The solution is a core operating system, and we use it for threat intelligence.
Check Point CloudGuard Network Security
Check Point Software Technologies | R82-777.1869Linux/Unix, Other Gaia 3.10 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
A strong cloud security platform that has protected us against zero-day attacks
What is our primary use case?
How has it helped my organization?
CloudGuard has a better catch rate with respect to any attack which is happening. We once faced an attack in a customer's environment on one of our data centers, and Check Point Firewall blocked that attack. The solution's performance is on the higher side.
What is most valuable?
The feature most valuable to me is the NDTX blade that Check Point provides, and I like how the solution is not vulnerable. We haven't had any vulnerabilities in Check Point in the last six months, which is a plus point because the OS Check Point provides is hardened enough that it's not vulnerable to the newer issues, so the network security solution is given in a proper way. These features are an advantage for our customers.
The solution is easy to use once deployed if the administrators have a basic understanding of firewalling. Administrators just have to check the traffic passing through the solution, which will log the traffic properly. And if anything gets dropped, the solution will showcase that to you. The management server Check Point uses is a gold standard.
What needs improvement?
Check Point CloudGuard is not a feature-centric product because Check Point concentrates on security. For example, if a customer asks for reporting, it might not be available, like a bandwidth report. At most, the reports are given with respect to security, not infrastructure.
For how long have I used the solution?
I've used CloudGuard for the last three years.
What do I think about the scalability of the solution?
We have more than 50 customers.
How are customer service and support?
Customer support needs to think about what the customer is talking about. They need to improve on that.
How was the initial setup?
CloudGuard is not a plug-and-play product and requires proper technical knowledge to deploy it. You need the help of a proper professional to deploy it. Deployment hardly takes four hours, but that's only if you know what you're doing. You need to plan the deployment with respect to AWS. You have to know what exactly the customers have deployed in AWS or Azure, or any cloud solution, and based on the review, you need to do their architecture before you can start the deployment. The first step, then, is to understand the customer's data because everything is on a template when it comes to the cloud. You should understand which template you need to use on any cloud. It is impossible to deploy if you're not aware of the customer's environment and how the cloud infrastructure is made. After selecting the proper template, you have to do the implementation. The implementation will go smoothly if you understand the customer's requirements and infrastructure.
What's my experience with pricing, setup cost, and licensing?
I would not say Check Point is very expensive, but when customers compare it with Sophos or any other products, the price is on the higher side.
Which other solutions did I evaluate?
In terms of features, FortiGate has more features in terms of routing.
What other advice do I have?
Our customers use Check Point solutions both on-premise and on the cloud.
Check Point's research and development happening in terms of threat intelligence is better than its competitors, and Check Point's vulnerabilities are fewer. Check Point CloudGuard Network Security has proper security in place with respect to the vulnerabilities. They do not have any vulnerabilities right now. And the research and development happening on Check Point is on the higher side. Most zero-day attacks are protected against. Customers should go for Check Point because of these two points.
If a customer wants FortiGate instead, it's all about whether they can map the budget with Check Point or any other security solution. I cannot compare Check Point and FortiGate, though, because each has its own market.
I rate Check Point CloudGuard Network Security a nine out of ten.
Which deployment model are you using for this solution?
An easy-to-navigate tool useful for filtering internet traffic that needs to improve its deployment speed
What is our primary use case?
In my company, we use the solution just to secure my AWS Network Insights and inside production. We use it for security purposes.
What is most valuable?
With the solution, we just need to filter the traffic coming from the internet and Direct Connect. So it filters the traffic, basically. It permits access. In short, it just filters the traffic and permits the traffic. The aforementioned details are the purposes for which we use the tool.
What needs improvement?
We use the tool as a basic firewall. It's a technical firewall. As a technical firewall, we use SmartConsole or Check Point Firewall.
The deployment phase takes too much time. I would like the deployment to be faster.
For how long have I used the solution?
I have been using Check Point CloudGuard Network Security for two and a half years. We are using Check Point R80.10 SmartConsole in our organization.
What do I think about the stability of the solution?
Stability-wise, I rate the solution a seven out of ten since it takes too much time for deployment. However, it is flexible since we used to push the policy normally. It takes hardly ten seconds to install the policy. It's much easier.
What do I think about the scalability of the solution?
I have been using the solution in my company for the last year. Other than the employees in my company, more than 25,000 users are using the solution hosted on AWS.
Basically, the application, which is hosted, is used internally. It's the same user account because it's not exposed anywhere on the internet. If anyone wants to access the solution from the internet, the traffic comes from Direct Connect, and from Direct Connect, it goes to AWS.
How was the initial setup?
The initial setup was not much complex. The setup phase was good enough to be able to navigate through it.
