Sign in Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Check Point Infinity Platform and Services

Check Point Software Technologies

Reviews from AWS customer

5 AWS reviews

External reviews

77 reviews
from and

External reviews are not included in the AWS star rating for the product.


    Mitesh D Patel

Centralizes the management of all our Check Point products in one place and offers robust stability

  • April 18, 2024
  • Review provided by PeerSpot

What is our primary use case?

The Infinity Portal is primarily a management tool. It's a single pane of glass to access and control all our Check Point products from one central location.

I work extensively with the Infinity Portal. It's the central management interface for all our Check Point products.

How has it helped my organization?

It has brought value. For example, a customer already has Check Point solutions in place. Rather than opening a separate console for each product, they can use the Infinity Portal. Just open Infinity, and with a single click, they're redirected to the product they need – email security, Harmony Connect, Harmony Internet Access, for example. It eliminates the need to open multiple interfaces.

It's how we manage products like Harmony Mobile, which enhances our mobile security.

Infinity is a platform. The zero-day protection capabilities would come from the specific products we use within it.

My primary work involves Check Point firewalls and the Harmony product portfolio. We've definitely seen a lot of focus and new business growth in areas like Harmony and Arbor.

What is most valuable?

It's very easy to access and works fine for me. Centralizing the management of all our Check Point products in one place saves our team a ton of time.

Infinity is a platform rather than a specific security feature. It provides a central access point for our purchased Check Point products like Harmony Email, Harmony Connect, Harmony Browser, Harmony VPN, etc.

The unified management console enhances security operations. We manage all our products through a single console instead of needing to open separate interfaces for each one.

What needs improvement?

The updates could be less frequent.

For how long have I used the solution?

I have been using it for six years now.

What do I think about the stability of the solution?

I would rate the stability a ten out of ten. Stability is always important. I haven't faced any issues with the Infinity Portal in the last six or seven years.

What do I think about the scalability of the solution?

There is no need for scalability as it is a ready-made and web-based product that we got from Check Point. Most of our customers use it, for example, firewalls, Harmony product portfolio, and cloud/network security. Most of these customers find the Infinity Portal beneficial because of its convenience.

There are easily over a hundred customers. Customers already using Check Point products are, by default, using the Infinity Portal to access them. Even I use it.

How are customer service and support?

The customer service and support are very good. It is very fast and customer friendly. It has been very friendly.

How was the initial setup?

It's incredibly easy. Once you have a Check Point account, the portal is ready to use. All you need is the URL.

As a cloud-based platform, so, there wasn't easy to difficult. It is a one-minute job. There are no specific requirements for the platform.

One of the benefits is that there's no deployment required for the Infinity Portal itself. It's accessible via a simple URL.

What's my experience with pricing, setup cost, and licensing?

There's no additional license requirement.

What other advice do I have?

Overall, I would rate the solution a ten out of ten. It's reliable, stable, and very easy for anyone to access from anywhere.


    Geraldo Freitas

Offers integration with Active Directory, where you can allow or deny traffic based on users or groups of users from Active Directory

  • April 11, 2024
  • Review from a verified AWS customer

What is our primary use case?

We have main offices in Brazil and branch offices in each of our state capitals. So, we have 26 branch offices in total. Each branch office used to have a small Check Point appliance. We're moving away from that model; they won't access the internet directly anymore. Instead, they'll pass through a central kind of star network.

We use two levels of firewalls: an external firewall and an internal firewall. We have a DMZ between these two firewall clusters with high availability. Each firewall has IPS, web content filtering, bot protection, and antivirus enabled. We'll contract some of those features as part of an MSSP service. We don't buy products or appliances directly.

Our procurement requirements allow other manufacturers to participate. The decision isn't ours or the integrator's – it's how we buy in Brazil. The vendor offering the lowest price for a product that meets the requirements wins. We cannot choose a specific brand or product name.

How has it helped my organization?

