Quantum Firewalls and Security Gateways

Check Point Quantum firewalls and Security Gateways provide prime-level security at the perimeter level with Multiple blades and features like VPN, Content Filter, Application filter, etc. All this is managed by a smart console, and we can add firewalls in HA. With Distribution deployment, we can add firewalls at different locations or at a single location.

Check Point Quantum firewalls provide 99% accuracy while protecting the environment, which is convenient and well-proven. The Hyperscale solution offers a high level of performance compared to traditional security gateways. Also, the Maestro firewall provides seamless traffic flow during production time. We can create multiple SGs on the Smart console.

This device is being used as a perimeter security device with VPNs connected across multiple clients.

CP can be used as enterprise-level perimeter security device as well as a VPN concentrator.

Our clients wanted something superior beyond NGFW, NGX Firewalls. We tried to pitch in CheckPoint's product of Quantum Security NGF, and the client asked for a quick demo. The Demo / PoC that we demonstrated was enough to have their buy-in. We went through the deal and the client was happy. FSI clients are generally a tad difficult to deal with, and we are now tasked to manage their INFRA.
Client is having huge Data Centers and was very impressed by this as compared to other CSPs/ on prem solutions like AWS and GCP. They wanted their data to reside mostly on-prem Data Centers. We even found after-sales support much competitive Vs products like F5 and Cisco.

1) For huge DC environments and complex networks
2) Where clients were consistent up-time like FSI and healthcare
3) Application-aware client req. and preventing day 0 cyber attacks.
4) Securing East-West traffic, hyper-scaling capabilities
5)Some advantages - Best Security meets Ultimate Hardware and SandBlast Zero Day Protection out of the box, Modular hardware
6) High Performance CPUs

The Check Point Next Generation Firewall provides us with holistic perimeter and endpoint security protection throughout the enterprise. The robust and secure VPN functionality also provides enough confidence to enable a 'work from home' / 'road warrior' culture within the organization. In-depth application control, URL filtering and SSL inspection features also mitigate a significant amount of risk for internal users browsing the internet and hosted services that face the internet. Data loss prevention, compliance, threat emulation, and other blades overall make this a robustly unified platform for the implementation and management of security controls.

Check Point Next Generation Firewall is a great solution for larger companies that have the ability to dedicate a large budget towards information security controls. In order to get the best return on investment, however, the company should have a highly functioning information security maturity level and the ability to invest in dedicated training so that all features are utilized effectively. The SmartEvent dashboards are able to provide ongoing data that can track this effectively.

Our Check Point Firewall is being used across the organization for all of our internet traffic. All network traffic is backhauled to our corporate location, filtered by the firewall, then out to the internet, and vice versa. The business problem it addresses is to allow certain traffic while blocking others. This is done through both an IDS/IPS, and logging.

Well suited -- Small businesses that need a simple firewall appliance that doesn't have anything fancy. They need something that gets automatically updated, blocks bad things, and allows good things.

Less Appropriate -- Very large enterprises with granular reporting needs. HTTPS inspection is also an issue, as some packets cannot be correctly viewed. Something like an F5 would be needed to address this problem.

We use Check Point Firewall Software Blade for outside facing protection for our hardware in multiple locations throughout the organization. Check Point serves as our primary firewall and our VPN software solution for the company. It is very easy to set up and use Check Point as a solution for VPN access instead of Microsoft VPN. The firewall itself proves to be very effective in managing traffic.

I believe Check Point Firewall Software Blade is well suited for medium to large organizations with 500 employees or less. Anything more than that, I would choose a more enterprise level firewall like Dell SonicWALL. Check Point does not provide mobile device control or Wi-Fi network control without purchasing a different Check Point appliance.