We performed a comparison between Azure Firewall and Check Point NGFW based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.
Comparison of Results: Based on the parameters we compared, Azure Firewall seems to be a superior solution. All other things being more or less equal, our reviewers found Check Point NGFW to be rather expensive to purchase. Users of Check Point NGFW feel that the stability of the product could be improved. Additionally, some users are not so impressed by the technical support and training that it offers.
"We can detect any attack of viruses or malware at the first point of contact."
"The solution is scalable."
"FortiGate firewalls are user-friendly, and I like the security profiling features."
"It is a safe product."
"It is a good source for firewall protection."
"The dashboard I have found the most valuable in Fortinet FortiGate."
"The security features are about the best that I've seen anywhere."
"It's very fast and easy to configure."
"The initial setup is straightforward; Azure Firewall does not have a complex implementation process. It is very simple; you just need to enable the service within Azure. It does not require any maintenance because it is managed by Microsoft, that is, it is a fully managed service."
"Among the most valuable features are the DDoS protection that protects your virtual machines, the threat intelligence, and traffic filtering."
"We secure the entry point to the virtual data center with the firewall."
"One of the best features is that it natively integrates with Azure Services and tools. When you have a third-party offering, that is not the case. But Azure Firewall provides a comprehensive and seamless security solution for your Azure resources."
"The solution has many useful features. For example, the solution allows users to create virtual IP addresses."
"The SIEM that Azure Firewall provides us is very robust."
"Azure Firewall's feature that I have found most valuable is its scalability."
"The most valuable feature is the integration into the overall cloud platform."
"After introducing this NGFW, we have improved our security posture, and now, have peace of mind."
"Check Point offers virtualized systems, making it easy to scale."
"The Smart Dashboard and other user interfaces are very easy to use and can be handled without any significant IT skills."
"The uncomplicated configuration ensures that mistakes are avoided and rules are easily audited."
"Check Point has given us the ability to comply with regulations and with capacities in a way that we never could before."
"We use Check Point to complete the network compliance rules."
"The security posture assessment with two-factor authentication has saved more time and commercial costs by avoiding deploying having to deploy another solution."
"On the firewall side, the security efficacy is good."
"Some of the software stability could improve."
"They are doing good, but they can improve the distributor assignment. The availability of the product and the timeline of delivery are the main things. The distribution should be swift, and the distributor should not reach out to end customers directly. They should work as a distributor. There should also be one more local distributor. Currently, there is only one distributor in Pakistan, and the rest of them are in UAE. It is difficult to work with only one distributor. Sometimes, you don't get along with the same distributor, and that's why they should have one more distributor. Their licensing should also be improved. The activation or renewal of the product should be done from the date of renewal, not from the date on which the license expired."
"The support system could be improved."
"The initial setup is complex."
"Some configuration elements cannot be easily altered once created."
"Fortinet FortiGate could improve by having better visibility. Palo Alto has better visibility."
"If they had better integration with security products, such as Cisco ISE or Rapid Threat Containment, then it would be an improvement."
"The firewall engine is not so strong as of now, in my opinion... My second concern is that, while they have Zero-day vulnerability and anti-malware features, the threat engine needs to be strengthened, its efficiency can be increased."
"Currently, it only supports IP addresses, so you have to be specific about the IPs that are in your environment."
"The solution should incorporate features similar to competitors like split tunneling."
"The threat intelligence part could be better. I don't see why our customers have to get an additional solution with Azure Firewall. It would be great if they made it on par with Palo Alto."
"For large organizations, a third-party firewall would be an added advantage, because it would have more advanced features, things that are not in Azure Firewall."
"There are a number of things that need to be simplified, but it's mostly costs. It needs to be simplified because it's pretty expensive."
"Azure Firewall should have a free trial version for new users so that they can evaluate it before deploying it."
"You have to have a defined IP range within your network to associate it with your network. The problem is you have to plan ahead of time if you expect to use the firewall in the future so that you don't have to reconfigure your subnets or that specific IP range. Other than that, I don't any issues. I use it for basic configuration for a single application, so I really don't try to leverage it for multiple applications where I might find some complexity or challenges."
"This solution is not mature when it comes to handling perimeter traffic like internet browsing."
"The anti-spam needs improvement."
"Check Point's study materials should be provided by the company directly and be of very good quality. This is not provided right now and something that the company can improve."
"Geo-blocking would be very useful. There are too many attempts to infiltrate by non-country users. I can block access by IP address or IP network, however, a country-level blocking would be more useful and much quicker to implement."
"Reporting has to be improved."
"There are issues with stability while upgrading devices with hotfixes."
"I would like to see an improvement of built-in monitoring capabilities such as throughput. Practically visualization of CPview outputs into beautiful pink GUI will do it."
"I would like to see better Data Leakage protection options and easier-to-understand deployment models for this."
"We need east/west Check Point firewalls in order to do micro-segmentation."
Azure Firewall is ranked 21st in Firewalls with 33 reviews while Check Point NGFW is ranked 5th in Firewalls with 277 reviews. Azure Firewall is rated 7.2, while Check Point NGFW is rated 8.8. The top reviewer of Azure Firewall writes "Easy to use and configure but could be more robust". On the other hand, the top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". Azure Firewall is most compared with Fortinet FortiGate-VM, Palo Alto Networks NG Firewalls, Microsoft Defender for Cloud, Palo Alto Networks VM-Series and Cisco Secure Firewall, whereas Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Sophos XG, Cisco Secure Firewall, Netgate pfSense and OPNsense. See our Azure Firewall vs. Check Point NGFW report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Check Point firewall does a deep inspection of packets till Layer 7 and is more compatible with the organizational environment.
The Azure firewall is also a cloud-based security solution that also provides Advance Threat Protection.