Checkpoint firewall with nice VPN and NGFW features with tricky configuration
This device is being used as a perimeter security device with VPNs connected across multiple clients.
Overview
What is Check Point Quantum Security Gateway?
The Check Point Quantum Security Gateway Next Generation Firewall is a tiered firewall product. The base model includes the core firewall services, and can be upgraded to include anti-bot/virus/spam and sandboxing capabilities.
Recent Reviews
Video Reviews
Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of Check Point Quantum Security Gateway, and make your voice heard!
Product Details
- About
- Tech Details
- FAQs
What is Check Point Quantum Security Gateway?
Check Point Next Generation Firewall is a tiered firewall product. The base product offers IPsec VPN, intrusion prevention, application control, and content awareness in addition to the core firewall. The next tier also provides URL filtering and anti-bot/virus/spam. Finally, SandBlast offer the entire suite of features, plus sandbox capabilities. The NGFW supports hybrid cloud environments and offers additional logging and reporting features.
Check Point Quantum Security Gateway Video
Quantum Security Gateways™ From Check Point
Check Point Quantum Security Gateway Technical Details
| Operating Systems | Unspecified |
|---|---|
| Mobile Application | No |
Frequently Asked Questions
The Check Point Quantum Security Gateway Next Generation Firewall is a tiered firewall product. The base model includes the core firewall services, and can be upgraded to include anti-bot/virus/spam and sandboxing capabilities.
Reviewers rate Policy-based Controls and VPN and Stateful Inspection highest, with a score of 9.
The most common users of Check Point Quantum Security Gateway are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(34)Attribute Ratings
Reviews
(1-5 of 5)Companies can't remove reviews or game the system. Here's why
This device is being used as a perimeter security device with VPNs connected across multiple clients.
- Internal Network Protection from outside network
- VPN connectivity for secure data transmission across multiple vendors
- File download antivirus security
- URL Filtering
- Malicious domains blocking
- Fine tune required in the malicious domains blocking
- Antivirus signatures should be updated in real time
- Network latency can be reduced during high utilization time window
- Perimeter security
- URL Filtering
- Virtual Private Network
90%
9.0
- Reduced attacks on DMZ servers
- Blocked access of malicious destinations hit by internal users
- Complete visibility about what is going and what is coming via internet
In a heterogeneous environment, we wanted to keep multiple vendors for multiple purposes. CP was found very good in handling basic Next generation firewalls features along with handling of VPNs.
Our clients wanted something superior beyond NGFW, NGX Firewalls. We tried to pitch in CheckPoint's product of Quantum Security NGF, and the client asked for a quick demo. The Demo / PoC that we demonstrated was enough to have their buy-in. We went through the deal and the client was happy. FSI clients are generally a tad difficult to deal with, and we are now tasked to manage their INFRA.
Client is having huge Data Centers and was very impressed by this as compared to other CSPs/ on prem solutions like AWS and GCP. They wanted their data to reside mostly on-prem Data Centers. We even found after-sales support much competitive Vs products like F5 and Cisco.
Client is having huge Data Centers and was very impressed by this as compared to other CSPs/ on prem solutions like AWS and GCP. They wanted their data to reside mostly on-prem Data Centers. We even found after-sales support much competitive Vs products like F5 and Cisco.
- Stopping and detecting Day 0 attacks
- Easy troubleshooting/ GUI
- Scalability and speed
- After sales support, NGFW capabilities
- Modular capabilities
- Integration with VMware and NSX products per client requirement
- 3rd Party support product
- Application-aware boxes
- Threat detection capabilities
- Hyperscaling
74%
7.4
- We saved an approx USD $ 750k minimum in a span of only 3 months due to long term planning and migrating from old /legacy platform to Newer CheckPoint Quantum Security Gateways
- Long term plan - To purchase licenses for next 2-3 years planning = expected Savings = 500k - 1000k USD min
- Super easy after sales support / Diamond level equivalent
- Check Point CloudGuard Posture Management (formerly Dome9)
- Best Security meets Ultimate Hardware
- SandBlast Zero Day Protection out of the box
- Modular hardware
- High Performance CPUs
- I believe this has been covered prior - Smooth migration and very minimum downtime for a big FSI client. Our FSI client now also wants to integrate it with other 3rd party vendors which will be a part of Q3 or Q4 this FY
The Check Point Next Generation Firewall provides us with holistic perimeter and endpoint security protection throughout the enterprise. The robust and secure VPN functionality also provides enough confidence to enable a 'work from home' / 'road warrior' culture within the organization. In-depth application control, URL filtering and SSL inspection features also mitigate a significant amount of risk for internal users browsing the internet and hosted services that face the internet. Data loss prevention, compliance, threat emulation, and other blades overall make this a robustly unified platform for the implementation and management of security controls.
