R80.30 Cyber Security Management Reviews

I've been using Checkpoint Security Management for 11 years, and it has always impressed me. The best things about it are the unified rules and IPS policies and the convenience of creating objects and firewall rules on the same page.

One thing I dislike is having to update the client when you update the Management Center (but it makes management easier)

By using the search function, you can pinpoint the issue with ease, whether it is a traffic log or audit log. The search performance is top-notch; it is close to the other SIEM vendors (which specialize in searching the logs).

Been using CP Mgmt server since NGX R65 up to the latest R80.40 and I must say it has come a long way with no more requirement of the legacy applications because of the Unified SmartConsole where you can manage, audit and create reports based on your needs.

A bit lighter Smartconsole application would be beneficial or they should be allowed to be installed only on the machines with higher specifications.

No issues with the Management Server.

Managing Check Point Firewalls, making changes to the Organization Firewall policies, looking into the logs, auditing. Creating reports as desired by the management and also testing new Firewalls with the Free 15 day trial license to understand the new functionalities which can also be used to train the staff.

We have managing multiple gateways with R80.30 Cyber Security Management using Smart Console. This is very good and user friendly console.

We had some issue like our Management got crashed multiple times earlier but after some action taken we have not found such dislike now.

Please use this. this is very good solution with smart console.

We are using Check Point since R77.x and now we are on R80.30 & R80.40, it is adding multiple features in each version. R80.30 having all the features as per today.

This Smart console i am using since R77 to since R80.30 also we moved on R80.40, but yes R80.30 I could see this is very good and easy to use Security Management Console.

at initial stage we faced some issue but after that i never seen any drawback on R80.30 console.

This is very good Smart Console to manage our security gateway,

This is mind of Checkpoint Gateway where all the intelligence we can configured and push the policies on dump device, each and every settings are very well known places. With this new SmartConsole view we can manage easily our all the security gateway,

I have used the Check Point from R75 up to the current R80.30 and must say that this version is the best at the moment. The new SmartConsole is super useful. Even newbies in our team could just start working with Check Point using it without much prior knowledge. Everything now in one place, and several administrators could manage the platform, e.g. modify the Security Policy for Gateways, without interference.

I have not experienced any drawback while using the R80.30 Cyber Security Management so far, and hope that I would not.

The solution is great, but at the moment the recommended version by Check Point is R80.40, pay attention to it.

At the current company we have several remote GameServers places in DataCenters in Asia. The Check Point solution serve there as the hardware firewalls, splitting Internet, DMZ and internal VLANs. The R80.30 Cyber Security Management is used to manage the Check Point appliances we have in the DataCenters. We upgraded to R80.30 straight from R80.10 and did not face any issues. It is running as the OpenServer installation on a Virtual Machine, and is controlled via the SmartConsole installed on the other VM (it requires Windows OS). The new SmartConsole also provides the logging and monitoring capabilities, and we heavily rely on it - one of the administrators always keeps an eye in the Log tab to catch the security alerts.

1. The new unified Smart Console is great. The usability is significantly better that the old R77.x Smart Dashboard. The GUI is simple, but modern.

2. The LogExporter is now built-in in the OS, you don't need to install it as HotFix and keep updated.

3. Outstanding automation capabilities - there is even and official Terraform module for CheckPoint R80.30 API!

4. The concurrent administration session are now supported, and without conflicts in the security policy.

The product is great, but we faced some issue with the failed policy installations after the upgrade from R80.20.M2.

After consulting with the Check Point support team and installing the fresh Jumbo HotFix, the issue is gone.

The Check Point approach for the NGFW management architecture is the best, in my opinion.

We use the Check Point NGFW solutions to protect the edges of the several offices of our company. The Check Point R80.30 Cyber Security Management is the heart of Check Point architecture - that is the one endpoint where you configure the security policies, perform monitoring of the events and analyzing the logs. The new unified Smart Console is just great - now there is one application to handle all the security blades instead of the bunch of Smart Dashboard components in R77.x. I am also amaze by outstanding automation capabilities - integration of the firewall configuration into your CI/CD processes is now possible with the new API.

Most advanced and highly secure security software management system for preventing end-to-end threat attacks by securing the mail and cloud environment end to end from any kind of malware attacks, threat entry attempts and malcious entry into the system. One-click solution for zero-day threat protection of IT systems across multiple business and cloud environments in a single go with high efficiency

No lag or latency at all. No slow functioning of the system

High-performance efficiency and improved security environment

Real-time threat detection with 100% security and no lapses at all.

Integrated IoT security with easy compatibility and configuration without any hassle in deployment.

No dislikes at all. We are new customers for Check Point and currently exploring all the offered software on the security management front. High compatibility and speedy deployment are often compromised with integration facilitation with 3rd part portals and dashboards. There are still some features that demand significant attention for proper execution. The complexity of such elements can be further reduced and made more flexible and customsiable per varied needs.

