Checkpoint Firewall

Forums › IT Pro and developers › Checkpoint Firewall

lxsw20

3689 posts

Uber Geek
+1 received by user: 2174

Subscriber

#180827 23-Sep-2015 09:24

Does anyone have a checkpoint firewall? What are your thoughts on it?

A bit of reading on the net seems to point out they are not very fun when it comes to licencing. Other than that some seem to like them, some not so much.

Also if anyone is running a Palo Alto I'd be interested to hear your experience Are they common in NZ? The Wildfire component looks very cool, but other than that I know very little about them.

Currently running an ASA5520 / Webmarshal to give you an idea of what we are after replacing/complement.

Please no sales PMs :)

Thanks

wasabi2k

2102 posts

Uber Geek
+1 received by user: 860

#1392492 23-Sep-2015 09:34

We run them across all our main sites

As you said they can be very expensive licensing wise, but they can do a lot and you can just license what you want.

Make sure you buy an appropriately sized one - we are struggling in one site with undersized checkpoints.

also - sales/pre sales could actually probably help you, I wouldn't write them off.

lxsw20

3689 posts

Uber Geek
+1 received by user: 2174

Subscriber

#1392501 23-Sep-2015 09:44

Agree, we will talk to a rep/ pre sales when the time is right, just at the R&D stage for now. Thanks for the advice!

xontech

268 posts

Ultimate Geek
+1 received by user: 56

#1392542 23-Sep-2015 10:11

Working with CP's currently and having recently attended their roadshow they definitely come across as quite complete in their vision and approach (check out Gartner magic quadrant stuff for firewalls). Yes licencing is a pain, but they know this, and are addressing it in R80.

I haven't worked on Palo Alto but currently work in a place that is selling them. They seem to be the "hot thing" at the moment, trouble is seperating sales spin from reality. Check out NSS labs tests for Firewall testing and results, can make for interesting reading.

xontech

268 posts

Ultimate Geek
+1 received by user: 56

#1392552 23-Sep-2015 10:13

btw you can download CP software and trial it for 15(?) days before you need a licence.
Can be run as VM's and I have done this before using Virtualbox.