What is most valuable?
Valuable features include centralized management using the MDM solution of Check Point and the Log Management module. The latest version of VSX supports all blades of Check Point's security suite.
I get maximum flexibility as I can use a standard management server to manage all virtual gateways along with a dedicated log server for each virtual gateway. Sometimes I can use a single server to manage all virtual gateways.
How has it helped my organization?
Earlier versions only supported the Firewall and VPN feature. Now I can run Anti-Bot/Anti-Virus, URL and App Filtering, Threat Emulation, and other blades.
I can assign weights to each virtual gateway depending on how critical each virtual gateway is.
The VSLS feature provides linear scalability so I can keep adding hardware (maximum of eight) to meet my performance expectations.
What needs improvement?
It is somewhat difficult to upgrade the entire hardware without downtime.
For how long have I used the solution?
We have been implementing this solution to many customers in India and the SAARC region for seven years now. This is one of the most popular virtual firewall products in the industry.
What do I think about the stability of the solution?
We have not encountered any problems with stability.
What do I think about the scalability of the solution?
A sufficient amount of planning is required to deploy a solution that is scalable. However, as Check Point allows an Open Server to deploy its VSX solution, scalability is not a problem once the base hardware is chosen appropriately.
How is customer service and technical support?
Support is one area where efforts should be required from Check Point. Customers having multiple, more than ten, gateways are encouraged to consider Diamond Support services.
Which solutions did we use previously?
We did not use any other solution previously.
How was the initial setup?
Engineers having less than three years of hands-on experience on Check Point products may find this product somewhat challenging. However, the best part is, once the product is deployed, there is no difference between virtual gateway and physical gateway from the operational perspective.
What's my experience with pricing, setup cost, and licensing?
Check Point pioneered this product, so don't look anywhere else if you are looking for a stable and scalable product with top-notch security blades.
Which other solutions did I evaluate?
We did not evaluate any alternative products.
What other advice do I have?
Choose your implementation partner very carefully. Choose someone who has done multiple, large-scale implementations and can show proof of the same in terms of customer references through emails or phone calls.
Disclosure: My company has a business relationship with this vendor other than being a customer: We are a value added partner of Check Point in India.
Jun 08 2017