It took a long time to deploy it. We need to run this on EC2 instances, so it took almost two hours to deploy the solution. After deploying the solution slowly, and gradually, we have to push the policy on the firewall. It takes time to deploy, but it's a stable one.
The solution is deployed on the cloud. It's a software we install in EC2 instances on AWS, which we use as a firewall.
We currently have six to seven resources managing the deployments and maintenance.
What about the implementation team?
During deployment, we took technical help from Check Point.
What other advice do I have?
It is a good-to-use tool that is also flexible.
Overall, I rate the solution a seven out of ten.
The solution has good threat emulation, threat extraction, and reporting features
What is most valuable?
Check Point CloudGuard Network Security has a beautiful threat emulation different from the market. They have a threat extraction feature. The solution's zero phishing feature is pretty much commendable. The solution has one of the best reporting any vendor has in network security. The solution also has a CSPM or posture management tool inbuilt into CGNS or network security.
What needs improvement?
The solution’s technical support, DNS security and training could be improved. Check Point CloudGuard Network Security's training and reachability to the customer can be done a bit better. One recommendation from my side is that the handover of the tasks can be a bit better. If an engineer is on a ticket and their shift gets over, the smooth handshake between the two engineers can be a bit better.
For how long have I used the solution?
I have been using Check Point CloudGuard Network Security for more than one and a half years.
What do I think about the stability of the solution?
Check Point CloudGuard Network Security is a stable product.
What do I think about the scalability of the solution?
Check Point CloudGuard Network Security is a scalable product. I would recommend the solution to small, medium, and enterprise companies because it has a scalable model. The solution is over the cloud and can be integrated with any company.
Which solution did I use previously and why did I switch?
Previously, I worked with Palo Alto, a direct competitor of Check Point CloudGuard Network Security. CloudGuard Network Security's threat extraction features, reporting features, and threat emulation are better than Palo Alto's. Check Point CloudGuard Network Security is more user-friendly than Palo Alto. On the other hand, Palo Alto has a bit better DNS security than Check Point CloudGuard Network Security.
How was the initial setup?
Check Point CloudGuard Network Security is easy to deploy, and if you are unable to do it, you can get support from the OEM.
What about the implementation team?
The solution's implementation depends on the customer's network scenario and policies. The initial setup doesn't take more than 30 minutes, and the rest can be done later.
What's my experience with pricing, setup cost, and licensing?
Check Point CloudGuard Network Security's pricing is far better than Palo Alto's because Palo Alto is very expensive. Check Point CloudGuard Network Security comes at a price that even a small business can manage to buy, whereas Palo Alto would restrict you to enterprise customers. Check Point CloudGuard Network Security's licensing cost changes from country to country. The solution has different discount models across the globe in regions like Asia and Ireland.
What other advice do I have?
People who want to implement Check Point CloudGuard Network Security should focus during the planning phase. If planning is done correctly and the prerequisites are matched perfectly, they won't face any challenges during deployment. But it's very important to check the prerequisites' limitations.
Overall, I rate Check Point CloudGuard Network Security nine and a half out of ten.
Awesome security with an awesome cloud guard experience.
Secure Your Network with CloudGuard
CloudGuard Network Security with the advantages of Gateway Load Balancer
Review of Cloud Guard Network Security
Excellent Product
Review on CloudGuard Network Security for gateway load balancerIt helps to
Fair price, good support, and effective for security and operational efficiency
What is our primary use case?
We use it for network protection. We're using its latest version.
How has it helped my organization?
We're benefiting from the solution. We're protecting all of our assets with it. It's a very good security solution. We don't face any big challenges or problems.
What is most valuable?
Security effectiveness is the most valuable feature. Operational efficiency, reporting, and support are also good.
What needs improvement?
The SD-WAN could be better.
For how long have I used the solution?
I have been using this solution for more than ten years.
How are customer service and support?
Their support is very good. I'd rate them an eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We have been using the same solution from the beginning.
How was the initial setup?
The initial setup is very easy. It took two to four hours.
We have a hybrid cloud deployment. We have Azure and AWS.
What about the implementation team?
We used an integrator. Our experience with them wasn't great.
What was our ROI?
We've seen an ROI with this solution.
What's my experience with pricing, setup cost, and licensing?
It's not very expensive. It isn't very cheap either. Its price is okay. It depends on how much money you have. It might be expensive for some companies.
Its licensing is on a yearly basis.
Which other solutions did I evaluate?
We evaluated solutions from Forcepoint, Cisco, and Fortinet. We went for it because of its security effectiveness and operational efficiency.
What other advice do I have?
It's the best solution to use. You can trust it. We don't have any issues with it. It works fine.
Overall, I'd rate it a ten out of ten.