the system and server.

2. They offer free trials, which is quite appreciative and grabs more attention from new users and businesses.

3. Security enhancement of systems and servers through "bot prevention" is amazing and worth using to ensure end-to-end security of applications.

4. The easy deployment and flexible customizations as per user and market requirements are worth adding to our systems.

I advise proactive threat detection intelligence offline, which can also help monitor and ensure system checks and compliances are in place. At present, we require a lot of customization and additional features to make it usable in our system.

The additional customization features are costing us huge, which is why we are a bit hesitant in doing fast, rapid customizations as it's quite dynamic, and features might change in the next six months due to the huge level of tech advancement in the cloud application security environment.

The cost should be minimal so that every business can use the offerings without any hesitation, and it does not become a burden for anyone.

I've spent almost nine months with this software.

The solution offers stable services.

It is highly scalable across different work environments.

An internal security solution was being used previously and it was locally managed by a third party.

The solution is straightforward to set up and easygoing throughout.

We implemented through vendor services only as that's the only permissible mode for our organization as per our internal compliance and approved processes.

We've seen an ROI of close to 90%.

I would strongly recommend all IT workforce and IT organizations try Check Point Cloud Guard Application Security. It is one of the best solution providers and is highly dependable and credible in terms of the way they operate and its professional commitment. It's amazing to work with them as they never disappoint you and you will have the best customer experience ever.

We evaluated quite a lot of options. We looked into Qualys Cloud Platform, Trend Micro Security, Onapsis, etc. 

Try their solution and experience the utilities and service offerings yourself. This will give you first-hand exposure and experience and will result in longer customer satisfaction.

With CloudGuard WAF, I can deploy a cloud-based network protection solution that secures my applications, endpoints, and data.

The features I have found most valuable are the comprehensive threat prevention capabilities, automated policy management, and seamless integration with cloud environments.

For the next release, I would suggest considering features like enhanced threat intelligence integration.

I have been using Check Point CloudGuard WAF for about two years.

The stability of the product has been good so far.

Check Point's technical support is helpful and knowledgeable overall, but there can be delays in response, especially regarding licensing issues.

The main reasons I chose this vendor for web application security were their ability to consolidate management facilities, their comprehensive features, and their flexibility in addressing different security needs.

We have seen ROI from using CloudGuard WAF.

I believe that the pricing or licensing of CloudGuard WAF could be more competitive.

Implementing CloudGuard WAF allowed me to address the challenges of securing my applications and data in a rapidly evolving cloud environment.

Using CloudGuard WAF has brought significant benefits, including improved threat protection, streamlined policy management, and enhanced usability. I noticed these advantages shortly after the first deployment.

It is extremely important to me that CloudGuard optimizes security to protect my applications without solely relying on signatures.

To access the false positive rate, I typically review assessment reports available on platforms like AWS or Azure. By evaluating how effectively the solution preemptively blocks zero-day attacks and minimizes false positives, I can reduce the total cost of ownership for my web application security.

The solution's privacy features, user-friendly web console, virtual deployment options, and physical appliance capabilities have all contributed to reducing my total cost of ownership.

Overall, I would rate CloudGuard WAF as an eight out of ten.

We use AppSec. The primary use case was for our client's app. We did a successful project with the biggest university in Mexico. It was a big survey for all the former students. There were thousands of them, and it needed to be completed based on some specifications from the security team.

The service was available for the client on time. They had a go-to-market or a due date to start sending the app to various students to apply. We were there 24/7 hoping and waiting for everything to be fine, and it worked perfectly and smoothly.

The client was very happy with the performance of Check Point on this project. When comparing it with Imperva, we strongly feel that the formula that Check Point delivers on WAF was what the client needed.

Check Point CloudGuard works perfectly for preemptively blocking Zero Day attacks and detecting hidden anomalies. Check Point is all about prevention. We strongly believe that if you want to prevent threats, Check Point is the one. There is no one else.

There are two main features. The first valuable feature is that it is not a complex process to get it up and running. It was not complex at all. We were in a close relationship with the team that developed the app, and it worked in a few hours.

The second valuable feature is the information that comes out of it. With the dashboard or the information that came from it, we made some executive reports for the client. They were very happy with it.

I do not know if it is already there, but I would like to have complete visibility between the posture management and firewall as a service. I would like the complete visibility of every product for the client to see in an executive way. I do not want it in a very complex way with so many warnings and threats. They should focus on the main things in all the products. I would like to see that.

We started using it six months ago.

Its stability is perfect. We have had no issues.