R80.30 Cyber Security Management is the one clock best available security solution for bringing in high-grade operational efficiency and network security in a much better way. It is quite an advanced security management solution with a zero-day threat prevention system and high compatibility features for easy integration and deployment. The performance outcome is enhanced, and customers and users are satisfied to a great extent after its usage.

Checkpoint Security Management is the best Management platform for firewalls. It includes all common tasks in one smartconsole. Access policy, threat prevention policy, logging, and event in one application. Api support is extended with R80.30; even we use the apis for general ongoing Operations. Bugs are fixed within R80.30 and the following releases. With R80.30 smartconsole extensions are to be used, we use some of these extensions and they’re worth testing and implement in production for daily jobs. We deploy R80.30 as MDS as well as standalone management servers. Global policy within the MDM helps to operate the firewall policy centrally. We use global policy at the access and threat prevention layer. Inline layer support is a big plus coming with the R80 releases. Inline layers assure the granularity of the rule base from the security policy aspect. You can use the application/URL layer as a dedicated layer. However this approach has flaws in terms of security. Indicator usage is another advantage; there are a well-known list of vendors as the indicators. Checkpoint management also is compatible and supported by many firewall rule base analyzer/automation vendors. We did several flawless integrations with well-known vendors and that makes the firewall operation as a no-touch operation. The compliance module of Checkpoint is successful in making the firewall rule base and operations compliant to related regulations. Smartevent increases the threat view and visibility, assist the SOC team in their threat hunting and forensics activities.

API usage is somehow complicated; you need to tune the api calls for the Checkpoint security management. We see crash and no responsiveness issues at the management layer. External Dynamic list integration can not be done through the smart console. You need to configure the Gateways for the EDL. The global policy can be used, but it comes with the cost, you can not override the global policy on the gateway and it may expose security risks. MDM resource usage with high number of CMA/GWs/revisions/rulebases is always high. Anytime you open a case for the management, especially TAC recommends applying HFA. If HFA does not solve the issue, they recommend upgrading to the latest version. The main problem related to the security management Software is excessive coding through the years. We encounter some cases only solved by the product team with special coding. Migration to unified policy is not easy, and there’s no automated way of doing this. Other vendors have some specific tools migrating on their own, in checkpoint we generally do by APIs. API usage is somehow cumbersome for CMS. Smartconsole is a heavy client, Web smartconsole does not give you all the details and granularity.

Before moving to Checkpoint r80.30 from the previous releases, you need to follow through with the procedure, including pre_verifier. Delete nonuse policies and rule bases before the migration. R80.30 is currently somehow an old release; consider using R80.40 or R81.10. Apply the latest fixes before running into production. Install the latest smart consoles for the firewall administrators. Consider MDM for the high number of GWs and different policies. For busy environments, I recommend using the appliances for the management and logging. VM platforms have limitations for the cpus and memory; you need to get a dedicated ESX host for resource assignment, which is nonsense. Using log export for SIM integration is more efficient than the OPSEC LEA.

We have been using Checkpoint firewalls for more than 20 years. We start with one cluster, than by the years it grows to lots of firewalls and managements. We gave multiple deployments including single management centers and also dedicated MDS for some locations.10 years ago we migrated manu of the security management servers to MDS environment. This transition gives the firewall administrators immense operational capability. They have one screen to manage all the firewalls. Upgrades are straightforward just to start the MDS upgrade, than the CMAs are automatically upgraded. There are also locations which are been managed by the CMS. Smart console is great, and it’s getting many features with the coming releases. Smart logging is very fast and agile. Query language and elasticity give the administrators flexibility in searching. The compliance module is great and automatically integrated with the smart console. It’s unique in terms of usage and compared to other vendors as it’s alerting before applying a policy. Smartevent is used by the SOC team. Integration with the SIEM tools enhances the overall visibility at the network and endpoint layer. We have upgraded some environments a year ago to R80.40 and R81.10 due to tight external list integrations.

Checkpoint Cyber Security Management have tons of security features like anti-ransomware, anti-virus, anti-phishing, even disk encryption. But one of the best features was harmony web protection, which allows you to scan every file you download and get the file "cleaned".

Unfortunately, Checkpoint Cyber Security Management has many security features, which means the system will slow down. The ram consumption was also a bit higher than other security solution.

The Harmony web protection sometimes takes a long time to submit, "clear" the file and download it "cleared".

We use a checkpoint for almost of out systems, like firewall, anti-virus, anti-phishing, web protection; anti ransomware. Until now we are preventing around 30000 attacks per day.

Especially since more of us are working in a virtual environment these days, it is great to know that you are protected and in a secure working environment. Also, if anything out of the ordinary occurs, you will be contacted by support.

I think it is always vital to reevaluate costs, maybe quarterly or annually, to make it more affordable to more consumers. The cost is still not as high as I have seen from other cyber security organizations.

Preventing hacking or tracing, as well as sending files in a secure manner. The system has become more widely used in the company where I am employed.