2026 – present
Check Point
The company that made the stateful firewall a product - and still builds the management model everything else is compared against.
Check Point enters this record from the opposite end of the story to everything around it. Most chapters here are about a company that arrived to solve a problem the incumbents had left open. Check Point IS the incumbent: it shipped stateful inspection as a product in 1993 and effectively created the category every firewall on this site competes inside. Learning it now, after two decades spent on the platforms that came to challenge it, is a strange and useful way round.
The company that made the firewall a product
Packet filtering existed before 1993 and stateful inspection was not a Check Point invention in the academic sense. What Check Point did was turn it into something you could buy, install and administer without building it yourself, and then wrap it in a management model that treated policy as a database rather than a device configuration. That second decision is the one that aged best. Thirty years later the separation of management server from enforcement point, and the idea that you publish a policy before you install it, is still the thing that surprises people arriving from other vendors - and it is still the model those vendors are compared against.
Learning it backwards
The CCSA and CCSE study guides on this site were written from Check Point's own published exam blueprints, and they are deliberately weighted toward what catches someone arriving from FortiGate or BIG-IP. That the rule base ends in an implicit drop that logs nothing. That policy layers are an AND rather than an OR, so accepting in one layer only means the traffic proceeds to the next. That publish and install are two separate actions and stopping after the first changes nothing. None of these is difficult; all of them are the kind of thing you learn once, usually by getting them wrong. Red Education is a Check Point Authorized Training Center, named Check Point Software Technologies Platinum Elite ATC Partner of the Year 2024, which is how this chapter opened.
Certifications
Studying toward CCSA and CCSE. Certifications will be recorded on the credentials page as they land; the study guides here are study material and carry no delivery claim.
Founding stories
Check Point Software Technologies
Gil Shwed carried the idea out of Unit 8200, the Israeli signals-intelligence unit where he had connected classified networks: inspect traffic statefully, tracking connections rather than judging lone packets. With Marius Nacht and Shlomo Kramer and $250,000 of seed money from BRM, he built FireWall-1 - and with it, effectively, the commercial firewall market. Sun signed an OEM deal in 1994, HP a distribution deal in 1995, and by February 1996 IDC measured Check Point at forty percent of the world firewall market. Kramer left in 2003 to found Imperva, whose page also lives in this section; Shwed ran the company for thirty-one years, the longest CEO tenure on Nasdaq.
The timeline
- Stateful inspection
Founded in Ramat Gan on Shwed's core idea, patented as Stateful Inspection: a firewall that remembers connection state. FireWall-1 ships the next year, with VPN-1 among the first commercial VPN products close behind.
- Market leader, then IPO
IDC names Check Point the worldwide firewall market leader at a 40 percent share in February; the NASDAQ listing as CHKP follows the same year - Israel's security industry arrives on the world stage.
- The Nokia appliances come home
Check Point completes the acquisition of Nokia's security appliance business - the hardware line that had carried FireWall-1 into countless data centers - and consolidates software and metal under one roof, alongside the Software Blades architecture introduced the same year.
- Buying into the cloud era
Dome9 (~$175 million) brings cloud security posture management, opening an acquisition run that adds Avanan for cloud email security in 2021 - the CloudGuard and Harmony families take shape.
- Perimeter 81 and the SASE turn
The ~$490 million acquisition of Perimeter 81 pulls security service edge into the portfolio for hybrid work, folded into the Infinity platform alongside Quantum (network) and the 2024 Cyberint threat-intelligence purchase (~$186 million).
- The second CEO in thirty-one years
December 2024: Nadav Zafrir, Team8 co-founder and former commander of Unit 8200, becomes only the second CEO in company history; Gil Shwed moves to Executive Chairman - the firewall's inventor handing over the company it built.
Check Point leadership page; announced July 24, 2024.
Flagship products and solutions
- QuantumThe firewall lineage today: gateways from branch to hyperscale, the direct descendants of FireWall-1.
- CloudGuardCloud network security and posture management - the Dome9 heritage grown into the cloud family.
- HarmonyWorkspace security: endpoint, email (the Avanan lineage), mobile, and SASE (the Perimeter 81 lineage).
- Infinity PlatformThe unifying architecture and threat-intelligence brain (ThreatCloud AI) across all three families.
Key innovations
- Stateful inspectionThe patent that defined how firewalls work - connection-state tracking as the baseline every packet filter since has been measured against.
- The security software companyCheck Point proved a pure software vendor could own a network security category, and its profitability discipline became an industry reference point.
Main markets
Check Point protects over 100,000 organizations and competes across network, cloud, and workspace security against Palo Alto Networks, Fortinet, and Cisco - the elder statesman of the firewall market it created, now selling the AI-driven Infinity platform.
Analyst standing
- A fixture of the network-firewall analyst evaluations for three decades, from IDC's 40 percent share measurement in 1996 through the modern Magic Quadrant era.