Check Point Security Management and Check Point SandBlast Network are both leading solutions in safeguarding digital infrastructures, each excelling in specific categories. Check Point Security Management is preferred for its centralized control over multiple gateways, while SandBlast Network is favored for its advanced threat prevention capabilities.
Features: Check Point Security Management offers centralized log management that enhances efficiency in handling multiple firewalls. The SmartConsole application and intelligent URL filtering simplify management tasks, and Identity Awareness enables user-ID based policy creation, crucial in dynamic work environments. Meanwhile, SandBlast Network's strength is in its threat extraction and emulation, which intercept malicious threats and ensure comprehensive zero-day protection.
Room for Improvement: Check Point Security Management could benefit from client and GUI performance enhancements and simpler policy migration and backup processes. SandBlast Network users highlight the need for improved GUI usability, faster file scanning times, and better third-party integration capabilities. Both products can refine their reporting features and expand file type coverage.
Ease of Deployment and Customer Service: Check Point Security Management supports diverse deployment options, focusing more on on-premises environments while incorporating hybrid and public cloud features. Users face challenges with technical support, particularly outside the U.S. SandBlast Network offers flexible deployment choices for hybrid and cloud systems, aligning with modern IT environments. However, both solutions tend to have moderate ratings for tech support, indicating potential improvements in service responsiveness and consistency.
Pricing and ROI: Although considered costly, Check Point Security Management is seen as a valuable investment due to its seamless integration with infrastructures. Its pricing model allows payment for only necessary features, aiding in cost management. SandBlast Network's pricing is similarly high, but its superior threat prevention capabilities are acknowledged as generating substantial returns on investment by ensuring enhanced security and operational efficiency. Collaborating with knowledgeable partners is advised for effective cost management and system implementation.
Protecting around 2,000 users from cyber threats, including ransomware, has positively impacted the organization's growth by reducing disruptions and business loss.
I have seen both money and time saved as a return on investment.
I have seen a return on investment with Check Point Security Management, as my security concerns regarding data production have been greatly diminished, and my time is also saved.
We have partner support that helps us mitigate vulnerabilities reported by our infrastructure team.
The challenge was with drivers due to the size, and we had not provisioned the partition to the right size.
The scalability of Check Point SandBlast Network meets our organization's needs as we grow.
So far, it has been functioning smoothly without any issues in the past 1.5 years.
In my environment, Check Point Security Management is stable, as I do not see any downtime.
Simplification of granular tuning for false positive reduction and bypassing benign files would benefit non-expert users.
Check Point SandBlast Network can be improved by adding more integration capabilities, such as integration with third-party firewalls, third-party EDR solutions, and SIEM.
Each time this happens, I need to upgrade to the latest version of the firmware, and this frequent updating affects my productivity negatively.
We had to provision the virtual machine twice.
Pricing is a bit costly, but considering the features and security offered by Check Point SandBlast Network, it is reasonable.
Since we are using it extensively, we get significant discounts during procurement.
My experience with pricing, setup costs, and licensing for Check Point Security Management involves a bit of a challenge in pricing, as it is somewhat costlier than previous devices.
The key features of Check Point SandBlast Network include its ability to detect zero-day attacks, provide sandboxing capabilities, and offer real-time protection with threat extraction.
It's effective in meeting the specific needs of customers through deployment and integration.
Check Point Security Management does not operate like that; it shows the mobile device, tablet, smartphone, laptop, and desktop separately so that I can easily find out how many desktops are connected, how many mobile devices are connected, and I can easily block mobile devices and free up the IPs.
We can't work without Check Point because it provides the real visibility needed to manage the environment.
It's already helped secure our organization effectively.
Check Point’s evasion-resistant technology maximizes zero-day protection without compromising business productivity. For the first time, businesses can reduce the risk of unknown attacks by implementing a prevent-first approach. Learn More about Check Point Sandblast
Check Point Security Management is an advanced security management platform for enterprises. The platform integrates all aspects of security. A single platform manages the entire infrastructure, from data centers to private/public cloud deployments.
Check Point Security Management is a reliable and easy-to-use security platform. It integrates all aspects of your security environment to strengthen the security posture without impairing productivity. The system has a layered policy model. This means the security policy can be separated into layers for network segmentation. Different administrators can manage different policies. The policy layer automates the tasks.
The platform is extensible, scalable, and integrates easily with orchestration systems and change management.
Basic Components of the Infrastructure
The smart console offers several advantages. Changes in security policies and logs can be done with a click. You can navigate from an item within a log to the policy. There are also built-in multi-language support and accessibility features.
1. Security Management Server: The server manages security gateways with set security policies and monitors security events on the network.
The automation server is an integrated part of the management server. The API server is active by default on servers with 4 GB of RAM or more and on standalone servers with 8 or more GB of RAM.
The automation server communicates with the management server the same way as the Smart Console. This architecture allows the same validation errors and warnings to be presented when using an automation session.
The same audit logs generated using the Smart Console are also generated using an automation session. If you have a multi-domain environment, there is only one automation server that monitors all the IP addresses of the multi-domain management server.
2. Security Gateway is placed at the edge of the network. It monitors and filters traffic and enforces security policies.
Logging, Event management, and Monitoring
With Check Point Security Management, logging, reporting, event management, and monitoring are integrated. The platform features widgets and chart templates that optimize visibility. One of the best features is the one-click exploration. This simplifies going from a general overview to specific event details.
Benefits of Check Point Security Management
The unified console also means a single policy for users, data, applications, and networks. The granularity control helps accelerate administration processes. This feature, together with automation, is key to achieving reduced operational overhead. Security teams can automate tasks and even create self-service security web portals with the Check Point Security Management platform.
Threat management is fully integrated, with reporting, logging, and monitoring all in one dashboard. This provides full visibility into the security of the network.
Security Management Suite
The Security Management Suite consists of the following modules:
Reviews from Real Users
A Network Security Engineer/Architect at a tech services company says, "The features we like and find the most valuable are the ways we can manage the policy, create objects, and drag and drop objects in our daily operation. It makes our daily operation on the firewall management much easier than going, for example, to one firewall, then going to the other."
"The management API is the best new feature for me. It allows us to further automate our customers' automated server ordering," says a System Engineer Network & Security at OTTO GmbH & Co KG.
A Senior Infrastructure Services Specialist at St.George Bank Limited adds that "The solution is ideal for use and deployment in a large infrastructure environment."
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