Before contracting the MSSP, we had an IPS (I don't remember if it was Check Point). However, we only detected signatures; we weren't confident enough to block them due to false positives. For the past 10 years, we have had a procedure where we get new signatures weekly, test for false positives, and set exclusions. Most relevant signatures are now in use, so the IPS is an important layer of protection for us. So, Check Point Infinity's threat prevention capabilities benefitted our organization.

We haven't had any problems with integration, but we don't need many integrations. The main one is with SIEM. The bigger issue is that we use ArcSight as our SIEM. It's very difficult to migrate from one SIEM solution to another.

We are on the journey of moving to the cloud right now. We had on-premises services, but we are going to move to a cloud environment where we have Azure and AWS Cloud. Because of this, the new solution will have virtual firewalls at the edge of each cloud.

What is most valuable?

I like all the features because within the suite we use, it's sometimes hard to know exactly which features are being used and where they come from.

But, the main feature is the integration with Active Directory, where you can allow or deny traffic based on users or groups of users from Active Directory.

What needs improvement?

We have had some performance issues. Because of this, we had to redirect traffic to be analyzed by other appliances. I'm not sure if higher-end appliances would still have this problem.

We also experienced issues with deploying new configuration versions to all branch appliances, but we won't be using this setup anymore. We don't know exactly how the virtual appliances will work to protect the cloud. It's a new thing for us.

For how long have I used the solution?

I have been using it for 14 years now.

What do I think about the stability of the solution?

I would rate the stability an eight out of ten. We've had some problems in the past.

What do I think about the scalability of the solution?

We had an issue with scalability before. We think the technology changes caused by mobile traffic impacted our appliances. Since we're buying a bigger solution now, I think we won't have this problem this time.

Check Point engineers were involved, and they suggested we use a virtual appliance to remove this traffic from our physical appliance.

How are customer service and support?

We've had some difficult experiences sometimes, such as we have to send again files and information.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

We had another solution a long time ago. It was a small, free solution, very difficult to compare. We've used Check Point for a long time, so it's impossible to make a fair comparison.

We also use Azure Sentinel, but we do not receive logs from security solutions. It's possible we'll migrate to Azure Sentinel in the future. Nowadays, it's difficult to use a SIEM that is local and not cloud-based.

How was the initial setup?

The initial setup will be done by the MSSP provider, not us. They'll handle the appliances, configuration, and integration. When we pay, everything must be working perfectly, and the documentation must be delivered to us.

The first deployment took about nine months because we changed the active tool. The second deployment was a bit different and took about six months. This timeline includes everything: equipment and features, but it also has solutions that aren't exactly Check Point firewalls, like the WAF (Web Application Firewall) or integration with SIEMs—also, the implementation of use cases in the SIEM.

What about the implementation team?

There are two teams involved in the deployment: our team and the supplier's team. Usually, there are three or four people from the supplier and the same number from us.

It's maintained by the supplier. We have an SLA (Service Level Agreement) in place. They install, maintain, and manage the entire solution. We are a user of the solution; we open tickets to them, and they make the configurations. They're also responsible for availability and other aspects.

What other advice do I have?

I would recommend it. However, Check Point could improve its tech support systems. If they had more engineers in Brazil, I think it would be good.

Overall, I would rate the solution a nine out of ten.


    SaiKiran

A solution for testing with high detection rate but lacks EDR features

  • March 29, 2024
  • Review provided by PeerSpot

What is our primary use case?

We use the solution for testing and conducting. For instance, we test this product using open-source samples containing different ransomware tools and another element.

What is most valuable?

The detection rate is good. It also has personal management that provides all the details on one dashboard. Depending upon the requirements, you can customize the dashboard. The visibility part is also very good. It can customised. The reaction rate is good.

What needs improvement?

There is an issue with high agent size, which impacts performance. The EDR part should provide more features.

For how long have I used the solution?

I have been using Check Point Infinity for 6 months.

What do I think about the scalability of the solution?

The solution’s scalability is good but complex to maintain. They need to provide technical training to the partners. Expanding the team to get expertise and hands-on solutions will be easy.

How are customer service and support?

Support is not that much good. Response time is very high. Some issues take a few days to resolve.

How was the initial setup?

