Harmony Connect (CloudGuard Connect)

What do you like best?

Cloud Guard or Harmony Connect is SAAS Offering from CheckPoint. To protect Secure access using multiple Security Solutions from Checkpoint, which provide numerous Security solutions such as NGFW, Web Gateway, ZTNA, Email/Browser Protection, DLP, Threat Prevention, and DNS Security.

Single Agent is installed on Endpoint or User can connect via browser to access this services

Checkpoint has integration with CDN and SD-WAN, so traffic is being routed without adding latency

Access to services are provided via a secure tunnel

ZTNA controls network access and is also used for connecting Data Center and Cloud for the remote user. The policy is created based on application, and access is defined for each user or security group

Web-based access is control using a Cloud proxy solution provided by Checkpoint.

Broker Server is installed in Cloud and On-Prem for providing access to the remote user using ZTNA.

NGFW for allowing/blocking depending upon retirement.

Browser protection protect by scanning and cleaning any file downloaded on Endpoint

What do you dislike?

Access to Datacenter and Cloud via ZTNA adds latency as all traffic is routed to Cloud Guard. Policy validation is done on the cloud, and accordingly, access is provided.

Issue Hair Pinning of Network traffic for User who wants to access Data Center and connected from Remote office

User-based license

Recommendations to others considering the product:

License are not cheap so need to decide what services are required for all user and then decision need to be taken accordingly if you want to use an individual feature or complete solution as there are a player who having a better product such as Proxy or ZTAN

What problems are you solving with the product? What benefits have you realized?

Centralize management for all Security Solution (We are performing POC to check additional benefits with the solution as its providing multiple services for protecting network traffic