Check Point Security Compliance

What do you like best?

The license for one year subscription of the compliance blade is provided with every Check Point Management Server - that's more than enough to complete the configuration of firewall and make sure that the configuration is compliant with the regulatory standards right after that.

The default repors that are available just after blade activation are sufficient enough, but you could always cusomize them as needed, e.g. by including you company name and logo - after that the repors may be used like official documentation.

It's also possible to enable automatic reporting of the compliance violation to the administrators of the system - the remidiation steps are advaised as well.

What do you dislike?

No downsides have been observer during the usage of the Complinace blade.

Recommendations to others considering the product:

Make a list of the standards you have to comply with and check it on Check Point portal - all the specs of the blade are available. I think at least 95% of the points would be covered even for big company stretched accross the worlds.

What problems are you solving with the product? What benefits have you realized?

Since we provide public telecomunication services accross the globe, our infrasturcture must comply with different regularory standards, which vary per country. The Check Point Compliance blade provides a easy way to check whether the configuration of the firewalls under you management are compliant and thus secure. We periodically check for compliance on GDPR, HIPAA and ISO 27001, and quite happy that we don't need a separate solution for every standard.