Check Point IPS Reviews

My main use case for Check Point IPS is to use it in our Check Point gateway, and the main use, for example, is to detect and block network-based threats in real time, especially zero-day exploits, lateral movement attempts, and known vulnerability exploits across our internal and external traffic.

The best feature in my experience with Check Point IPS is the real-time prevention because it uses thousands of preventive protections based on both known exploit signatures and behavioral analysis to detect and block threats before they reach vulnerable systems.

I find the behavioral analysis feature of Check Point IPS to be a most valuable feature because it can detect sophisticated threats that do not match known signatures. For example, when I need to view anomaly detections, instead of relying solely on known attack patterns, Check Point IPS monitors network traffic for unusual behavior such as unexpected protocol use, abnormal data flows, or suspicious command sequences.

Check Point IPS impacts my organization positively because it has had a strong positive impact by strengthening our network defense, reducing manual work, and improving our incident response times.

Check Point IPS could be improved through adaptive policy tuning because its policies often require manual tuning to balance prevention protection and performance. I need to add machine learning-driven auto-tuning based on traffic patterns and threat history, which would reduce admin overhead.

More granular policy customization for Check Point IPS would allow protection to be tailored more precisely to specific applications or services, which would reduce unnecessary overhead and improve accuracy.

I have been using Check Point IPS for around two years.

Check Point IPS is very stable with no problems regarding this solution.

Check Point IPS is very scalable with no problems concerning this feature or characteristic.

The customer support for Check Point IPS is excellent, with no problems in generating complete technical support or issues with support.

Positive

I did not previously use a different solution before adopting Check Point IPS.

I consider the time saved for the support team or co-worker in the support team as a return on investment from Check Point IPS.

I did not evaluate other options before choosing Check Point IPS.

I do not have anything else to add about how I use Check Point IPS in my environment. I do not have more to add about the features of Check Point IPS. I would rate Check Point IPS around nine on a scale of one to ten. I chose a nine out of ten for Check Point IPS because it relates to the need for granular policy customization. In my experience with Check Point IPS, I do not have any problems with the pricing or the license; all is great. Check Point IPS is deployed in my organization on a hybrid cloud. We use Azure as our cloud provider for the hybrid deployment of Check Point IPS. I recommend using Check Point IPS blade in their gateways because it offers excellent capability to generate more security in their company. My overall rating for Check Point IPS is nine out of ten.

My main use case for Check Point IPS is a strong threat database and integration, centralized monitoring and reporting, and enterprise-scale performance.

I use Check Point IPS for centralized monitoring and reporting in my environment, which works effectively when paired with Check Point SmartEvent for management portal, enabling visibility across IPS events.

I have granular policy control with Check Point IPS.

The best features Check Point IPS offers in my experience are a strong threat database and integration.

The threat database and integration help me in my day-to-day work with the Check Point ThreatCloud and behavior engine, as the solution effectively detects zero-day and encrypted traffic threats.

Check Point IPS has positively impacted my organization because strong integration with Check Point product security stack means we could use a constant IPS engine across environments.

Specific outcomes and metrics that show how Check Point IPS has helped my organization include ingress and hybrid link segments.

Check Point IPS can be improved by addressing false positive and tuning overhead.

Specific improvements are needed regarding licensing and packaging complexity and the learning curve.

I have been using Check Point IPS for about two years.

My advice to others looking into using Check Point IPS is to consider it as a strong contender for intrusion prevention requirements, especially if they need to extend standards to security operation on Check Point.

My company has a business relationship with this vendor other than being a customer, as we are a partner.

I rate Check Point IPS 8 out of 10.

Check Point IPS is used primarily to protect the network from intrusion attempts and advanced threats by detecting and blocking malicious traffic, such as exploit attempts, suspicious payloads, and unauthorized access attempts. It helps stop attacks before they reach critical systems and ensures compliance with security policies. Check Point IPS also provides visibility into potential vulnerabilities, enabling proactive patching and configuration adjustments. Overall, it serves as a key layer in maintaining a secure environment.

