Check Point IPS (Intrusion Prevention System) Reviews & Product Details

Check Point IPS has a rich database for detecting known attacks. It is updated automatically frequently. The IPS feature can be deployed alone in L2 bridge mode or with other security blades in NGFW. Review collected by and hosted on G2.com.

To be effective, an IPS appliance needs to intercept encrypted traffic. Hence, we should enable HTTPS inspection for IPS to decrypt the traffic. But it will consume CPU usage. Review collected by and hosted on G2.com.

It prevents cyber attackers from discovering weak points in our applications and causing harm to the company data. It has saved the company the time that IT team used to detect attacks and take necessary actions. Review collected by and hosted on G2.com.

I have no negative opinion towards the performance of this great product. It has created best and most trusted working environment. Review collected by and hosted on G2.com.

Wide signature support, good reporting and nice integration with smart event, sandblast etc. Review collected by and hosted on G2.com.

Performance impact on gateway is a little bit frustrating, Also policy installation makes it a little bit tiresome also. Review collected by and hosted on G2.com.

I like to customize the profile which can be managed according to severity; performance impact, year, etc. This is extremely important to decide which signature will be enabled; which will be ignored. Review collected by and hosted on G2.com.

Sometimes the "scope" and "source, destination" might be confusing. Normally scope consists of both source and destination. I wonder why the scope feature is in it. Review collected by and hosted on G2.com.

Easy to activate, configure and implement. Easy to assign profiles and rules to the firewalls, easy to monitor, ability to configure in detect mode. It is a very good product. Review collected by and hosted on G2.com.

At the moment, I do not dislike anything about this specific blade. Review collected by and hosted on G2.com.

Cheap compared to other vendors. Very easy to implement. It really prevents attacks. We test it with multiple breach detection systems, and the score is very high. Rapid updates are a big plus. It has massive coverage in terms of the number of signatures. False positives are low. Confidence and performance levels for profiles is a big plus. It has an autoupdate and activation mode settings. Enable and disabling is very easy. Review collected by and hosted on G2.com.

It has no ASIC support, any high or critical performance signatures affect the firewall performance. IPS bypass is a good option for connectivity, but it depends on the core. Too many updates and signatures on the database, some signatures should be removed. Staging signatures should be manually analyzed. There's no NBA in terms of IPS functionality. Core protection functions are somehow tricky and affect the connectivity. Review collected by and hosted on G2.com.

With the zero-trust policy of Checkpoint, IPS signatures updates as much as can be when compared to other firms. Also, logging side easy to readible. Review collected by and hosted on G2.com.

Some product need bypass for all signatures like fireeye howevercheckpoint default security mechanism do not allowed to by-pass all of the signatures. Review collected by and hosted on G2.com.

Signature updates are satisfied. We could have a chance to test the detection and prevention capabilities, and the solution passed the test. Cloud supported Threat Intelligence is fed from worldwide this is a big plus for security metrics. Review collected by and hosted on G2.com.

The visibility of the signature hits can be improved for dashboards. This visibility could be handled by SIEM solution Review collected by and hosted on G2.com.

The protection provided against the various vector, ransomware, and malware that can be attached to any vector, preventing any security threats that can attack our corporation Review collected by and hosted on G2.com.

The way it is set up once you enable the blade on the dashboard can increase the performance on the server when you change the mode to detect and when you have more blades enabled, the performance can go all the way up Review collected by and hosted on G2.com.

IPS is a very static security engine and doesn't have a very complex structure. So there is no need to have best of breed/dedicated IPS solutions. With Check Point IPS module, we can easily enable related IPS signatures to have security and have visibility even on encrypted traffic. Review collected by and hosted on G2.com.

We may have visibility of IPS signatures in technical detail. When prevention or detection occurs, it would be good to understand why specific traffic matches on the signature. Review collected by and hosted on G2.com.