In short
Check Point antivirus for business endpoints is the anti-malware engine in Check Point Endpoint Security, the product formerly called Harmony Endpoint. One agent combines anti-malware with anti-ransomware and file restore, anti-exploit, anti-bot and behavioural protection, plus EDR, on Windows, macOS, Linux and VDI. Check Point gateways have a separate Anti-Virus software blade.
Get a quote for Check Point antivirus
Tell us roughly how many users or sites you have and we will reply by email with options and a quote.
Does Check Point make antivirus?
Yes, though not usually under that name. Check Point uses the word antivirus in two places, which causes confusion:
- On endpoints (laptops, desktops and servers), antivirus is the anti-malware engine inside Check Point Endpoint Security, the product previously called Harmony Endpoint and, before that, SandBlast Agent. Check Point's website now uses the new name, and quotes and renewals may use either.
- On Check Point firewalls, there is a separate Anti-Virus software blade that scans traffic passing through the gateway. That protects the network edge, not the devices themselves.
Most people searching for Check Point antivirus for their business want the first: protection installed on each device. That is what this page covers. For the full product, editions and deployment detail, our specialist site covers Check Point Endpoint Security.
What the Check Point endpoint agent protects against
Check Point Endpoint Security is one agent that combines several prevention engines, so anti-malware is one layer among several:
- Anti-malware: detects and blocks known and unknown malware on the device.
- Anti-ransomware with file restore: watches for ransomware behaviour, stops it and restores files the attack encrypted.
- Anti-exploit: protects common applications against attempts to exploit vulnerabilities.
- Anti-bot: detects devices that are already infected and trying to contact an attacker's command servers, and blocks that communication.
- Behavioural Guard: Check Point says it identifies fileless attacks and malicious behaviour before it causes harm.
- Browser protection: zero-phishing, URL filtering and password reuse protection in the browser.
Verdicts draw on ThreatCloud AI, Check Point's threat intelligence service, which also feeds its email, mobile and network products. Detection and response (EDR), with automated forensics reports mapped to MITRE ATT&CK, is included in every edition. For more on how it handles ransomware specifically, see Check Point anti-ransomware.
Editions at a glance
Every edition uses the same agent; the licence decides which components are switched on. Check Point's current material lists Advanced, Complete and Elite; Basic appears in older material and is also available through us.
| Capability | Basic | Advanced | Complete | Elite |
|---|---|---|---|---|
| Anti-malware, anti-ransomware, anti-exploit, anti-bot | Yes | Yes | Yes | Yes |
| Firewall, application control, compliance, remote access VPN | Yes | Yes | Yes | Yes |
| Browser protection: zero-phishing, URL filtering | Yes | Yes | Yes | Yes |
| EDR: forensics, MITRE ATT&CK mapping, threat hunting | Yes | Yes | Yes | Yes |
| Threat Emulation (sandboxing) and Threat Extraction (file sanitisation) | - | Yes | Yes | Yes |
| Full disk encryption and removable media encryption | - | - | Yes | Yes |
| XDR, posture management, DLP and GenAI controls | - | - | - | Yes |
So the antivirus layer is the same in every edition. What changes as you move up is sandboxing of downloaded files, encryption and cross-product XDR. Our specialist site explains the Harmony Endpoint editions in more depth.
Not sure which edition fits? Ask us
Tell us what you need and we will recommend the right edition for your organisation, with a quote.
Platforms and management
Check Point lists Windows workstations, Windows Server, macOS, the major Linux distributions and VDI and terminal server environments. Feature coverage is fullest on Windows, and some features vary by platform, so we check your estate against Check Point's current support list before quoting.
Management is normally in the cloud through the Check Point Portal, with nothing to host. Organisations that must keep management in-house can use an on-premises management server instead. Check Point lists Microsoft Intune and Jamf for deploying the client, and other software distribution tools can push the package too. If you have Macs or servers in the mix, our guides to antivirus for Macs in business and server antivirus cover the wider picture.
The gateway Anti-Virus software blade
If you already run Check Point firewalls, you may see Anti-Virus listed as a software blade on the gateway. It scans traffic passing through the firewall for malware, which is a different job from protecting each device.
Gateway scanning and endpoint protection do different jobs. The gateway sees traffic crossing your network edge; the endpoint agent protects the device itself, including when it is on home Wi-Fi, on a train or offline. Most businesses with laptops that leave the office need protection on the device, whatever the firewall does. Configuring gateway blades is outside the scope of this site.
Is Check Point antivirus the right fit for you?