It is made for scalability. We have no issues on the matter. 

Check Point helped us a lot with the project. We interacted with Check Point engineers. They knew it was our first project, and we came across as one strong team in front of the client. I would rate their customer service and support a ten out of ten.

Positive

The client had Imperva, but for this project, they used Check Point. They have some current contracts and some expiration dates. We are hoping to have more deals with them.

They went for this solution for multiple reasons. The first reason was our service as a partner. The client needed somebody to handle the solution. They are not specialists in handling WAF or security. The second reason was that Check Point has authority over security. We were not delivering a solution that was new in the market. We were not an underdog. The third reason was that when we did the workshop, not a POV, the client saw that the solution was intuitive. The dashboards were executive. They liked it a lot. It provided visibility to focus on the efforts. It gave a list of all the threats. It was focused on the main ideas and threats.

Check Point CloudGuard WAF can reduce the total cost of ownership for your web application firewall, but in this case, it was not a big deal. 

Our client could see that they can have a great solution that does not cost much more than Imperva.

It is not cheap, but it is worth it. For this project, our channel manager and our territory manager helped us a lot. We got a lot of flexibility on the license. I do not know how much discount there was, but it was big enough to win the opportunity.

For those evaluating WAF solutions, there are so many options, but I would recommend relying on a company like Check Point that has a great ecosystem. Their solutions are not only made for the cloud. They also have specialization in all types of security. With their AI and ThreatCloud, you have information about what is happening in the security world. The information that they provide is very useful, so rely on a company that is big enough to provide the security that you deserve.

In this project, there were a lot of technical issues that we had to manage through our engineers. It was our first project and the interaction with the development teams was important. It was very important to get the due dates and stay on track. For a successful project, you need to have a close interaction with the client, especially if the client is not a specialist in security. Check Point also helped us a lot with this project.

Overall, I would rate Check Point CloudGuard WAF a ten out of ten.

Our primary use case involves protecting our internal services hosted within our data center's cloud environment, which includes virtual machines housing critical company resources. Additionally, we safeguard external services used by our customers with Check Point security measures.

The benefits derived from utilizing Check Point solutions for achieving our security objectives primarily lie in bolstering threat prevention and network security measures. This includes safeguarding against various threats, such as vulnerabilities and potential attacks.

It offers robust security capabilities spanning multiple cloud environments, which is highly beneficial. The platform is user-friendly, especially with its multi-domain solution.

We have a strong sense of security assurance when utilizing CloudGuard, as it consistently delivers outstanding protection capabilities.

The most critical features for me revolve around security, as I primarily focus on network engineering.

The enhancements are needed in the logging system and log management processes. Additionally, we encounter issues with geolocation functionality, which is crucial for enforcing access restrictions based on location. While we heavily rely on this feature, it occasionally fails to function correctly, posing challenges to our security measures.

I have been using it for two years.

It provides excellent stability capabilities.

In terms of scalability, our infrastructure comprises a private cloud with eight hundred servers and a public cloud serving our customers. Within this setup, we manage their database applications, application sites, disaster recovery mechanisms, and all security measures without encountering any issues.

The technical support is satisfactory; they respond promptly, and I am pleased with their service. I would rate it nine out of ten.

Positive

In my previous roles, I've gained experience working with FortiGate and Cisco firewalls, each offering its own set of advantages. FortiGate stands out for its user-friendly configuration interface, yet it faces stability issues in certain regions, particularly with routing tables. Cisco, on the other hand, provides a unified management platform for network configuration, which simplifies tasks for some networks. However, I've found Check Point to be my preferred choice over the past two years due to its exceptional stability. Unlike Cisco, which has been prone to crashes in my experience, Check Point has consistently delivered reliability. While FortiGate is known for its ease of use and Cisco for its complexity, Check Point falls somewhere in the middle in terms of usability. Compared to other vendors, Check Point excels in identifying threats effectively.

We selected CloudGuard due to its stability and because our team has extensive experience with it. We are highly satisfied with it.

Configuration is also simple and not overly complex.

For deployment, our integration with NSX is seamless, quick, and efficient.

We've experienced a positive return on investment with its usage, primarily through time savings attributed to its stability and user-friendly administration. Working with it is straightforward and not overly complicated, allowing us ample time for other tasks.

Renewing licenses is relatively simple, though there is room for further streamlining the process.

Overall, I would rate it eight out of ten.

The solution's strongest point is that you can connect everything to it, giving you a full view of what's connected. If you configure it right, it works perfectly.

You need to know exactly the system. You cannot have someone running the system if they don't have the knowledge to do so.

