In short: Harmony SASE pricing (Check Point SASE) is per user on subscription. Internet Access and Private Access are the core components, every network needs at least one dedicated gateway, and options such as Enterprise Browser, SaaS Security and SD-WAN add to the cost. Users, components, gateways and term set the price; a 30-day trial is available. Ask us for a quote.
How Check Point SASE is licensed
Check Point SASE (formerly Harmony SASE, originally Perimeter 81) uses a straightforward model:
| Element | How it works |
|---|---|
| Licensing unit | Per user (Check Point's console calls them member licences) |
| Core components | Internet Access and Private Access |
| Gateways | Every network needs at least one dedicated gateway with its own static IP address; add more for other regions, redundancy or load balancing. Gateways are licensed alongside users |
| Packages and options | Check Point sells SASE as packages and add-ons (its life cycle policy refers, for example, to a SASE Complete package and a SASE Browse Advanced add-on), with Enterprise Browser, SaaS Security and SD-WAN depending on what you need |
| Term | Subscription, with the term agreed when you buy; pay-as-you-go is available through managed service providers |
| Trial | A free 30-day trial when you create a Check Point Portal account |
| Management | Cloud console in the Check Point Portal, where you can also see your current contract |
Package names change over time, so we confirm the current ones, and exactly what each includes, when we quote.
What changes the price
The main factors are:
- Number of users: the biggest single driver
- Components: Internet Access only, Private Access only, or both
- Gateways and regions: how many dedicated gateways you need, and where, for example for fixed egress IPs or UK gateway regions such as London and Manchester
- Sites and SD-WAN: how many offices connect to the SASE network, and whether you need SD-WAN at the branch
- Unmanaged-device access: whether contractors and BYOD users need Enterprise Browser
- SaaS controls: whether you add SaaS Security for inline and API-based SaaS protection
- AI governance: GenAI Protect is no longer included in SASE packages for new customers, so if you need control of staff AI use, Workforce AI Security is quoted separately
- Term length: the length of subscription you commit to, or pay-as-you-go
- Bundling: whether SASE is bought alongside other Check Point products such as Harmony Endpoint or Harmony Email and Collaboration
- Support and services: deployment, migration from an old VPN or Harmony Connect, and ongoing management
Why we do not publish prices
You will find SASE prices quoted on review sites and public procurement listings. They are rarely comparable: some are for old Perimeter 81 plans, some are list prices, and many leave out gateways or options. Plan names on third-party sites also conflict with each other.
Rather than repeat figures that may not apply, we quote against your actual user count, components and gateways, so the number you see is the number you pay.
Buying through a managed service provider
Check Point SASE can be supplied through managed service providers, who provision each customer as a child tenant in the Check Point Portal with pay-as-you-go licensing. Forever Systems can supply Check Point SASE this way alongside other Check Point products, where monthly billing suits you better than a fixed-term commitment. Each Check Point Portal account sits in a data residency region, which we agree with you at the start.
Pricing for existing Perimeter 81 and Harmony Connect customers
- Perimeter 81 customers renew as Check Point SASE. Older plan names may not map one-to-one, and shared gateways were withdrawn from 12 August 2026, so a renewal is a good time to check which components and gateways you use. See our Perimeter 81 page
- Harmony Connect customers need new Check Point SASE licences, because Connect is past end of life. See Harmony Connect end of sale
- Comparing alternatives? Our Harmony SASE vs Zscaler page covers the differences in approach
For pricing across the rest of the suite, see Check Point Harmony pricing.
Get a quote
To quote accurately we need your number of users, which components you want, how many sites and cloud networks connect, any fixed-IP or regional gateway requirements, and your preferred term. If you are not sure, we can work it out together in a short scoping session, and set up a 30-day trial.
Ask us for a quote: contact us and we will come back with a clear, itemised proposal.
How Forever Systems supplies and supports Check Point Harmony
We supply and support the whole Check Point Harmony suite, now marketed as Check Point Workspace Security, for UK organisations: from a single product to endpoint, email, SaaS, mobile, browser and SASE together, with Check Point MDR if you want round-the-clock cover.
- Scoping and licensing: the right products, editions and plans for your users, devices and risk, and a clear view of what the old Harmony names now mean
- Proof of value: trial deployments that show what Harmony finds in your own mailboxes, devices and traffic
- Deployment: endpoint agents and policies, the Microsoft 365 or Google Workspace connection, mobile roll-out through your MDM, browser extensions and SASE access policies
- Migration: moving from another endpoint, email or VPN product, or from Harmony Connect to Harmony SASE
- Ongoing support: policy tuning, alert triage, upgrades and renewals, managed in the Check Point Portal
Forever Systems Ltd is an independent IT and cyber security provider. We will always recommend what fits, including other options if Harmony is not right for you.
Want a Check Point Harmony quote, trial or renewal review?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
How much does Harmony SASE cost?
It depends on the number of users, whether you need Internet Access, Private Access or both, gateways, options and term. Check Point SASE is licensed per user on subscription. Ask us for a quote based on your requirements.
Is Check Point SASE licensed per user or per device?
Per user, which Check Point's console calls member licences. Gateways are licensed alongside users, and every network needs at least one dedicated gateway.
How much does Perimeter 81 cost now?
Perimeter 81 is now sold as Check Point SASE, so renewals and new purchases are quoted as Check Point SASE per-user licences. Older Perimeter 81 plan prices no longer apply directly.
Can I buy Internet Access and Private Access separately?
They are separate components of Check Point SASE, and options such as Enterprise Browser, SaaS Security and SD-WAN can be added. We will match the package to the components you need.
Is there a free trial of Check Point SASE?
Yes. Check Point's SASE admin guide says a new Check Point Portal account gets a free 30-day trial. Contact us and we will set one up for a pilot group of users.