During an SQL injection attack attempt on one of our public-facing applications, Check Point IPS detected the malicious query patterns in real-time and immediately blocked the traffic before it reached the server. This prevented potential data exposure and downtime. In another instance, it stopped brute-force login attempts by flagging the abnormal traffic volume and cutting off the source. This protection provides confidence that threats were contained before causing damage.

Check Point IPS also protects against zero-day exploits. The IPS signatures are updated quickly and help block new vulnerabilities before patches are available.

The best feature Check Point IPS offers is the real-time threat prevention capability. Threats are blocked instantly before they reach critical systems, which provides confidence that attacks are contained. At the same time, the accuracy is high, so time is not wasted chasing false positives. This balance of fast response and reliable detection makes the feature valuable in daily operations.

Another valuable feature is the strong management and reporting capabilities. The centralized console makes it easy to track activity across all sites. Well-detailed logs and customizable reports help with compliance and audits. Integration with other security tools and SIEM platforms adds value by providing a complete picture in one place.

Check Point IPS has had a significant impact on the organization, resulting in a reduction in intrusion attempts reaching critical systems because threats are blocked in real-time. On average, Check Point IPS blocks between 400 and 500 intrusion attempts per month that otherwise would have reached deeper into the network. Investigation time has been cut by about 30 percent because alerts are more accurate and easier to act on. This has saved the team roughly five to ten hours each week.

Check Point IPS could be improved because the documentation is not intuitive. More pictures, step-by-step guides, and easier first-time implementation resources would be beneficial. The rating of eight out of ten reflects that the documentation is not intuitive, which prevented it from being a perfect score.

Check Point IPS has been in use for around four years.

Check Point IPS is very stable.

Check Point IPS is very scalable.

Check Point IPS customer support is excellent and responsive.

Positive

A return on investment has been seen in terms of time saved for employees, allowing them to have more free time.

The pricing, setup cost, and licensing experience with Check Point IPS is positive because the pricing is specific to this application.

Check Point IPS is a modern and excellent blade to use in gateways and is recommended for implementation. It offers excellent protection. Based on the experience, I would rate this review an eight out of ten.

We are using Check Point IPS for threat prevention. With Check Point IPS, our organization is protected. We are using this IPS solution to protect our private network with the help of IPS signatures that are continuously updated from ThreatCloud.

Check Point IPS works based on zero-day protection. It is integrated with SandBlast. Whenever any suspicious file is detected, the IPS creates a threat signature, and with the help of the creation of the signature, it blocks the threat across the entire network if any malicious file is found.

After implementing Check Point IPS, users are secured from malicious files, malicious activities, or any threat from the outside. Whenever they are downloading anything from the internet, that file first goes to SandBlast, and it checks whether there are any malicious signatures or malicious activities detected. If it is detected, then it is blocked by Check Point IPS.

The best feature is its management. The configuration part is easy. As this feature is built into the Check Point Quantum firewall, with a single console we can configure it, create a firewall policy, and apply this security feature. The manageability and visibility are outstanding. It also provides a threat prevention feature.

As the configuration steps are very easy, any L1 engineer can easily configure it and manage those policies and configurations. Check Point IPS is a good feature that provides excellent signature-based threat prevention. It helps us protect our private network from outside threats.

The security incidents have been reduced. Manageability is the main concern for engineers, so after implementing it, time is really saved.

For a smaller organization or smaller environment, the cost for Check Point IPS is a little bit high, so that can be made more budgetary for small organizations.

We are using Check Point IPS for more than three years.

Check Point IPS is very stable.

We are using Check Point IPS from the beginning.

They are very supportive.

Positive

We have evaluated Fortinet IPS.

It is easy to set up.

The implementation has resulted in time saved.

I can advise other organizations, anyone looking for Check Point IPS or threat prevention capabilities, that they can consider Check Point IPS. It's an outstanding product that really helps them keep their private network resources secure from malicious activities or any malicious signatures. That can be prevented with the help of Check Point IPS. I rate Check Point IPS a nine out of ten.

