I have been using Check Point Application Control for more than three years. The best feature is that we can configure and deploy Check Point Application Control based on application categories, determining whether we need to allow or block access for a particular user or an entire subnet of the network. We can even control application usage at the granular level. For example, if we want to allow Facebook usage in our organization but want only uploading or chatting to be allowed with other functions blocked, we can achieve that through application controls. The configuration for Check Point Application Control is straightforward. The configuration part for granular controls is straightforward and very easy to implement. One valuable aspect is that the database updates for Check Point Application Control are automated. We do not have to perform any manual updates, which is also a good feature of the application control. Since we have been using Check Point Application Control, we are able to control unused application categories, such as applications that are not related to our organization's work environment. We are blocking those effectively, and therefore, the productivity of our organization's employees has increased significantly. We can generate reports of application usage and clearly see in the logs that we have successfully blocked unused applications. When a user makes a request, it is directly blocked, preventing them from accessing those unproductive applications in the network.
