Check Point SandBlast Network Reviews

Simplicity of rules for run tests in the sandbox, fast time for determine a decision. Integration with the rest of Checkpoint ecosystem.

Limitation to static analytics in MacOs and current limit of 100mb of file size

Analyze untrusted files received in our endpoints, gather insights of the results

The most favourable feature is that Checkpoint Point Sandblast is very accurate and gives a almost no false positives, it has great threat prevention against severe zero day attacks.Great TAC team support.Deployement is easy.

The UI and the cost can be improved ,Higher CPU utilization in some instances.

Check Point SandBlast ensures protectiont against zero-day attacks by providing an environment to detect and analyse the behaviour of malicious files before it can enter the network.It has safeguarded our organizations Infrastructure.

Check Point Sandblast provide threat prevention and sandboxing feature that helps of in anti-bot, anti-virus and many more sandboxing feature.

also it is veru easy yo use, simple integration .

as far there is no point which I dislike about check point.

as far regarding network sandboxing it helps our organization from outside threat like phishing, anti-virus, deep sacanning that helps us to detect malaware also zero-day threat.

The Sandblast network delivers true zero day protection to your network that can stop the first outbreak of an attack. Nothing is allowed into the network until Sandblast says that its ok

Only included on the upper tier of licenses so it can be expensive to maintain across your entire network and for east-west traffic. Would be good to see lower tiers of the product.

Zero day attacks.

.The way that SanBlast Cloud emulates the downloads when all work personal try to download any software from the internet service protecting the LAN environment within our infrastructure

The high performance that it takes when Threat Emulation is enabled, and some times this affects our operations with some latency issues when they try to navigate to the internet service

We currently use

Sandblast network can be used in a private network or in the cloud with the same features. There are several companies that do not have this option available. As the current trend is the cloud, on-premise solutions lack many features. For the cloud usage called TX is very easy to activate within several clicks, then it's working. Licensing is simple. TE gives you broad coverage for 0 days of several protocols. Threat extraction is unique; even some vendors have dedicated solutions for the extraction of pds and macros. TEX does not damage the original files. MacOS support is a big plus as MacOS support of related security services is lacking, MacOS TE support gives us confidence. I do not need to invest in an additional sandboxing product with TX. I have one platform to cover all network security solutions.

TX annual pricing is costly compared to the initial investment of the product. In case of problems related to TX, support always directs it to the latest HFA, even to the new version. I see in some cases, the TE process hangs and needs to be restarted. You don't get regular updates if the ATP vectors are covered with TX. There's no specific service to use the sandblast networking in the cloud just for info exchange or api. I can't track or query our uploaded data to the cloud.

You need to open SSL inspection on the gateway. Otherwise, there's no meaning to use Sadblast networking. Achieve files should be analyzed in the SandBlast. Sizing should be done properly before deployment. Purchase the TX with 3-year subscription; 1-year initial purchase than the consecutive years is costly.

It provides us integrated solution covering the latest threat and attack vectors at the networking layer. It's really detecting, blocking even mitigating the attacks at the boundary. Targeted attacks through the phishing emails can easily be stopped with TX. Reporting through the smartevent module is fantastic. I don't see any difference using just TX or a couple of sandboxing in the service chain as the TX already detects and blocks the threat.

Check Point differentiates with its zero-day protection. Static analyses, dynamic analyses,CPU-level protection, plus sandboxing engine. With these capabilities, the product can hold malwares even at first time . No gap for security.

Forensics reports can be more detailed like Check Point do for Endpoints.

Can protect network at the most external zone. No need to think about post-infections or no need to deal with endpoint integrations . No patience for 0.

It is a one-stop shop for Endpoint protection—features minimal zero-day threats, full disk encryption, Monitoring, and blocking malicious files. Filtering phishing emails is a modern-day threat under social engineering.

Centralized management, Minimal Zero day threats, FDE(Full Disk Encryption, blocking malicious files and mails.

The End user machine slowness due to consuming max of the CPU usage.

Checkpoint Sandblast combines evasion resistance Threat Emulation, and Threat Extraction technology which detects and blocks Zero-day attacks, including CPU level.

Emulation is nothing but to detect signature which was previously unknown into checkpoint's virtual server environment knows as traditional sandbox technology, but its beyond that which makes more accurate and fastest response service.

Threat extraction is to sanitized the emails and downloaded file content from web browsers which leads to avoiding phishing emails.

The onboarding process is simple but requires more CPU as emulation is a very CPU-intensive process, either on the cloud or on-premises.

SandBlast network secure our organization from zero day attack and make it safe from them for on-prem as well as roaming users.

It is very good solution for protection against zeroday, no dislike.

as we know thousand of new virus / malware is comming daily and our firewall, antivirus and other protection can never help us to protect again new or singature less malware / virus, and in this situation sandblast network help us to protect again this.