My main use case for Check Point IPS is that we have deployed it together with HTTPS inspection for all inbound and outbound traffic.

I do not have anything else to add about my main use case before we move on.

The best features Check Point IPS offers include finding threats hidden in encrypted data, which I find valuable.

Check Point IPS detects threats in encrypted data by finding anything hidden that's trying to exploit systems inside our organization, which is important for us.

Check Point IPS has positively impacted my organization, although it's hard to find any specific metrics. It has added some workload to work on all the incidents that the IPS generates. It is a two-edged sword that improves security but requires more manpower to check what the IPS generates.

Check Point IPS could be improved with more automation and focus on removing false positives.

At least 60% of all the alarms generated by the IPS are false positives or something that's not important to look at, and this generates a significant workload for my team.

That is my main concern about the needed improvements.

I have been working in my current field for 11 years.

The customer support for Check Point IPS is very good; they have support in Canada, which is convenient.

Positive

I did not previously use a different solution before Check Point IPS.

I have seen a return on investment more in the risk saved since it catches a lot of stuff security-wise that is good to catch, but there's no time saved or employee saved; it's more risk improved.

My experience with pricing, setup cost, and licensing for Check Point IPS is good; it's baked into the firewall licensing, so that's very good.

Before choosing Check Point IPS, we did a POC with Palo Alto to evaluate other options.

I chose Check Point IPS over Palo Alto because it is very stable, and the deciding factor was that our workers were already familiar with Check Point.

Check Point IPS is deployed in my organization both on-prem and in the public cloud.

We use Azure for our public cloud deployment.

My advice for others looking into using Check Point IPS is to make a plan on how to deploy it before starting. Make a baseline of what firewalls should be running, have profiles, and how to work with the alarms that get triggered. Do this before you actually start deploying the IPS, so the workload afterwards doesn't get too big.

On a scale of one to ten, I rate Check Point IPS an eight.

My main use case for Check Point IPS is to detect and prevent threats from the WAN side, which is what we use it for most often.

I can give a specific example of how we use Check Point IPS to detect and prevent threats inside our organization. Check Point IPS is an inbuilt feature of Check Point Firewall. We have the on-premises Check Point Firewall, and we have taken the license for Check Point IPS. IPS is a feature that we have enabled in our LAN to WAN policy for our LAN users and the segment. So whenever they query or access any website, it goes through detecting and preventing the threats through the IPS features.

For the last two years, we haven't seen any attack or any malicious activity in our network. It is all due to Check Point IPS and Check Point Firewall features.                                                                                                                                                                                                                                                                                                                                                                                         

The best features that Check Point IPS offers are its AI features and built-in AI. It automatically gets upgraded on the threat signatures regularly from Check Point Cloud. So whenever any zero-day attack is detected, it downloads that signature into the firewall and prevents that threat. It is very useful to protect the LAN environment in an effective way.

I find the automatic signature updates and AI features to be very reliable, and I never run into any issues with those features.

Check Point IPS has had a positive impact on my organization because it is very helpful to protect the environment from emerging threats.

I don't see that Check Point IPS needs any improvement because I think it is working fine for the organization. Pricing can be reduced for the solution.                                                                                                                                                                                                                                                                                                                                                                        

I have been using Check Point IPS for more than two years. We are working with Check Point Firewalls and the IPS.

Check Point IPS is pretty stable.

Its scalability is good.

The customer support for Check Point IPS is outstanding because they are very supportive.

Positive

We are using only Check Point solution, and we haven't moved from any OEM to this one. From the start, we have been using Check Point.

The configuration part is very easy, and we can easily deploy and configure it. We have to configure the security profile for the IPS, and it should be mapped to the LAN to WAN policy.

Implemented through in-house team.

I have seen a return on investment with the help of Check Point IPS feature, which optimizes our configuration.

On the licensing part, I don't see any challenge as it is as per the industry market, so it is good.

