In short: Check Point Harmony SASE, now officially Check Point SASE and built on Perimeter 81, gives users secure internet access and zero trust access to private apps. It is licensed per user: Internet Access in Essentials, Premium or Complete, each on-device or hybrid, and Private Access Complete, billed monthly through Forever Systems.
What Harmony SASE is
Harmony SASE is Check Point's secure access service edge. It is built on Perimeter 81, which Check Point acquired in 2023, and replaced the earlier Harmony Connect, which is no longer sold. Check Point's website now calls it the Check Point SASE Platform (formerly Harmony SASE), listed under its Hybrid Mesh Network Security pillar. Check Point announced the end of sale of Harmony Connect in 2023.
It has two halves, licensed separately:
- Internet Access: protects users as they browse the web and use SaaS, with web filtering, DNS filtering and malware protection, wherever they work
- Private Access: zero trust network access to internal applications and networks, with policies based on user identity rather than network location, for employees, third parties and branch offices, over Check Point's global private backbone
For a vendor-neutral explanation of the category, see SASE and ZTNA on our cloud security site, and Check Point Harmony SASE on our specialist Check Point site.
Internet Access tiers and delivery options
Check Point's distinctive design choice is on-device inspection: much of the web security runs in the agent on the user's laptop rather than sending all traffic to a cloud proxy, which Check Point says improves browsing speed, localisation and privacy. It can be combined with cloud inspection in a hybrid model.
Internet Access is licensed in three tiers, each available in either delivery model:
| Tier | On-Device | Hybrid |
|---|---|---|
| Essentials | Yes | Yes |
| Premium | Yes | Yes |
| Complete | Yes | Yes |
The tiers step up in the depth of protection and control included. Rather than rely on a generic comparison, we map the features you need (for example web and DNS filtering, file protection, data loss controls and SaaS visibility) to a tier and confirm exactly what is included on your quote. On-Device suits teams who work mainly from managed laptops; Hybrid suits organisations that also need inspection in Check Point's cloud, for example for sites or devices where an agent is not practical.
Private Access
Private Access Complete is the licence for zero trust access to private resources: applications in your offices, data centres or cloud networks. Users connect with the agent, and for unmanaged devices, such as contractors' laptops, Check Point offers agentless zero trust access through its Enterprise Browser. Policies decide which users, on which devices, can reach which applications, so a contractor can be given one system rather than the whole network.
Private Access is the usual route away from a legacy remote access VPN. It can be licensed on its own, or alongside an Internet Access tier for the same users.
How it is licensed
Harmony SASE is a per-user subscription. You choose an Internet Access tier and delivery model, Private Access, or both, for the number of users who need them. Through Forever Systems the licences are provisioned in your Check Point Portal tenant and billed monthly on the users in use, which makes it practical to start with one team and expand. If you want a fixed annual term, ask us and we will set out the options.
Requirements to plan for include an identity provider for user sign-in (Microsoft Entra ID, Google Workspace and Okta are common), the agent on users' devices for on-device inspection, and network connections from your sites or cloud networks for Private Access. We confirm agent platform support for your estate before quoting.
Who it suits and how we help
Harmony SASE suits organisations replacing a remote access VPN, supporting hybrid or remote staff, giving contractors narrow access to specific systems, or connecting several sites without backhauling traffic to head office. If you also run Harmony Endpoint, both are managed in the same Check Point Portal.
We scope users, applications and sites, recommend the tier and delivery model, connect your identity provider, publish private applications and roll out the agent in stages. Ask us for a quote, or compare other options on our SASE, ZTNA and business VPN page.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Harmony SASE the same as Perimeter 81?
Yes. Check Point acquired Perimeter 81 in 2023 and its platform became Harmony SASE. Check Point now calls it the Check Point SASE Platform.
What is the difference between on-device and hybrid?
On-device inspection runs web security in the agent on the user's device. Hybrid combines that with inspection in Check Point's cloud. Each Internet Access tier is available in either model, and we recommend one based on your devices and sites.
How is Harmony SASE licensed?
Per user. Internet Access is licensed in Essentials, Premium or Complete, each on-device or hybrid, and Private Access is licensed as Private Access Complete. You can buy either or both, billed monthly through us.
What happened to Harmony Connect?
Check Point announced the end of sale of Harmony Connect in 2023 and named Harmony SASE, now the Check Point SASE Platform, as its successor. If you still run Harmony Connect, we can plan the move.