In short: Check Point licensing through Forever Systems covers Endpoint Security, Email Security (formerly Harmony Email & Collaboration and Avanan), SASE, Mobile, Browse, MDR and WAF. Everything runs in one Check Point Portal tenant, most products are counted per user or device, and we bill monthly on what you use and handle changes and renewals.
What Check Point does
Check Point Software Technologies is one of the longest-established network security vendors, best known for its firewalls. Over the last few years its range has grown well beyond the network edge to cover the places people actually work: laptops, mailboxes, collaboration apps, browsers, phones and remote access.
Those user-facing products were sold for several years under the Harmony brand. In 2026 Check Point's website was reorganised into four product pillars (Hybrid Mesh Network Security, Workspace Security, Exposure Management and AI Security), and Harmony was dropped from the official product names. Harmony Endpoint is now Check Point Endpoint Security, Harmony Email & Collaboration is Check Point Email Security and the Infinity Portal is the Check Point Portal. Check Point describes these as new names for the same products, reached in the same portal, and most buyers still search for the Harmony names, so we use both.
This page is about licensing: what you count, which edition does what and how to buy. For product depth, deployment guides and comparisons, see our specialist site, Check Point Harmony UK.
The Check Point products we license
Each product below has its own licensing page on this site. They all live in the same Check Point Portal tenant, so you can start with one and add others later without a new account.
| Product | What it does | Licensed by |
|---|---|---|
| Harmony Endpoint | Endpoint Security: prevention, anti-ransomware and EDR in one agent | Protected device |
| Harmony Email & Collaboration | Email Security, formerly Avanan, for Microsoft 365, Google Workspace and collaboration apps | User |
| Harmony SASE | Check Point SASE: secure internet access and zero trust private access | User |
| Harmony Mobile | Mobile Security: threat defence for iOS and Android | User |
| Harmony Browse | Browser Security: zero-phishing and safe downloads in the browser | User |
| Check Point MDR | 24/7 managed detection and response by Check Point analysts | Endpoint, or add-on to Endpoint |
| Check Point WAF | Web application and API protection, delivered as a service | Plan |
| Check Point Infinity | The consolidated subscription and Check Point Portal tenant that holds everything | Tenant |
Email add-ons such as archiving, DMARC management, security awareness training, SaaS posture management and leaked credential monitoring are covered on the Email & Collaboration page.
How Check Point licensing works
Check Point workspace products are subscriptions; there is no perpetual licence and no hardware to buy. What you count depends on the product:
- Devices: Endpoint Security is counted per protected device, meaning each workstation or server running the agent.
- Users: Email Security, SASE, Mobile and Browse are counted per user. For email that means the mailboxes you protect.
- Services: MDR is a managed service counted per endpoint, or added on top of your Endpoint Security licences, and WAF is bought as a plan for the applications you protect.
We supply Check Point through a managed service account in the Check Point Portal. Your products sit in your own tenant, and we bill you monthly for the users and devices in use, so starters and leavers are reflected without a contract change. If you prefer a fixed annual commitment, ask us and we will set out the options. Our guide to monthly vs annual licences explains the trade-offs.
Old names and current names
Check Point has renamed a lot, so older quotes and renewal notices may not match what you see in the portal today:
| Name most people know | Current official name | Earlier names |
|---|---|---|
| Harmony Endpoint | Check Point Endpoint Security | SandBlast Agent |
| Harmony Email & Collaboration | Check Point Email Security | Harmony Email & Office; Avanan |
| Harmony SASE | Check Point SASE | Perimeter 81 |
| Harmony Mobile | Check Point Mobile Security | SandBlast Mobile |
| Harmony Browse | Check Point Browser Security | - |
| CloudGuard WAF | Check Point WAF | CloudGuard AppSec |
| Infinity Portal | Check Point Portal | - |
Harmony Connect, Check Point's earlier cloud access product, is no longer sold and has been replaced by Check Point SASE. Check Point presents the renames as new names for existing products rather than new products, so the change mainly shows in the console and in the product names on renewal quotes.
Buying Check Point through Forever Systems
We set Check Point up in your organisation's name and manage the licensing from there.
- Scope: we count devices, users and mailboxes, check what you already own and when it renews.
- Recommend: we match the edition to your risk and your team, for example Endpoint Advanced or Complete, and Email Only or Email & Collaboration coverage.
- Quote: ask us for a quote and we confirm units, data region and any minimums before you commit.
- Deploy: we create or adopt your Check Point Portal tenant, connect Microsoft 365 or Google Workspace, deploy agents and set policies.
- Manage: we add and remove users, change editions and handle renewals, all on one invoice with your other software.
Already a Check Point or Avanan customer elsewhere? We can review your tenant and move the licensing to us at renewal without reinstalling anything. Compare Check Point with other vendors on our endpoint protection and email security pages.
Explore Check Point
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Check Point licensed per user or per device?
It depends on the product. Endpoint Security is counted per protected device. Email Security, SASE, Mobile and Browse are counted per user, MDR per endpoint or as an add-on to Endpoint Security, and WAF is bought as a plan. We confirm the unit for each product on your quote.
Can I pay for Check Point monthly?
Yes. We supply Check Point through a managed service account in the Check Point Portal and bill monthly for the users and devices in use. If you would rather commit for a year, ask us and we will set out the options.
Is Avanan still sold?
Yes, under a different name. Check Point acquired Avanan in 2021 and the product became Harmony Email & Collaboration. In March 2026 Check Point announced its new name, Check Point Email Security. The API-based protection for Microsoft 365 and Google Workspace is the same product.
Do I need new licences because Check Point dropped the Harmony name?
No new product is involved. Check Point describes the change as a new name for the same products, which stay in the same portal. Existing subscriptions carry on, and renewal quotes may show the new product names. We map old and new names for you at renewal.
Do you sell Microsoft licences on this site?
No. Check Point Email Security protects Microsoft 365, but Microsoft subscriptions are handled by Forever Group's Microsoft licensing team.