I've been working with the solution for about a year.

The solution is stable. It doesn't matter which device is running Check Point. The solution works. It has never gone down. I rate the solution's stability a ten out of ten.

My clients are large, but they are not enterprise-sized or small.

I rate the initial setup a five out of ten because it is easy if you have the required knowledge and difficult if you are new to the system. The challenge isn't installing it: "Next, next, next, finish." Even a less knowledgeable person can do that. The challenge is configuring the system. There are a lot of blades in CloudGuard. You need to keep each type of security in your view, except for the Check Point view.

The initial setup is very fast, but you need to pray that the solution does all the work itself.

Other unified platforms like QRadar and Cisco are comparatively easier to use.

You need someone knowledgeable to run the system. Today, with all the technology and everything, the company just wants to buy control and be lazy. "Let Check Point do the work." But this does not happen with Check Point because you need professional eyes. Check Point's price is very low compared to those controlling the system. You have to learn to investigate the solution to work better with it. The knowledge costs more than the system. The solution has a hybrid deployment, and I don't know a company that only chooses one deployment or another.

There is no support available for Check Point. There are things you have to look for, and that's it.

Check Point is the world's first and probably best security company. They might change its face, give it new names, separate into new models, and so on, but in the end, they are the best security company in the world. I rate the solution a ten out of ten.

Currently, our company implements several sites and applications developed in Microsoft Azure. 

However, in the past, we had some vulnerabilities in identities that were used within the development, which allowed us to understand that we needed help to implement the best security practices for others to protect all the development against attackers that could harm us. The tool has helped us improve and implement improvements for our security.                                                                   

Check Point Spectral helps us daily with the development and helps to improve security best practices. It can protect the code and take care of the identities with permissions in the applications.

Additionally, being a cloud environment, they more easily take the attention of attackers and safeguard corporate information and intellectual property.

Its monitoring features, and its ability to improve the best practices of development already implemented or completed for company security, have helped us to be more secure.

This new special security tool for developers was acquired not long ago. However, I can comment that it has very good characteristics, such as:

1- The implementation of this tool for security management and control is very simple. It only requires installing a scanning agent which is responsible for reviewing the code, generating a security assessment, and indicating failures in a very good way.

2- It can validate and improve a large number of code languages, which makes it very interesting for developers in different fields.

3- Real-time data loss prevention is quite good for avoiding vulnerabilities and further damage executed by an attacker.

Being such a new tool in the Check Point security portfolio, it has become a challenge to obtain information on security implementation improvements, for which it would be very good to create more documentation for this tool.

It is difficult to solve problems via support. With very new tools, the service hours are sometimes different from our country, so finding sessions is sometimes hard.

The costs are not transparent. You need a provider so that they can give you more details.

It is a non-centralized environment in Infinity Portal.

In recent months we have tested this solution to protect our developments implemented in Microsoft Azure.

A tool that perfectly complies with security, good practices, and improvements to avoid vulnerabilities.

We have never had a tool for this type of security improvement.

It is vital to have the support of a specialized partner. It will help you to really deliver what you are looking for, help with costs, and, if necessary, offer technical support.

Thanks to our partner and the documentation on the benefits of this tool, we chose to implement it.

Developers definitely created this tool for developers. I would recommend it.

As one of the solutions that we need for protection at the API level, we have found the level of attack detection needed to comply with the internal regulations of the corporation.

It protects both financials and identity searches. It is a new generation of security that can help us seek, implement, and select different brands products for enhanced protection. This is important due to the acceleration and development of many applications. It helps us reduce the risk of vulnerability in productive applications. 

The use of CloudGuard Application Security protects the page and online web services against SQL injection attacks. This prevents attackers from accessing our databases and stealing financial information from customers. These services help identify and fix vulnerabilities in our application and allow us to identify when there is a vulnerability, such as a code injection, and click on the site to see recommendations in order to fix issues before attackers can exploit weaknesses.

The solution offers sophisticated security techniques with unique characteristics that can be particularly valuable for the financial sector, which is where we develop apps. It helps us to guarantee that financial applications are secure, protected, and resistant to attacks, which is essential to maintain trust and reputational power with any client that is subscribed to our services.

Deeper and more transparent integration between Cloud Application Security and analysis monitoring tools could be very valuable - although the solution currently offers integrations with third-party security tools. Still, a deeper integration could provide better visibility of all the threats. It would be ideal if they could be found in real-time, allowing our financial or security team to offer a more effective response to attacks. 

I've used the solution for two years.