In short: Harmony Email and Collaboration plans combine two coverage options with two security tiers. Email Only protects Microsoft 365 mail and Gmail; Email & Collaboration adds OneDrive, SharePoint, Teams, Slack, Google Drive, Box, Dropbox and ShareFile. Advanced Protect gives full threat protection, and Complete Protect adds data loss prevention. Add-ons are bought separately.
How the plans are structured
Check Point's current packaging is a simple grid. You pick one coverage option and one security tier, then add any extras:
| Coverage | Advanced Protect | Complete Protect |
|---|---|---|
| Email Only: Microsoft 365 mail and Gmail | Email Only, Advanced Protect | Email Only, Complete Protect |
| Email & Collaboration: mail plus OneDrive, SharePoint, Teams, Slack, Google Drive, Box, Dropbox and ShareFile | Email & Collaboration, Advanced Protect | Email & Collaboration, Complete Protect |
All four combinations use the same API connection, the same console in the Check Point Portal and the same threat engines. The coverage option decides which apps are protected; the tier decides whether data loss prevention is switched on.
Coverage: Email Only or Email & Collaboration
Email Only protects Microsoft 365 mail (Outlook) and Gmail. It suits organisations where email is the main way files and links arrive, or where collaboration apps are tightly locked down.
Email & Collaboration extends the same protection to the places where people now share files and messages:
- Microsoft OneDrive, SharePoint and Teams
- Google Drive
- Slack
- Box, Dropbox and ShareFile
This matters because attackers also use shared files and chat messages to deliver malicious links, and because a compromised guest or supplier account can post into a Teams channel or shared folder without ever sending an email. If your staff work in Teams or Slack every day, or you share files with external parties through OneDrive or Dropbox, Email & Collaboration is usually the better fit.
Security tiers: Advanced Protect vs Complete Protect
Check Point's comparison table shows the same threat protection in both tiers. The difference is data loss prevention.
| Capability | Advanced Protect | Complete Protect |
|---|---|---|
| Anti-phishing for incoming and internal email | Yes | Yes |
| Known malware prevention (anti-virus) | Yes | Yes |
| Malicious URL prevention | Yes | Yes |
| URL click-time protection (URL rewriting) | Yes | Yes |
| Account takeover prevention (anomaly detection) | Yes | Yes |
| Unauthorised application detection (shadow IT) | Yes | Yes |
| Zero-day malware prevention (sandboxing) | Yes | Yes |
| Attachment sanitisation (CDR, Threat Extraction) | Yes | Yes |
| Data loss prevention for email and shared files | No | Yes |
Check Point's plans page also summarises Advanced Protect as phishing protection, account takeover protection, URL emulation, sandboxing and CDR. Read more on the individual tier pages: Harmony Email Advanced Protect covers the threat protection in detail, and Harmony Email Complete Protect covers DLP and its encryption option.
Add-ons
These are bought separately on top of any plan:
| Add-on | What it does |
|---|---|
| Archiving | Stores email for up to 10 years, with search, filtering and bulk export for legal and recovery needs |
| DMARC Management | Helps you move to and keep a restrictive DMARC policy that stops others spoofing your domains |
| Incident Response as a Service (IRaaS) | Check Point analysts handle users' phishing reports and requests to release quarantined mail |
| Security Awareness Training | Training plus AI-generated, role-based phishing simulations, run from the same product |
| Leaked Credentials | Monitors the deep and dark web for your users' compromised credentials |
| SSPM and SSPM Premium (Harmony SaaS) | Finds risky settings in Microsoft 365 and Google Workspace (SSPM) or across all supported SaaS apps (SSPM Premium) |
You do not need every add-on. We usually recommend starting with the plan, then adding DMARC Management or Archiving where they replace a separate tool you already pay for.
Older package names
If you are renewing an older contract, you may see package names from earlier Avanan or Harmony line-ups that do not appear on Check Point's current plans page. That page lists only Advanced Protect and Complete Protect, each with Email Only or Email & Collaboration coverage, so a renewal is the time to move onto one of these. We map what you have today to the closest current plan and point out any add-ons you may already be paying for elsewhere.
The March 2026 rename to Check Point Email Security kept the same plan structure. See our Avanan page for what longer-standing customers should check at renewal.
Choosing a plan and getting a quote
As a rule of thumb:
- Email Only, Advanced Protect suits smaller organisations whose main risk is phishing and malware arriving by email.
- Email & Collaboration, Advanced Protect suits most organisations that work day to day in Teams, SharePoint, OneDrive or Slack.
- Complete Protect (either coverage) suits anyone sending personal, financial or health data by email, or with regulatory duties to prevent data leaving the organisation.
All plans are licensed per protected user, normally as an annual subscription, with monthly pay-as-you-go available through managed service providers in the Check Point Portal. The Harmony pricing and licensing guide lists the factors that change the price. For figures, ask us for a quote: contact us with your user numbers and the apps you use.
How Forever Systems supplies and supports Check Point Harmony
We supply and support the whole Check Point Harmony suite, now marketed as Check Point Workspace Security, for UK organisations: from a single product to endpoint, email, SaaS, mobile, browser and SASE together, with Check Point MDR if you want round-the-clock cover.
- Scoping and licensing: the right products, editions and plans for your users, devices and risk, and a clear view of what the old Harmony names now mean
- Proof of value: trial deployments that show what Harmony finds in your own mailboxes, devices and traffic
- Deployment: endpoint agents and policies, the Microsoft 365 or Google Workspace connection, mobile roll-out through your MDM, browser extensions and SASE access policies
- Migration: moving from another endpoint, email or VPN product, or from Harmony Connect to Harmony SASE
- Ongoing support: policy tuning, alert triage, upgrades and renewals, managed in the Check Point Portal
Forever Systems Ltd is an independent IT and cyber security provider. We will always recommend what fits, including other options if Harmony is not right for you.
Want a Check Point Harmony quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between Email Only and Email & Collaboration?
Email Only protects Microsoft 365 mail and Gmail. Email & Collaboration also protects OneDrive, SharePoint, Teams, Slack, Google Drive, Box, Dropbox and ShareFile, using the same threat engines.
What is the difference between Advanced Protect and Complete Protect?
Both include the same threat protection: anti-phishing, anti-malware, URL protection, sandboxing, attachment sanitisation, account takeover and shadow IT detection. Complete Protect adds data loss prevention for email and shared files, with policies that can quarantine, alert on or encrypt sensitive content.
Is archiving included in Harmony Email and Collaboration?
No. Archiving is a separate add-on that stores email for up to 10 years. DMARC Management, IRaaS, Security Awareness Training, Leaked Credentials and SSPM are also add-ons.
What if my contract shows an older package name?
Check Point's current plans page lists only Advanced Protect and Complete Protect, each with Email Only or Email & Collaboration coverage. If your contract uses an earlier Avanan or Harmony package name, you move onto the closest current plan at renewal, and we will map it for you.
Can I mix plans for different users?
Plans are normally applied across the protected users in a tenant. If you have very different groups of users, talk to us and we will check what Check Point allows for your licence.