Check Point IPS (Intrusion Prevention System) Reviews

Product is liked because of its advanced features few of them are Deep integration with Check Point's Security Suite, Automatic Threat Prevention Updates and Visibility and Reporting via Smart Console and Smart Events.

Few things are to be disliked about the product such as Complex tuning and policy management, Licensing and cost as compared to other vendors, Learning Curve in Smart Console this interface is powerful but not always intuitive.

Peace of mind by knowing your network is being actively monitored and protected against both known and emerging threats, Reduced downtime that is fewer successful attack means less time spent recovering systems or dealing with outages.

Ease of Integration, Performance & Accuracy, granular control

Sometimes, the sheer volume of alerts can become overwhelming if the system is not properly tuned.

We have dealt with external attacks and are actively monitoring traffic within the internal separation firewall.

What I value most about Check Point IPS is its ability to adapt quickly to emerging threats without requiring constant manual intervention. Its intelligence-driven detection engine balances speed and accuracy, making it reliable in high-traffic environments. The seamless policy enforcement across gateways ensures consistent protection without creating administrative overhead.

Nothing as of now, everything is going good.

Check Point IPS helps us block sophisticated intrusion attempts, zero-day exploits, and application-layer attacks before they disrupt operations. It reduces manual monitoring by providing automated threat intelligence updates. This has strengthened our network resilience, improved compliance with security standards, and given our team more time to focus on strategic tasks.

Protects the network from IPS attacks constituting of legacy signature based, behavioral based and anomaly-based attacks.

Provides huge database of signatures classified into various protections automatically updated on daily basis..

Provides the functionality of customizable protection profile according to the organization needs

Some protection may effect on the firewall performance

What I like best about Check Point IPS is how well it integrates with the rest of the security blades in the platform. The protections are updated frequently, and it gives me confidence that known exploits and malicious traffic are being blocked at the gateway.

What I dislike about Check Point IPS is that enabling a wide range of protections can sometimes affect performance on busy gateways, so tuning is often required. False positives do occur and can take time to troubleshoot.

Check Point IPS helps protect our organization from network-based attacks, including exploit attempts, command-and-control traffic, and malicious scanning activity. By stopping these threats at the gateway, it reduces the risk of compromise before they reach endpoints. The benefit is stronger overall security, less time spent on incident response, and peace of mind knowing that protections are updated regularly to cover new vulnerabilities.

I like that the IPS integrates seamlessly into our existing environment and adds valuable visibility and control, especially when combined with HTTPS inspection.

I dislike that there are quite a lot of false positives and that the system requires continuous fine-tuning and care to function at its best.

Check Point IPS is solving the challenge of detecting and stopping threats hidden in network traffic, especially when combined with HTTPS inspection. It helps us block exploits and malicious activity before they reach our systems, while integrating well with our SMS and SIEM for better visibility and correlation. The benefit is stronger protection across the network, but it does require ongoing tuning to reduce false positives and keep it running optimally.

The IPS is centrally managed by one of the best management platforms in the industry. Easy to use, create policies and deploy them to multiple devices. Logging is also integrated into the management console, so troubleshooting or reporting is all in one place.

Automatic signature deployment sometimes is not so desirable. On a few occasions signature file was corrupted/erroneous, which led to operational issues. Problems were resolved with rollback or next update.

Lots of signature-based attacks were blocked by IPS. Overall security was increased. Low false-positives.

The Intrusion Prevention System is the feature that helps organisations protect from advanced threats. this solution is easy to integrate with management server with version R81.10 and 20.

as far as we are working on this as of now there is no point which right now i dislike about it.

The IPS is one of the feature that works on sigbature base and blocks and allow the signature on the basis of severity. this feature can help to create own customizable signature if CP database don't have signature. also the CP database is update globally every day. also it has quick response to the crirtical Signature. that can be easy to configure policy.

Its best thing is that it can handle and detect a variety of cyber attacks and threats and with its integration with a Checkpoint firewall adds an additional layer to security.

It can become complex to manage IPS rules in Checkpoint IPS and requires certified and expert person can work on it. It can at times also flag trusted traffic as malicious which can harmful for the environment.

The main benefiting part about Checkpoint IPS is it helps to protect critical customer data and reduces the risk of business distripution by preventing cyber attacks before they hamper critical systems.

Check Point IPS goes beyond simple signature matching. It combines a variety of techniques to identify a wide range of threat, including ones that were not discovered prior to zero-day attacks.

The IPS signature base scanning slows down the network, causing slowdown in traffic flow and other activities.

To preventing zero day attack with the help of daily updated threats signature which protect orgnazation Lan and hosted servers.