We have evaluated Fortinet Firewall, which has a feature called Fortinet IPS.

I don't have anything else to add about how I use Check Point IPS in my setup.

This has resulted in measurable improvements, as the threat update is automatically upgraded, so we don't have to do any manual configuration.

I will recommend Check Point IPS to organizations that are looking for the best security features in the cybersecurity industry.

We have a business relationship with Check Point as we are a partner with them.

On a scale of one to ten, I rate Check Point IPS a nine.

Check Point IPS protects the network from known and emerging threats by inspecting traffic in real time.

I used Check Point IPS to stop a threat when it blocked an attempted SQL injection against one of our business applications. The system detected the malicious traffic pattern in real time and dropped the packet before it reached the server.

I found out about this incident through the IPS alerts in the management console, which flagged the suspicious traffic pattern immediately, and the detailed report showed which server was targeted and how the exploit was blocked.

The best feature Check Point IPS offers is real-time traffic inspection.

What stands out about Check Point IPS compared to other security tools I have used is that it does not just alert; it actively blocks threats in real time. With other solutions, I still have to manually investigate and take action, which slows things down. Check Point IPS gives me more confidence because I know exploits are being stopped before they reach critical systems, and it makes my job easier by reducing the number of incidents that require hands-on intervention.

I can understand what was blocked and why, which makes audits and compliance easier. Integration with our broader Infinity architecture also allows threat intelligence to flow across tools without extra effort.

Check Point IPS has positively impacted my organization by reducing the number of successful intrusion attempts and cutting down investigation time.

One area where Check Point IPS could be improved is the language in the support, as it is currently only available in English.

I have been using Check Point IPS for three years.

Check Point IPS is very stable in my experience.

Check Point IPS is very scalable.

The customer support for Check Point IPS is complete and offers quick service.

Negative

I did not use a different solution before Check Point IPS.

My experience with pricing, setup cost, and licensing for Check Point IPS is great, and I have no problem with the price.

I did not evaluate other options before choosing Check Point IPS.

I have saved around two or three hours a week since I started using Check Point IPS.

I have seen a return on investment as it results in money saved and time saved because the security tool is very complete and modern.

I have saved around two or three hours a week since I started using Check Point IPS.

My experience with pricing, setup cost, and licensing for Check Point IPS is great, and I have no problem with the price.

I did not evaluate other options before choosing Check Point IPS.

Because Check Point IPS is a modern security solution, you should add it to your gateways as it is excellent. I give this product a rating of nine because of the language issue.

My main use case for Check Point IPS in my company is to detect and block different kinds of activities around the trash or various vulnerabilities.

For example, I use Check Point IPS to detect or block activities when I encounter different malware or intrusions in my network area, and I need to block these with IPS technology.

In the past, another company in my group had a bad experience when they encountered different malware in their network area, blocking various databases, and this company didn't have any technology to stop this situation, so Check Point IPS helped in that instance.

One of the best features Check Point IPS offers is proactive protection, which I consider a great feature for IPS.

The proactive protection feature of Check Point IPS helps me and my organization by blocking ransomware and other malware, especially during an incident where different items get infected, showing its value in preventing such intrusions.

The integration of Check Point IPS with Check Point gateways and control in the Infinity Portal is another interesting feature that I find valuable.

Check Point IPS has positively impacted my organization since we no longer spend time worrying about threats like ransomware.

Since implementing Check Point IPS, we've seen a significant positive impact, as the company no longer spends time worrying about threats like ransomware, allowing us to focus on our core operation with greater peace of mind, and it has also reduced the time our team spends managing incidents, making our security process more efficient overall.

One area that could be improved in Check Point IPS is the user interface for managing IPS policies, which can be a bit complex for new users, along with the need for faster signature updates for emerging threats and more seamless integration with third-party tools. A simpler policy setup and faster updates would enhance the experience.

I have been using Check Point IPS for about five or six years now.

Check Point IPS is stable.