We will check it against your systems and requirements and recommend the right option.
How it is licensed
Check Point Endpoint Security is a subscription counted per protected device: each workstation, laptop or server running the agent uses a licence. Through Forever Systems it is provisioned in your own Check Point Portal tenant and can be billed monthly on the devices in use; we confirm the terms at quote. You can license groups of devices at different editions, and moving up an edition is a licence and policy change on the same agent.
There are no prices on this site: ask us for a quote. Our licensing site explains Harmony Endpoint licensing, and our guide to business antivirus cost explains what drives cost across vendors.
Check Point, Defender and detection and response
Many organisations comparing Check Point already have Microsoft Defender Antivirus on Windows. Our page on whether Windows Defender is enough covers the general question, and our specialist site compares Harmony Endpoint vs Microsoft Defender directly.
Because EDR is included in every Check Point edition, the question is less whether you get detection and response and more who acts on it. Check Point MDR is Check Point's own managed service, added on top of endpoint licences. For the wider topic, see our EDR, XDR and MDR guidance on endpointsecurity.uk. Check Point's malware protection also supports the malware protection control in Cyber Essentials.
How we help
We can count your devices, recommend an edition, arrange a trial in your own tenant if you want one, deploy the agent, remove or reconfigure your old antivirus and tune policies, then handle additions, upgrades and renewals. If you are weighing Check Point against other vendors, see our endpoint protection vendors page.
Contact us with your device count and the operating systems you run.
How Forever Systems helps with endpoint protection
We are an independent UK IT and cyber security provider. We supply business antivirus and endpoint protection from several vendors, so we can recommend what fits your devices, your team and your budget rather than pushing one product.
- Review what you have: we look at your current antivirus, your Microsoft licences and the devices you need to cover before suggesting anything new
- Compare the options: next-generation antivirus, EDR and managed services from vendors including CrowdStrike, SentinelOne, ThreatDown, Bitdefender, Trend Micro, Sophos, Check Point, WatchGuard and Acronis
- Licensing and quotes: the right edition and licence count for your Windows, Mac, Linux, server and mobile devices, with pricing confirmed at quote
- Deployment and migration: we can help roll out agents, set policies and remove the old product cleanly
- Support after go-live: help with policy tuning, alerts and renewals, with the scope agreed at quote
We can also help with the rest of your security, from endpoint security and EDR to Cyber Essentials and security awareness training.
Frequently asked questions
Does Check Point have antivirus?
Yes. On business endpoints, antivirus is the anti-malware engine inside Check Point Endpoint Security, formerly Harmony Endpoint, alongside anti-ransomware, anti-exploit, anti-bot and behavioural protection. Check Point firewalls also have a separate Anti-Virus software blade for gateway traffic.
Is Check Point Endpoint Security the same as Harmony Endpoint?
Yes. Check Point's website now calls Harmony Endpoint Check Point Endpoint Security, and its solution brief lists the same Advanced, Complete and Elite packages. The product was originally called SandBlast Agent, so older quotes may use any of the three names.
Does Check Point endpoint antivirus include EDR?
Yes. Detection and response with automated forensics reports, MITRE ATT&CK mapping and threat hunting is included in every edition. Cross-product XDR is part of Elite.
Which platforms does Check Point endpoint protection support?
Check Point lists Windows workstations, Windows Server, macOS, the major Linux distributions and VDI and terminal server environments. Some features vary by platform, so we check your estate against the current support list.
How is Check Point endpoint protection licensed?
Per protected device, on a subscription, in your own Check Point Portal tenant. Through us it can be billed monthly on the devices in use, and you can license groups of devices at different editions. Ask us for a quote.
How much does Check Point antivirus cost?
It depends on how many devices you protect, the edition and whether you want extras such as MDR. We do not publish prices; ask us for a quote and we will recommend the edition that fits.
Still have a question about Check Point antivirus?
Ask us and a member of our team will reply by email.
More endpoint protection guides
SophosSophos antivirus for business: Sophos Endpoint's protection layers, servers and Linux, and how it is licensed.
WatchGuardWatchGuard Endpoint Security Basic, Prime, 360 and Elite compared, with the old EPP and EPDR names and modules.Ransomware protectionHow endpoint protection, dedicated anti-ransomware, backup and agent resilience fit together against ransomware.EPP vs EDRThe difference between endpoint protection (EPP) and EDR, which products bundle both, and when EPP alone is reasonable.Vendors comparedThe endpoint protection vendors we supply compared on platforms, licence unit, EDR upgrade path and managed options.