Item: CheckPoint
Rating: 9
Author: Verified User

Overall Satisfaction with CheckPoint

Use Cases and Deployment Scope

CheckPoint is the main NGFW of the infrastructure and it provides the scalability for the growth of the services. The management perfectly adapt the correct solutions for most of the network business problems. The log collector helps support to investigate and troubleshoot the problem finding a lot of useful information. Also used as reverse proxy, can forward packet between more than one webserver with correct policy associated.

Pros and Cons

Pros

NAT table
Log collector
Shared layers

Cons

VPN ipsec
VPN ssl
IPS functioning

Return on Investment

Support
Reliability
Easy to use

Usability

the solution offer the most improvement about the usability by management more firewall in the same context or multicontext instead.
The shared database allow to use one object for more than a package target of a cluster or more of gateways firewall. The management remain isolated from traffic pass through the firewall so the disruption is limited at minimum.

Alternatives Considered

Fortinet FortiGate, Cisco Firepower 4100 Series and Palo Alto Networks Next-Generation Firewalls - PA Series

CheckPoint is easier to use, the leader of the NGFW firewall and for the price equal to other competitor. the support for the devices owned is also a good side of the vendor that allow to learn about a lot of information behind the CheckPoint TAC support and PS engineer.

Key Insights

Do you think CheckPoint delivers good value for the price?

Yes

Are you happy with CheckPoint's feature set?

Yes

Did CheckPoint live up to sales and marketing promises?

Yes

Did implementation of CheckPoint go as expected?

Yes

Would you buy CheckPoint again?

Yes

Other Software Used

Fortinet FortiGate, Cisco Firepower 4100 Series, Palo Alto Networks Next-Generation Firewalls - PA Series, pfSense, Endian, Ivanti Secure Unified Client, Cisco ASA 5500-X with FirePOWER Services, Juniper SRX

Likelihood to Recommend

CheckPoint is well suited in the internal network space, behind application delivery controller or just at perimeter of the network infrastructure as Front End NAT firewall. It's also allow the segmentation of network with the public cloud using the VPC inherited for the policy. The scenario less appropriate result the configuration of the IPSEC and SSLvpn policy, too much complex in some case.

Comments

Please log in to join the conversation

CheckPoint for the World