TrustRadius: an HG Insights company

Harmony SASE

Score9.2 out of 10

17 Reviews and Ratings

What is Harmony SASE?

Check Point Harmony SASE, based on Perimeter 81 which was acquired by Check Point in late 2023, is designed to simplify secure network, cloud and application access for the modern and distributed workforce.

Read more details.

Videos

Top Performing Features

  • Secure Web Gateways

    Provides user protection from malicious web-based attacks while implementing company-approved use policies.

    Category average: 9

  • Segmentation Leveraging

    The ability to reduce the impact of an external attack by restricting the access of specified accounts, applications, or services during an attack.

    Category average: 8.7

  • Network Data Encryption

    Encrypting data so that only the network users with the proper privileges may see and access the data.

    Category average: 8.9

Areas for Improvement

  • Network Analytics

    Analyzes various data reports and logs (DNS, firewall, user data, security information etc.) to identify threats in a network.

    Category average: 8.6

  • Automated Alerts and Reporting

    Systems in place to automatically alert, report, or notify of issues that may need timely remediation.

    Category average: 8.1

  • Network Traffic Analysis

    Software that monitors network traffic and provides detailed reports on the users who access the network.

    Category average: 8.8

Who Buys & Uses Check Point Harmony SASE

Simplifying Secure Remote Access.

Use Cases and Deployment Scope

Check Point Harmony SASE is our enterprise VPN and secure remote access platform. It is being used by client-facing business units that require access to client-restricted systems, applications, and corporate resources. The VPN solution is deployed to both corporate-managed endpoints and bring-your-own-devices (BYODs). Most use cases require traffic to originate from trusted networks or approved geographic locations. The product also addresses cost-effectiveness concerns from previous VPN solutions.

Pros

  • Integration with Microsoft Entra ID for group-based provisioning is one of the key reasons Harmony SASE is a good product. We can control access to the app and particular gateways using our existing Entra security groups.
  • Check Point Harmony SASE is built around Zero Trust access. It boasts features like device posture validation, automatic app updates, and network segregation.
  • The centralized administration that Harmony SASE offers simplifies management for IT admins.

Cons

  • Harmony SASE can use some improvement in reporting. While general reports are available in the dashboard, it lacks additional details and flexibility to capture insights on user adoption, bandwidth utilization, etc.
  • The app lacks visibility into failures, errors, and network diagnostics, which would allow IT and network professionals to conduct their own investigation and troubleshooting. While their support has a good grasp of this, having these capabilities will allow organizations to take action on their own rather than waiting for support during issues and outages.
  • Expanding the platform's global presence, like adding gateways in different countries, is not a use case for us right now. They have a presence in most geographic locations we need, but I can imagine bigger companies needing other locations.

Return on Investment

  • One of the biggest benefits of switching to Check Point Harmony SASE was the pricing model. Our previous VPN solution is usage-based and billed on the amount of network traffic, while Harmony SASE has a per-user license.
  • We also benefited from simplified network architecture. Check Point Harmony SASE takes care of everything; we just need to select a location. Previously, we had to design and architect our VPN infrastructure, a task that required technical expertise.
  • Our organization leverages Harmony SASE's VPN solution allows us to meet our client-specific requirements. It enables remote work and removes the requirement for a physical office.

Usability

Alternatives Considered

Azure VPN Gateway and Island

Other Software Used

Island

SASE for any size customer.

Use Cases and Deployment Scope

We needed a user-friendly solution for clients who do not have a VPN or centralized network and need to ensure their remote workers maintain a secure connection. Check Point Harmony SASE provides a budget-friendly solution that can easily scale as customers grow. We use the product for businesses as small as a single-user, nonprofits, and 25+ user businesses.

Pros

  • SSL Inspection.
  • SSO Integration.
  • Secure Internet.
  • Segmented Gateways.

Cons

  • Clearer notifications for users not signed-in.
  • Agent health notifications for admins.
  • Custom DNS Filtering.

Return on Investment

  • No hardware required to get started, so customers are less reluctant to implement.
  • Low price point overcomes the barrier to entry for smaller customers.
  • Reliable and quick support keeps the burden off of our helpdesk team.

Usability

Alternatives Considered

NordLayer

Other Software Used

Huntress, DNSFilter, NinjaOne

Secure access with a minimum of hassle.

Use Cases and Deployment Scope

When we transitioned to fully remote and decommissioned all on-prem servers, we needed a solution that would allow remote non-technical staff to easily access a variety of resources across multiple Azure tenants. We required a product that would facilitate very high security while maintaining a very simple user experience. After investigating options and trying a few other products/solutions, it became apparent that Harmony SASE was the perfect solution. Deployment was quick and easy, and the cost is nominal.

Pros

  • Secure access.
  • Multiple Azure tenant accessibility within a single login.
  • Ease of deployment.

Cons

  • Occasional disconnects.
  • A few unexplained outages.

Return on Investment

  • Trivial supper requirement.
  • Facilitates secure remote work in accordance with various international standards.

Usability

Alternatives Considered

OpenVPN Access Server

Other Software Used

Microsoft 365, Microsoft SQL Server, Microsoft Azure

Secure network access for remote teams

Use Cases and Deployment Scope

Perimeter81 provides us with a secure network to connect our team members to, primarily from remote based locations, allowing us to tunnel securely into other cloud services or lock down access to web services to a specific static IP (provided by Perimeter81). We use the Perimeter81 agent on a mixture of Windows, Mac and Linux endpoints, which then allows us to connect to one of the secure networks we've setup - it's easy to setup for new starters.

Pros

  • Administration of network / tunnels is straight forward
  • Easy to install for new starters
  • Support for a mixture of operating systems

Cons

  • Automatic agent upgrades - sometimes these fail and require a manual update

Most Important Features

  • Secure network / VPN
  • Support for linux (many providers only support Windows and OS X)
  • Simple agent deployment

Return on Investment

  • Decreased the amount of time spent on VPN maintenance
  • Sped up the onboarding of new starters

Much better in 2022, Helpdesk 100% better

Use Cases and Deployment Scope

We use it for worldwide VPN networks and to help authenticate our employees logging into several different applications. The service allows you to segment to dial in via various regions around the world. They help with a delay in speeds etc. I only use it when I need to log in to corporate databases and systems that require I use our VPN.

Pros

  • Simple easy to read icon.
  • You can hover over and see if you are logged in via the systems tray on your computer.
  • Easy to switch between regions around the world.

Cons

  • Customer support was lacking before, now seems better.
  • Had much difficulty using Chrome as my browser to install the app.
  • Increase the throughput speeds at time would be nicer.

Most Important Features

  • Worldwide coverage.
  • Ability to switch to different regions.
  • One bill for the whole organization.

Return on Investment

  • I think it is just a cost of doing business.
  • I don't think the cost is too prohibitive.
  • We also use it as an example of what a small cost can provide big protection for your security.

Other Software Used

HubSpot CRM, Zoom, Slack