What is our primary use case?
The main use case for Check Point Quantum Force is to protect us from the outside world. Check Point Quantum Force is preferable for most of our clients in the perimeter. That means it will be the gateway for our network to get into the internal network. The use case for this solution is the perimeter network.
Check Point Quantum Force uses modern AI-based threat prevention techniques. It uses AI engines such as CloudGuard or ThreatCloud. It frequently updates and potentially detects newer and known zero-day threats. As a perimeter network, there are many services that are open for outside clients, the public service. The only way to prevent that perimeter DMZ network is a perimeter gateway, which means Check Point Quantum Force. Check Point Quantum Force helps us to prevent our DMZ networks that are accessible publicly. It helps us to prevent our perimeter networks.
It is compact and efficient hardware, consisting of one unit or two rack units, so its form factor is good. Its power efficiency is good. It has very high block rates with a prevention rate of about 99%.
What is most valuable?
Check Point Quantum Force offers a unified solution management, which can be managed through a Security Management Server in one single console. It is easy to deploy and manage through a single console. Its resilience and scalability are notable, and its cluster capability is very nice. It is modular, with flexibility for growth, meaning it is scalable.
Check Point Quantum Force has strong threat prevention. Users report that the AI-driven engines such as sandboxing, IPS, and URL filtering are effective, especially against zero-day and advanced threats. It gives us unified visibility and control, meaning having a central management point for varied environments, such as data centers, branch offices, and clouds, and it helps with policy consistency. Under high pressure, the performance is very good.
Since using Check Point Quantum Force, we noticed a significant change because it holds different blades including Application Control, URL filtering, and threat prevention blades such as Threat Emulation and Threat Extraction. These features combine to form SandBlast and IPS. These features are merged together to prevent us from the latest cyber attacks and different cyber threats. The outcomes from Check Point Quantum Force firewall gave us the ability to be fit and secure from the cyber world. It also improves our security posture.
Since implementing Check Point Quantum Force, we have noticed fewer incidents and saved time by blocking applications that consume bandwidth and create network congestion. We can block them easily through Check Point Quantum Force, which solved the bandwidth consumption issues for us.
What needs improvement?
I have noticed some limitations with Check Point Quantum Force. There is a limitation in integrating with existing infrastructure, such as orchestration and logging, specifically with VPNs. VPNs are hard and sophisticated to deploy on this firewall. However, it is improving currently.
Some performance aspects need higher resources. If you do not give it higher resources, it will slow down your network. It is a trade-off - if you have higher resources, you will have good performance.
The complexity of configuring a VPN needs to be improved because we need to go back and forth to configure VPNs. It has to be simpler to understand.
For how long have I used the solution?
I have been working in my current field for almost three years.
What do I think about the stability of the solution?
Check Point Quantum Force is stable. It has some adoption issues, but it is good and stable.
What do I think about the scalability of the solution?
Check Point Quantum Force is scalable because you can scale it as you wish.
How are customer service and support?
My experience with customer support has improved significantly. Previously, I was not satisfied with it, but currently, it exceeds my expectations.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We have used Cisco ASA before, which lacks many features. Check Point Quantum Force has significantly more capabilities than this firewall. As it is a next-generation firewall, we cannot compare them. We shifted from Cisco ASA to Check Point Quantum Force because of the features available in this next-generation firewall.
How was the initial setup?
Check Point Quantum Force is deployed on-premises in my organization.
What was our ROI?
I have seen a return on investment. By blocking applications that consume high bandwidth and create network congestion, we can block them easily through Check Point Quantum Force. That resolved the bandwidth consumption issues for us.
What's my experience with pricing, setup cost, and licensing?
In terms of pricing, setup cost, and licensing, many users and clients say that the pricing is high. The license structure, with which blades and features are included and what extra licenses you need to apply, is somewhat complex. The cost is a trade-off. If you want good quality, you have to have the budget to buy it. Check Point Quantum Force is worth the investment.
Which other solutions did I evaluate?
Before choosing Check Point Quantum Force, I evaluated other options such as Palo Alto firewall and Fortinet FortiGate.
What other advice do I have?
My advice to others considering Check Point Quantum Force is that if you want to prevent your network from different attacks and various techniques of attack, you need this Quantum Force solution. There are many features regarding this Quantum Force firewall. You can use these firewall features to manage your network and protect your resources from cybercriminals.
We are resellers and partners of Check Point. We sell Check Point products in our country and deploy different products of Check Point. I am responsible for deploying different Check Point firewalls and have completed various projects. On a scale of 1-10, I rate Check Point Quantum Force a 9.
Which deployment model are you using for this solution?
On-premises