Check Point Harmony SASE, based on Perimeter 81 which was acquired by Check Point in late 2023, is designed to simplify secure network, cloud and application access for the modern and distributed workforce.
$10
per month per user
Zscaler Private Access
Score9.4 out of 10
N/A
Zscaler Private Access™ (ZPA) gives users secure access to private apps and OT devices while enabling zero trust connectivity for workloads.
N/A
Pricing
Harmony SASE
Zscaler Private Access
Editions & Modules
Essentials
$10
per month per user
Premium
$15
per month per user
Premium Plus
$20
per month per user
Enterprise
Custom
No answers on this topic
Offerings
Pricing Offerings
Harmony SASE
Zscaler Private Access
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
Yes
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
+$50 per month per gateway. Discounts available for annual pricing.
We have found that when thoughtfully implemented, Check Point Harmony SASE can be well suited for almost any customer. Smaller customers may not need all the functions of SASE, but they all need a reliable VPN solution when traveling. The platform can be configured for individual tenants, allowing the solution to scale with the client as they grow. As the customer grows, they are already familiar with the agent, so scaling up has less user pushback.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Zscaler Private Access works really well in environments setup for FQDNs and where you know what users should/shouldn't be accessing on what ports. You can use Zscaler Private Access to figure out these kinds of features but that doesn't always mean you'll be correct. It also provides a consistent experience for users as they can access their materials anywhere. It also makes the user the last line of defense. If a user's account is compromised then the attacker has access to everything they already did. It doesn't work great in OT environments or Server based environments. Flows have to be initiated from the client and not the server for stuff to behave properly.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Connecting users remotely with a secure connection. I am a service desk agent who works with end users, and if there is an issue due to ZPA, it's most likely due to configuration. A really good service.
Logging, I believe, works well as I troubleshoot end users and can gather extra details for my network admin. IP.zscaler.com, and the debug logs are nice. Additionally, I like how it shows the App policy assigned to the user's machine ECT.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Harmony SASE can use some improvement in reporting. While general reports are available in the dashboard, it lacks additional details and flexibility to capture insights on user adoption, bandwidth utilization, etc.
The app lacks visibility into failures, errors, and network diagnostics, which would allow IT and network professionals to conduct their own investigation and troubleshooting. While their support has a good grasp of this, having these capabilities will allow organizations to take action on their own rather than waiting for support during issues and outages.
Expanding the platform's global presence, like adding gateways in different countries, is not a use case for us right now. They have a presence in most geographic locations we need, but I can imagine bigger companies needing other locations.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Needs an interface for Support Desk/Help Desk to more easily understand that the problem is a lack of an FQDN or access is not allowed due to policy, not because of a technical shortcoming in ZPA.
Documentation of the BC solution is not well-detailed.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Overall, the product is easy to use, reliable, and can be automated to minimize user input. Occasionally, an agent update will clear the workspace and sign the user out. When this occurs, a member of our helpdesk team is needed to assist the user in signing back in. This is our biggest reason for giving it a 9 out of 10.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The environment feels more secure, and we are seeing that users are adapting to it fast. The fact that we have tools to assist the users with their day-to-day access helps, as we can hand it off to the helpdesk without any escalations to the Network team. It is a work in progress for our agency, but we are seeing the benefits from the solution.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
In the beginning, it was a bit rough getting it to work and getting any kind of quality support from customer service. But recently they really improved their service and customer service. I believe they raise 100M in new funding which provides them the resources to make a better product with better tools and a better help desk.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
ZPA is where the bulk of zero-trust access is found. While the functionality for ZIA is excellent, the policy we implement for internet access is more focused on threat prevention and not narrowly scoped access.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
One of the biggest benefits of switching to Check Point Harmony SASE was the pricing model. Our previous VPN solution is usage-based and billed on the amount of network traffic, while Harmony SASE has a per-user license.
We also benefited from simplified network architecture. Check Point Harmony SASE takes care of everything; we just need to select a location. Previously, we had to design and architect our VPN infrastructure, a task that required technical expertise.
Our organization leverages Harmony SASE's VPN solution allows us to meet our client-specific requirements. It enables remote work and removes the requirement for a physical office.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
We used to get anywhere from 30 to 50 tickets surrounding our previous VPN solution every month. We now average 3-5 tickets regarding remote connectivity, and of those, only 1 or 2 are actual issues with ZPA.
Using ZPA Access Policies, we can now block endpoints that have outdated security software from ever connecting to our environment. This was simply not possible with our previous solution.
Some of our employee base skews older and had a harder time understanding the change from VPN to Zscaler.
There is significantly less downtime with ZPA when compared to other VPN solutions.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
