Check Point Quantum SASE

Why do you need Check Point Quantum SASE?

67% of employees work in a hybrid model, and 85% of network traffic goes directly to the internet and cloud, bypassing traditional perimeter security. The classic hub-and-spoke architecture, where all traffic passes through a central firewall, generates latency, bottlenecks, and user frustration. At the same time, disparate point solutions — separate VPN, proxy, CASB, and DLP — create security gaps and management silos.

Check Point Quantum SASE is a single-vendor SASE platform that combines ZTNA, Secure Web Gateway, CASB, Firewall-as-a-Service, and DLP in one cloud-delivered solution. With a global backbone of over 50 Points of Presence and ThreatCloud AI integration, Quantum SASE provides secure and fast access to resources from anywhere in the world.

How does it work?

Internet Access (SWG + FWaaS)

Secure internet access:

• Secure Web Gateway with URL filtering and SSL inspection
• Firewall-as-a-Service with full threat prevention (IPS, anti-malware, anti-bot)
• ThreatCloud AI for real-time protection
• DNS Security with phishing and C&C protection
• Bandwidth management and QoS

Private Access (ZTNA)

Zero Trust access to corporate applications:

• Per-application access — users see only authorized applications
• Continuous verification — ongoing identity and device verification
• Device posture check — verifying device security status
• Clientless access — browser access for BYOD and contractors
• Microsegmentation — no access to the entire network, only to specific resources

SaaS Security (CASB + DLP)

SaaS application protection:

• CASB — visibility and control over shadow IT
• DLP — sensitive data protection in cloud applications
• SaaS Security Posture Management — detecting SaaS misconfigurations
• Threat prevention for files in SaaS (SharePoint, Google Drive, Box)
• Compliance enforcement for regulated data

Key features

Unified Agent

• Single agent for Internet Access, Private Access, and endpoint security
• Integration with Harmony Endpoint — shared EPP/EDR + SASE agent
• Seamless user experience — automatic switching
• Support for Windows, macOS, iOS, Android, Linux
• Clientless portal for BYOD and guest access

Global Backbone

• 50+ Points of Presence worldwide
• Anycast routing for lowest latency
• 99.999% availability SLA
• Peering with major cloud providers (AWS, Azure, GCP)
• Traffic optimization for real-time applications (Teams, Zoom)

Policy Management

• Unified policy — one policy for all SASE components
• Identity-aware rules — policies per user, group, role
• Risk-based adaptive access — policy adjustment based on risk level
• Management from Infinity Portal
• API-first for automation

Visibility and Analytics

• Real-time dashboards with user activity
• Shadow IT discovery — detecting unauthorized SaaS applications
• Application usage analytics
• Security event correlation with Infinity XDR
• Compliance reporting

Who is it for?

• Organizations with a hybrid work model (office + remote)
• Companies migrating applications to cloud and SaaS
• Enterprises looking to consolidate VPN, proxy, and CASB into a single platform
• Organizations implementing Zero Trust Architecture
• Companies using Check Point Quantum seeking consistent on-prem + cloud architecture

FAQ

How does Quantum SASE differ from traditional VPN? Traditional VPN grants access to the entire network after authentication — meaning a compromised device has access to all resources. Quantum SASE with ZTNA provides per-application access with continuous identity and device verification. Users see only the applications they are authorized for, and each session is independently verified.

Does Quantum SASE replace the on-premises firewall? No. Quantum SASE complements on-premises firewalls by protecting users outside the office and traffic going directly to the internet/cloud. For in-office users, traffic still passes through the Quantum NGFW. Both platforms are managed from a single Infinity Portal and share threat intelligence from ThreatCloud AI.

What is the user experience like? Quantum SASE is designed with user experience in mind. A single lightweight agent automatically routes traffic to the nearest PoP, ensuring minimal latency. Users don’t need to manually connect to VPN — protection is always-on. For web applications, clientless access is available through the browser.

What does licensing look like? Per-user licensing with packages: Internet Access (SWG + FWaaS), Private Access (ZTNA), Full SASE (all components). Annual or multi-year subscription. Global backbone and Infinity Portal management included in the price. No additional costs for PoPs or bandwidth.