The initial setup is neither easy nor complex. Any technical user can quickly deploy it. You need two to three resources to monitor and support the solution for a thousand assets. We use email deployment and data deployment. You don't use manual deployment. It is challenging for multiple users.

What was our ROI?

Check Point is a universal solution with multiple features that customers expect in one product to meet all the requirements.

What's my experience with pricing, setup cost, and licensing?

The product has moderate pricing depending on the devices. The OEM's services are quite high.

What other advice do I have?

We are a cybersecurity company providing solutions for our customers. We tested the Check Point solution, not just as a solution provider but also to assess cybersecurity for Check Point. We tested various products and have found that the Check Point endpoint protection offers multiple capabilities. It covers postal management, DDR capabilities, and many other features, such as cloud assessment and sandboxing in the cloud.

They should have a dedicated team or take services from third-party sources to maintain the solution. They can have this solution for endpoint protection and mobile protection.

We can customize the dashboard to meet our needs. We can tailor the dashboard to display the information we need depending on our requirements.

Overall, I rate the solution a seven out of ten.


    Babu Kp

Has centralized management console but technical support lags

  • February 29, 2024
  • Review provided by PeerSpot

What is most valuable?

The tool's most valuable feature for threat prevention is the encryption alarm.
I find the centralized management console, including the log analyzer and reports in Check Point Infinity, extremely beneficial for enhancing security and operations efficiency in our enterprise. I would rate it a perfect ten out of ten, as it effectively helps us analyze logs, and detect potential attacks.

What needs improvement?

The tool's technical support lags.

For how long have I used the solution?

I have been using the product for six to seven months.

What do I think about the stability of the solution?

I rate the solution's stability a nine out of ten.

What do I think about the scalability of the solution?

I rate the tool's scalability an eight point five out of ten.

Which solution did I use previously and why did I switch?

We used Trend Mico before Check Point Infinity.We currently have approximately 500 endpoints deployed. So far, the system is working seamlessly, and we haven't encountered any security issues. I'm confident in the product's security features. We are currently the documentation, and the support portal has been reliable, providing us with ample resources to troubleshoot any issues.


What's my experience with pricing, setup cost, and licensing?

When it comes to price, the paramount consideration is the strength of the security. If the security measures provided by the product, such as Check Point Infinity, are robust and meet our requirements, price becomes a secondary concern.

What other advice do I have?

For those considering Check Point Infinity, my advice is to gain hands-on experience and acquire a foundational understanding of the product before diving into the implementation process. I rate it a nine out of ten.


    Nuno Faria

Provides robust cybersecurity with a comprehensive suite of features, expert support, and scalable cloud-based architecture, ensuring effective threat detection and continuous improvement

  • January 05, 2024
  • Review provided by PeerSpot

What is our primary use case?

The use case involves managing various aspects, including endpoint security, SaaS interface, and firewall management within the Check Point Infinity architecture. The Infinity portal serves as a centralized hub for overseeing all components of the Check Point security suite. The architecture incorporates XDR and MDR, enabling automatic correlation of information. In scenarios where a security issue arises, the system can automatically analyze data from diverse platforms, such as endpoints, firewalls, and Office 365. T

How has it helped my organization?

It offers significant benefits as a cybersecurity leader, known for pioneering the logical firewall and excelling with its Infinity suite. The expertise of Check Point professionals ensures efficient handling of challenges.

What is most valuable?

I have a positive history with Check Point, having worked with their firewall models since the nineties. A notable aspect that I appreciate is their ongoing effort to redesign the portal, giving it a fresh and centralized appearance. This is particularly significant as the transition from Check Point on-premises solutions to the cloud.

What needs improvement?

I've observed some challenges in terms of usability and performance, particularly since the shift to a service-oriented model like Infinity. It seems that the performance varies, likely influenced by the client's size and the provisioning of resources.

For how long have I used the solution?

We have been using it for several years, and since it was released we have become partners.

What do I think about the stability of the solution?

The stability is influenced by the specific configuration and the capabilities of the machine itself. Currently, I can confidently rate the stability at eight out of ten.

What do I think about the scalability of the solution?

