Check Point Security Compliance Reviews

“Check Point is excellent for PCI compliance!

Pros

One of the best features is the ability to get detailed insights into each firewall, including essential data such as security overview, security modules, violations and more. Plus the coolest part is that you can print a report if needed.

Cons

It can be a bit complicated to create your charts or customize your outputs. Without a clear understanding of what you're doing, you might find yourself getting lost during the chart creation process.

“Comprehensive compliance and security solution for Check Point

Pros

It's simple to use and the price is low compared to other solutions. Often it's bundled with the initial purchase so there's no need for additional hardware or solutions to configure the compliance. You can quickly get the compliance results. Unlike other vendors, this solution stands out by providing interactive features. The real-time interaction helps firewall admins spot operational and logical mistakes while maintaining daily security tasks. The findings screen is interactive, allowing you to resolve issues with a simple click.

Cons

It's a unique solution to Check Point. Check Point acquired the Easy2Comply solution in 2011 and customized it for Check Point firewalls. However, while this acquisition occurred, some features of Easy2Comply were dropped. I mention this because we were previously using it as a Dynasec customer for overall compliance. Now, the current Check Point compliance tool is focused solely on Check Point firewalls so it can't be used for other security components. Some of the challenges with the compliance solution are related to the roadmap and workflow integrations. The product lacks user-defined networking security, meaning you can't define critical zones and traffic flows.

“A great solution to meet the latest security standards

Pros

My favorite feature of Cloudguard IaaS is the new functionality like Updateable Objects and Datacenter Objects. We use the Updateable Object for Cloud services, which eliminates the need to add many IP addresses manually. This saves time on firewall policy updates and automatically updates IP addresses as needed. The Datacenter Object is also beneficial in our cloud environment.

Cons

One of the most frustrating aspects is the license management. You have to use the command line to apply the license to the gateway but not through Smart Update, which is not very user-friendly for our environment. Executing controls at the management server requires a change request.

“Very helpful with interactive dashoard

Pros

What I like is its centralized dashboard that allows us to manage all Check Point security gateways efficiently.

Cons

There is no dedicated throughput available for each module.

“A strong tool for keeping the system compliant

Pros

It checks whether Windows updates are done on machines and ensures that antivirus and anti-malware signatures are up-to-date. It also verifies which applications can be used to maintain compliance.

Cons

Creating policies can be a bit tricky and requires some experience to define them properly.

“Manages gateway compliance and shares details automatically

Pros

The Check Point Compliance Blade reviews all the policies, gateways, global configurations and other settings, and then shares a report. It's easy to check our settings and improve them to ensure compliance.

Cons

There's no real dislike, it's a very good blade.

“Firewall configuration compliance checks

Pros

Right after activating the software blade, you can see the first results, whether your firewall's basic settings comply with Check Point's recommended configuration. Additional compliance checks can be activated easily via SmartConsole, and there are many standards to evaluate.

Cons

My experience with Check Point Security Compliance has been entirely positive, with no complaints whatsoever.

“Its an amazing tool for compliance

Pros

Check Point management comes with a default one-year license bundle, which is sufficient for following compliance. There's no need for us to search for third parties to check if our configuration meets the standard.

Cons

I cannot find any downsides until now.