- SSL inspection provides more effective mitigation of threat and data leakage with the ability to inspect and analyze encrypted traffic.
- Threat emulation and extraction provides protection against zero-day threats without compromising the data of infected files.
- 'Office mode' VPN provides a seamless connected experience for remotely connected individuals.
- Application control features provide granular restrictions to the type of application traffic than can pass through the network.
- Pricing is not as competitive as the alternatives.
- Perimeter antivirus is not as effective as its competitors
- Steep learning curve and expensive certification paths may impair training paths
91.81818181818181%
9.2
- Lower maintenance and information security management efforts thanks to the centralized console and dashboards
- Improved mitigation of data loss/data leakage thanks to dedicated DLP blades
- Improved productivity thanks to VPN/remote work capabilities
- Improved internet access speeds and prioritization of services through the implementation of the application control blade
- Improved employee productivity thanks to stringent URL filtering controls
While Palo Alto Networks Next Generation Firewalls are priced more competitively against Check Point Products, the overall product has not as stable, effective or intuitive for us during our evaluation period:
- A side by side comparison of traffic logs were done between Palo Alto and Check Point and Check Point was seen to have more concise data;
- The user interface and dashboard is not as intuitive as Check Point
- The product itself may not be as stable as Check Point, as our demo unit crashed during the evaluation period.
Our Check Point Firewall is being used across the organization for all of our internet traffic. All network traffic is backhauled to our corporate location, filtered by the firewall, then out to the internet, and vice versa. The business problem it addresses is to allow certain traffic while blocking others. This is done through both an IDS/IPS, and logging.
- Logging -- Logs are clearly displayed with all information about the packet
- Canned reports -- The reports "out of the box" are pretty nice and give you a lot of detail
- Rule Configuration -- Defining (basic) rules is easy to do, and understandable
- HTTPS Inspection -- The firewall has troubles re-packaging the packet in a way that some websites are able to interpret correctly
- Support -- Even getting support directly from Check Point isn't the easiest of experiences. They are more concerned about how fast they can close a ticket out, rather than fixing the problem.
- Custom reports -- Custom reporting is extremely limited
- Since it is Layer 7 we are able to get down to the application level and block certain applications from even running.
- Since it has an IPS in place we are able to see possible attacks that have been prevented by the firewall
- This helps justify the security department and their metrics since we are able to see things that are prevented.
At the time when we were evaluating Fortinet, it was not a layer 7, while Check Point did offer this. It appears that since then they have created next-gen firewalls as well. The interface of Check Point is a little easier to use (although the interface tends to use a lot of bright pink colors)
4
I represent the Security side of things, as well as my boss. The other 2 people that work with the firewall are network administrators who ensure that packets go through successfully and securely. While they configure a lot of the connectivity, we ensure what types of things should be allowed or blocked.
April 21, 2016
Check Point Firewall Review
We use Check Point Firewall Software Blade for outside facing protection for our hardware in multiple locations throughout the organization. Check Point serves as our primary firewall and our VPN software solution for the company. It is very easy to set up and use Check Point as a solution for VPN access instead of Microsoft VPN. The firewall itself proves to be very effective in managing traffic.
- The management console is very easy to use. There is a lot of information on it which can seem overwhelming, but everything is right there in one page.
- You have the ability to manage certain websites or IP addresses based on web content that is predefined or track individual end users.
- The support for Check Point is excellent. If you are having trouble with the appliance, help is not far away. Techs will stay with you for hours if need be, to resolve any issues.
- Check Point has a complex range of reporting tools, some of which can take time to learn and be comfortable with.
- The firewall is solid and needs to have someone with training to manage it which means any little mistake can bring down the network and have you on the phone with Check Point support.
- They are pricey for some of the hardware and reporting tools.
- Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
- Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
- Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.