The scalability and power seem to impact the interface quality; larger clients with more resources receive a better interface experience. In cases where clients initially buy licenses for a certain number of machines and later realize they need more, Check Point offers flexibility. Clients can purchase additional licenses even if it's mid-year, without the need to synchronize license renewal dates.

How are customer service and support?

My experiences with Check Point's tech support have been positive. They responded promptly to issues, even conducting a video call for clarification. A licensing complication was swiftly addressed, showing their commitment to resolving bugs.

How was the initial setup?

The initial setup was straightforward.

What about the implementation team?

The deployment time varies depending on the specific machine and its configuration, however, in general, the implementation and installation processes are relatively quick. The deployment process is contingent on the specific configuration and the underlying infrastructure. However, due to our familiarity with the products, deployment is straightforward and typically doesn't extend over days. Instead, it can be accomplished in a matter of hours or even minutes, particularly in smaller cases. The process begins with obtaining the necessary licenses through a purchase order. Once acquired, we seamlessly integrate them into the Check Point dashboard, either through a physical conversion or by utilizing the Infinity portal. Subsequently, if configuration is required, we create the tenant and apply the license to it. From this point onward, the deployment process is quite straightforward and efficient.

What was our ROI?

The price is justified by the security it provides. In a world where security breaches can lead to significant financial losses, the investment in robust cybersecurity solutions is seen as essential. Moreover, the ongoing improvements in the dashboard experience further enhance the overall value proposition of Check Point Infinity, making it a comprehensive and worthwhile security solution for businesses in Portugal.

What's my experience with pricing, setup cost, and licensing?

In Portugal, pricing for security solutions, particularly Check Point, is not a fixed rate. It's determined by factors like the brand's prominence and whether the product is flagged. The flexibility in pricing is advantageous, and being a special partner allows for negotiating special rates based on the project requirements. Unlike services like Office 365, Check Point licenses are not based on users but rather on machines. Clients are required to pay when submitting a purchase order. However, for those interested in trying the product, whether for a Proof of Concept or other purposes, we can facilitate trials. As partners, we have the ability to request trials from Check Point or conduct trials ourselves for one to three months. While trial versions can't be extended, we can release a new license with an additional thirty days, allowing clients to continue testing the product. After the trial period, we can convert the tenants and apply for a full license, enabling clients to choose the desired products for implementation.

What other advice do I have?

Overall, I would rate it nine out of ten.


    Nguyen Ba C.

Lack of Customization Features

  • November 13, 2023
  • Review provided by G2

What do you like best about the product?
SandBlast Threat Emulation is unsecure, against all types of malware. Bugs are not detected through this tool. During downloading delays occurs which affects the efficiency of our work.
What do you dislike about the product?
Dislikes while SandBlast Threat Emulation unable to provide protection, against threats and malware. The documentation process is very Slow. User Interface is confusing for new users.
What problems is the product solving and how is that benefiting you?
In terms of problem solving, SandBlast Threat Emulation detects and blocks malware, which benefits our business by increasing security. Troubleshooting is sometimes difficult. The support team is not quick and not working in resolving any issues.


    Prashanth A.

Threat emulation solution

  • November 12, 2023
  • Review provided by G2

What do you like best about the product?
Sandblast by checkpoint as one of the latest solution for both online and offline threat emulation, features such as cloud and internal network emulation makes the solution easy to use, various connection and handling modes and features to highlight. Implementation of the software is a bliss as mentioned beacuse of online and offline capabilities. Overall a unique and onpar the best sandbox solution which covers the entire threat landscape and portrays all results based on the attack matrix.
What do you dislike about the product?
The configuration and integration requires some level of knowledge assumed the capability of the solution it's not of big concern as customer support is always good
What problems is the product solving and how is that benefiting you?
Sandblast provide unique solution to the emulation or sandbox environment by giving out results in the form of a very aligned representation to the mitre attack matrix, and the capabilities the solution offers are onpar with industry standards and notable features are also provided


    Manish R.

