CheckMates Fest 2025!
Join the Biggest Event of the Year!
Simplifying Zero Trust Security
with Infinity Identity!
Zero Trust Implementation
Help us with the Short-Term Roadmap
CheckMates Go:
Recently on CheckMates
Slides will be added soon.
An edited Q&A will appear below the video.
Yes, we do support IPsec, Wireguard and OpenVPN to allow connectivity with any device.
This is indeed an option which we are evaluating. There are no short term plans to do so but consolidation is key.
While it is possible to transition, this will not happen automatically. Please contact your local Check Point office for more information.
We support geo blocking in our agentless solution, more policy enhancements are on the roadmap.
It can replace both by providing agent based and agentless access, depends on the use case.
Most of the PoPs are owned and managed by Check Point - equipment that we buy and host in different co-locations like Equinix and others. We do use some semi private PoPs which are owned by 3rd party cloud vendors but are managed by us.
Most if not all the parts of P81 will stay and further expanded. We are integrating the management portal to the infinity portal at the end of this month.
Yes, we should be able to support that.
Top down, as a regular firewall policy. TLS inspection is performed directly on the endpoint device.
https://support.perimeter81.com/docs/360008864000-managing-application-access
Yes, apps are available for iOS and Android.
Yes, that is the direction and we’re planning to introduce branch security and SD-WAN in 2024.
CASB is a high priority item on our 2024 roadmap.
Users are redirected automatically to closest location, but can switch between networks if needed.\
Implicit allow as a baseline.
Not at this time, but we are considering others.
Reverse proxy via cloud edge, more info here:https://support.perimeter81.com/docs/360008864000-managing-application-access
We’re currently exploring this.
Right now it is a manual process to convert, but we are working on tools to simplify this migration.
Yes, you can manage multiple tenants within one “parent” tenant, you can also run multiple networks within one tenant.
We have an FQDN support, so you can type *.youtube.com to have a match on the rule.
Not currently, but this will be available soon.
For SWG - allow logs are planned to be introduced in 2024.
For FWaaS we log all the traffic.
It’s included in all the plans
There are 3 options:
Possible with private applications, not SWG.
Customer Success Engineer that will help you during the on-boarding and any support you’d need throughout your contract.
Planned for future.
Yes.
Not yet, this will be possible with CASB
We’re planning to bring Check Point’s security engines in Quantum SASE in 2024, stay tuned
Of course, We have a really great MSSP feature set including multi-tenancy, role based access, tiered pricing and we gained really great success in that segment. We put a lots of focus there alongside enterprise growth.
Yes it is included in Private Access package.
We integrate with various iDP out of the box, generic SAML and LDAP.
Yes.
For Partners that have access to DemoPoint, there is a blueprint for Quantum SASE. You can also reach out to sase-partners@checkpoint.com.
For customers, you can schedule a demo here: https://www.perimeter81.com/demo-cp?utm_source=cp&utm_medium=website&utm_campaign=tachtalk
Yes, we do support objects: IP, Categories, FQDNs and URLs.
Currently, only the presence of specific AV.
We’re planning export of events via Infinity Portal and will support any format supported there, including generic syslog.
Presently, it's in the US only. EU is on the roadmap.
Yes, we have API support and also SCIM support
Not to publish applications but our cloud edge can easily connect to a gateway.
Yes
https://support.perimeter81.com/docs/adding-regions-and-gateways
We’re working hard to complete the gaps, a lot is planned for 2024
Awesome presentation 👍
I recently had the opportunity to learn about the Quantum SASE solution during your valuable presentation also no SE MASTERS23, and I was truly impressed with its capabilities.
To further explore its features and effectively present them to our customers, I would greatly appreciate it if you could provide us with the link and read-only credentials for the Quantum SASE demo. I know that there's a Demo for this purpose but I couldn't find the link to access it. This would allow us to delve deeper into the solution and tailor our presentations to the specific needs and interests of our clients.
Thank you in advance for your assistance. I look forward to the opportunity to showcase the Quantum SASE solution to our customers.
Cheers!
Sami.
Absolutely...looks promising!
Andy
Partners should have access to a Quantum SASE Demo in TechPoint, which you can access through here:
Comments and Questions
1. Remote Browser Isolation which other vendors provide
2. User Entity and Behavior analytics. This would be critical in being able to identify a possible compromised host or internal risk and utilize automation to remediate and this should be utilized across products.
3. Cloud Based Applications in Rules - I see the ability to utilize web categories but not defined cloud applications to therefore restrict access further. One example, user needs access to Google Drive and not an entire category that gives them access to additional file upload/downloads services. Other products you can utilize a cloud application object to limit that access.
4. Reporting - I did not see much in the video but this is critical when showing ROI to management. Also, some products provide continuous evaluation reports on security best practices/posture which is great when going through an audit.
5. I see that you are able to limit access by defining a program in the SWG which is great since the majority of time just the web browser needs access and not the entire system when a user is logged in. How does it identify the program, by hash or by user-agent.
6. How does the client software register itself with the service and your tenant?
7. Would be nice to be able to profile normal traffic via the VPN to get a visual on what your users are doing and the resources they are accessing. Would go a long way in restricting access to only what is needed.
8. CASB - Critical for todays SaaS applications and it must be comprehensive including risk scores and being able to remediate risky activity or unsanctioned SaaS applications.
9. DLP - Do not need to explain why this is needed.
10. Is Split tunneling supported and would you be able to utilize Checkpoint update objects and applications?
At present, the policy constructs are as they existed prior to the Check Point acquisition of Perimeter 81.
I assume things like Updatable Objects and definitions for Cloud applications are items that will be integrated as part of the roadmap.
CASB/DLP are roadmap items, as acknowledged in the session.
Split tunneling is supported, yes.
@Dima_M might be able to answer your other questions.
where can I find the PPT deck for this session?
Unfortunately, we were not provided the slides.
If you're a partner, we have slides in the CheckMates for Partners section under Master Our Solutions.
Note that since we've done this webinar, the product was rebranded as Harmony SASE.
Slides will be added soon.
An edited Q&A will appear below the video.
Yes, we do support IPsec, Wireguard and OpenVPN to allow connectivity with any device.
This is indeed an option which we are evaluating. There are no short term plans to do so but consolidation is key.
While it is possible to transition, this will not happen automatically. Please contact your local Check Point office for more information.
We support geo blocking in our agentless solution, more policy enhancements are on the roadmap.
Fri 10 Jan 2025 @ 10:00 AM (CET)
CheckMates Live Netherlands - Sessie 32: Infinity External Risk Management (CyberInt)Fri 10 Jan 2025 @ 10:00 AM (CET)
CheckMates Live Netherlands - Sessie 32: Infinity External Risk Management (CyberInt)About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
