In short
Check Point SASE, formerly Harmony SASE, is Check Point's single-vendor SASE platform: Private Access, Internet Access, SaaS Security, GenAI Security and Secure SD-WAN, with on-device and cloud inspection. Forever Systems, a Check Point Advanced Partner, can quote and set up Check Point SASE for UK organisations, licensed per user, with subscriptions that can be billed monthly, terms confirmed at quote.
Get a quote for Check Point SASE
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
What is Check Point SASE?
Check Point's website now calls the product the Check Point SASE Platform (Formerly Harmony SASE). Check Point describes it as a "single-vendor SASE solution": one vendor for the security cloud, user access and the SD-WAN at your sites. It is the same product our specialist site covers under Check Point Harmony SASE (opens in a new tab), and its history as Perimeter 81 (opens in a new tab) is covered there too.
The Check Point SASE platform is built from five areas:
| Area | What it covers |
|---|---|
| Private Access | Zero trust access to company resources on premises or in the cloud: ZTNA, agentless ZTNA, the Enterprise Browser (opens in a new tab) and a global private backbone |
| Internet Access | Protection from internet-borne threats: firewall as a service, hybrid secure web gateway, browser, mobile and automatic Wi-Fi security |
| SaaS Security | CASB with inline and API-based enforcement, DLP and SaaS posture management |
| GenAI Security | Prompt-level monitoring of generative AI use, for safer AI adoption |
| Secure SD-WAN | Smart routing and failover at business sites |
Sources: checkpoint.com Check Point SASE (opens in a new tab) and sase.checkpoint.com (opens in a new tab), checked 9 November 2026.
Not sure which option fits? Ask us
Tell us what you need and we will recommend the right option for your organisation, with a quote.
How Check Point SASE inspects traffic
Check Point's FAQ says the platform "uses a hybrid architecture with on-device and cloud security inspection options". That matters when you compare SASE vendors:
- On-device inspection keeps web filtering and threat prevention on the laptop, so not every request has to travel to a cloud gateway
- Cloud inspection applies the same policy to traffic sent to Check Point's points of presence, including from branches
- Agentless options (agentless ZTNA and the Enterprise Browser) cover contractors and unmanaged devices
- Existing on-premises kit can stay in place, which Check Point says allows gradual adoption
Detail on each access type, including Private Access (opens in a new tab) and the Enterprise Browser (opens in a new tab), is on our specialist site.
Check Point SASE for branches: Secure SD-WAN
Secure SD-WAN is what makes Check Point SASE full SASE rather than a Security Service Edge (SSE) on its own. Check Point lists zero-touch provisioning with branch-level security and failover across WAN links such as MPLS, 5G and broadband.
If you already run Check Point Quantum firewalls, the SASE platform can sit alongside them while you decide which sites move first. Our SASE vs SD-WAN guide explains how the network and security halves fit, and SASE vs firewall covers when to keep, shrink or replace branch firewalls.
Is Check Point SASE the right fit for you?
We will check it against your systems and requirements and recommend the right option.
How Check Point SASE is licensed
Check Point SASE is licensed per user, with Internet Access and Private Access as the main building blocks and editions that add capability. Branch connectivity is added for the sites that need it. Edition detail, without prices, is on Check Point Harmony SASE pricing (opens in a new tab) and on our licensing site under Harmony SASE licensing (opens in a new tab).
Subscriptions can be billed monthly, terms confirmed at quote. Pricing depends on users, editions, sites and term, so ask us for a quote.
What Forever Systems does
As a Check Point Advanced Partner, Forever Systems can quote and set up Check Point SASE. We can:
- Assess your remote access, web filtering, SaaS and AI use, and branch links
- Choose the access types and editions that fit, including agentless access for contractors
- Pilot with one group of users, then extend to everyone and add sites
- Support the platform afterwards, with scope confirmed at quote
Contact us to talk it through. For the ZTNA angle on its own, see Check Point ZTNA (opens in a new tab); other platforms are compared on SASE vendors.
How Forever Systems helps with SASE
Forever Systems supplies several SASE and Security Service Edge (SSE) platforms, so we can recommend the one that fits your sites, your people and the network and security kit you already run.
- Assess first: we look at your current VPN, firewalls, WAN links and identity set-up, and the applications people need to reach
- Help you choose: single-vendor or dual-vendor SASE, or Security Service Edge (SSE) first and SD-WAN later, matched to what you need now
- Pilots and phased roll-out: we can help you start with one group of users or one site, then extend policy step by step
- Licensing in one place: subscriptions can be billed monthly, with terms confirmed at quote
We work with businesses, schools, charities and public sector organisations. Pricing depends on users, sites, components and term, so ask us for a quote.
Frequently asked questions
What is Check Point SASE?
Check Point SASE (formerly Harmony SASE) is Check Point's secure access service edge platform. It combines Private Access, Internet Access, SaaS Security, GenAI Security and Secure SD-WAN, with inspection on the device or in Check Point's cloud.
Is Check Point SASE the same as Harmony SASE?
Yes. Check Point's website now names the product the Check Point SASE Platform (Formerly Harmony SASE).
Is the Check Point SASE platform single-vendor?
Check Point describes it as a single-vendor SASE solution: the security cloud, user access and Secure SD-WAN all come from Check Point.
Does Check Point SASE need an agent?
Not always. It offers an agent with on-device inspection, and agentless ZTNA and an Enterprise Browser for unmanaged devices and contractors.
How is Check Point SASE priced?
Per user, by access type and edition, with sites added as needed. Subscriptions can be billed monthly, terms confirmed at quote. Ask us for a quote.
Still have a question about Check Point SASE?
Ask us and a member of our team will get back to you.
More SASE guides
Cisco SASECisco Secure Access with Cisco SD-WAN or Meraki SD-WAN, explained.Barracuda SecureEdgeBarracuda SecureEdge: Secure SD-WAN, zero trust access, firewall as a service and web security in one SASE platform.