Excellent Threat Emulation Platform

  • November 02, 2023
  • Review provided by G2

What do you like best about the product?
Threat emulation helps to identify comman and advanced malware threats inclusive of software and executable threats which helps to prevent further exploits. Very useful and impactful as an early warning Threat protection system
What do you dislike about the product?
Detection of malicious viruses and other file types is most that we like
What problems is the product solving and how is that benefiting you?
It's providing return on investment and helpful to identify threats


    Aditi A.

Sandblast threat emulation review

  • October 31, 2023
  • Review provided by G2

What do you like best about the product?
I like how it distinguishes the file with malware and good to go files, and you can check the files which are in quarantine as well.
What do you dislike about the product?
Sometimes it sends the good files or emails to quarantine as well.
What problems is the product solving and how is that benefiting you?
It reduces my risk of getting exposed to malware and scans the attachment at a very good speed.


    Michael Mugagga

Easy to deploy with a nice GUI and good AI

  • October 17, 2023
  • Review provided by PeerSpot

What is our primary use case?

We required a first line of defense to protect, monitor, and ensure that no confidential information leaves the internal network. We also required a device that can segment our network so that different subnets like the DMZ, Production network, and testing environments. Threat prevention that required AI and ML capabilities was another reason to acquire the Check Point Quantum Spark NGFW. Finally, it offers an all-in-one solution that was a necessity where the same instance could manage and monitor VPNs, application control, web filtering, intrusion detection, and email security.

How has it helped my organization?

With Check Point Quantum Spark, we have a first line of defense in our environment, seated just after the router that connects to the ISP's endpoint, all traffic entering and leaving the network is monitored, and filtered depending on the different rules created.

The functionality of AI helps further in the threat detection field. This NGFW is able to support a large number of VPN connections and at the same time monitor these connections for any anomaly.

Finally, for any flagged threats, a sandbox functionality is also provided making it even more robust in detecting zero-day attacks.

What is most valuable?

The sandblast threat emulation is great. We are able to visualize the extent of specific threats without necessarily having them deployed in our environment. The Sandbox feature is able to virtualize an environment that can mirror what we have in the internal environment.

The quality of Service for different traffic types is excellent. We are able to prioritize business-critical traffic over other types of traffic like streaming.

Artificial intelligence threat profiling has helped a lot in detecting and protecting the internal network from zero-day, DNS, and DDoS attacks.

What needs improvement?

We'd like to see support for fiber connections. With the growth of the network, we would expect that more and more traffic is going through this device and soon enough, the bottleneck will be the type of connection being used to transfer data to the router and further to the ISP. A throughput of 1GBPS will hinder performance on the network.

Configuring fault tolerance for specific features, for example, power sources would ensure that the chances of the system shutting down due to a power surge are highly limited. This can further increase the SLA to 99.99%

For how long have I used the solution?

We've used the solution for three years and we just recently upgraded to the 1535 series.

What do I think about the stability of the solution?

The system is stable and able to perform with the advised load without fail.

What do I think about the scalability of the solution?

Quantum Spark is designed for small to medium businesses. With this in mind, the scalability is perfect and will support up to a firewall throughput of 1GBPS which is favorable for an SMB.

How are customer service and support?

The Check Point customer service is prompt and with their knowledge base, the majority of the issues incurred are already cleared noted with a list of multiple solutions.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Previously we used the Sophos XGS series. The Sophos XGS firewall no longer met the business' growing needs as it further led to a slowness in the performance of the network hence the search for a new system that would fix this.

How was the initial setup?

The initial setup was straightforward. Check Point's GUI interfaces are user-friendly, and it also provides a lot of information on setting up their devices.

What about the implementation team?

This was an in-house deployment.

What was our ROI?

With the increased internal network performance and a decrease in the threats being exposed to the network; the return on investment for this is roughly in the range of 40% to 60%.

What's my experience with pricing, setup cost, and licensing?

Quantum Spark has different subscription models where you can add more functionality as required. For a constrained budget, you can specifically pick out the functionalities you want, and pay for that.

Which other solutions did I evaluate?

We also considered:

  • Cisco ASA 5500 series
  • Cisco FirePower 1000s