The scalability of Check Point IPS is great because when I deploy gateways in the cloud, I create a cluster, which offers a very scalable option.

In the past, customer support was so-so, but now it has improved.

Neutral

I have not used a different solution before Check Point IPS.

I think about the time saved when considering the return on investment with Check Point IPS.

My experience with pricing, setup cost, and licensing for Check Point IPS is great because I had to read various documents to understand different situations, and it has been a great experience overall.

Before choosing Check Point IPS, I did not evaluate other options, as I preferred Check Point IPS for a long time.

For others looking into using Check Point IPS, I would say it is a great company with excellent characteristics for handling vulnerabilities.

I would rate Check Point IPS eight out of ten because there are other things I don't prefer, such as the price and other aspects.

Check Point IPS is our main security feature within the security gateway, securing our network infrastructure and resources from cyber threats and zero-day attacks.

We have configured a LAN to WAN policy with Check Point IPS as a security profile applied to that particular security policy. Any traffic passing through from our private network to the WAN side, including downloads from users, files, applications, or website access, is checked to determine if it is genuine traffic or if it includes malicious content such as phishing emails or websites, which is then blocked by Check Point IPS.

Check Point IPS's cloud threat intelligence is outstanding. Check Point IPS is regularly updated from that intelligence regarding the signatures of current threats or CVE updates, so all threat intelligence is updated automatically, relieving us from the burden of manual updates, which is highly beneficial for our organization.

It has made our job significantly easier because we do not have to worry about updates or any manual tasks on Check Point IPS. After implementing Check Point IPS once and configuring it perfectly, there is no additional need for technical input from our side; it works independently at the configuration level.

Incidents of cyber attacks are genuinely blocked by Check Point IPS, and we can see this reflected in our logs captured by the solution.

Some of the malicious traffic requested by endpoint users is perfectly blocked based on threat intelligence, such as while downloading something from the internet. That incident demonstrated its effectiveness.

Check Point IPS is currently working perfectly for us, but in the future, the addition of AI or more automated reporting features could enhance the solution, and that would be beneficial.

I have been using Check Point IPS for more than three years.

Check Point IPS has demonstrated no issues with reliability or instability in our daily activities; it is working well for us.

Check Point IPS handles our organization's growth well with no scalability issues.

I have had an excellent experience with Check Point IPS's customer team, as their technical knowledge and troubleshooting skills are excellent.

Positive

I advise any organization to leverage Check Point IPS as a feature of the security gateway, which they can quickly configure and apply to a security policy, using it as a base solution for securing their network infrastructure. I would rate this solution a 9 out of 10.

We are using Check Point IPS for the security of our private resources and the overall organization network.

With the help of Check Point IPS, our organization network is protected in real time through the threat intelligence database that automatically gets updated from the threat cloud AI of Check Point IPS.

The best feature is that Check Point IPS not only prevents threats but also gets automatic signature updates from the Check Point threat cloud. It also has fewer false positives.

Whenever new vulnerabilities or CVEs come in the cybersecurity network, they are fed from the Check Point threat cloud. From their cloud threat center, the signature gets automatically updated into the Check Point Security Gateway where Check Point IPS is present. The signatures are accurate, which helps reduce false positives compared to many other IPS solutions.

Through its fewer false positives and automatic threat updates, Check Point IPS has impacted our organization positively. It has reduced threat events and requires less time to configure and manage.

The IPS inspection throughput goes high in older security gateways that have limited hardware resources, so that can be improved.

We have been using Check Point IPS for almost two years.

The solution is stable.

Scalability is good.

The support team is supportive, but sometimes in complex troubleshooting, they take time to resolve issues.

We were using Sophos IPS before moving to Check Point IPS.

The solution has reduced threat events and takes less time to configure and manage.

We implemented this as a customer.

Time has been saved because the manageability is very easy.

We evaluated Fortinet IPS.

I would advise anyone looking for an IPS solution to consider Check Point IPS as a solution. On a scale of one to ten, I rate this solution an eight.