Check Point NGFW vs Fortinet FortiGate-VM comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
120,425 views|88,209 comparisons
90% willing to recommend
Check Point Software Technologies Logo
27,173 views|16,714 comparisons
96% willing to recommend
Fortinet Logo
14,279 views|8,060 comparisons
98% willing to recommend
Comparison Buyer's Guide
Executive Summary
Updated on Jul 11, 2023

We performed a comparison between Check Point NGFW and Fortinet FortiGate-VM based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

Features: Check Point NGFW is praised for its extensive security features, centralized management, and virtualization capabilities. Fortinet FortiGate-VM receives appreciation for its stability, reliability, and user-friendly interface.

Check Point NGFW needs enhancements in integration, hardware upgrades, cost and pricing, stability and security, setup process, load balancing capabilities, technical support, and reporting. Fortinet FortiGate-VM requires improvements in key activation, log management, cloud management, IPsec failover, monitoring tool, setup and configuration, performance, firmware updates, log settings, GUI capabilities, costs, technical support, and integration.

Service and Support: The customer service for Check Point NGFW has garnered varying opinions, with some customers appreciating its helpfulness and responsiveness, while others believe there is room for improvement. Fortinet FortiGate-VM's support has received a mix of feedback. Certain customers commend its prompt response times and expertise, while others highlight concerns regarding delayed responses.

Ease of Deployment: Check Point NGFW's initial setup can be complex and may require expertise and experience for certain configurations and migrations. Fortinet FortiGate-VM offers a generally straightforward and easy setup process, aided by Fortinet's support and assistance.

Pricing: Check Point NGFW has a high setup cost, yet offers flexible licensing options. Fortinet FortiGate-VM has competitive pricing and includes support without extra charges.

ROI: Check Point NGFW provides cost savings, simplicity, and strong security enforcement, resulting in a favorable ROI. Fortinet FortiGate-VM offers stability and enhanced security, guaranteeing a positive ROI when purchased initially.

Comparison Results: Check Point NGFW is the preferred choice when comparing it to Fortinet FortiGate-VM. Check Point NGFW stands out for its extensive security features, such as URL filtering, intrusion prevention systems, identity and access management, and application control capabilities. Additionally, it offers centralized management and virtualization options, as well as stability, user-friendliness, and scalability.

To learn more, read our detailed Check Point NGFW vs. Fortinet FortiGate-VM Report (Updated: May 2024).
771,170 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"This is an easy solution to deploy.""The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks. It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good.""I appreciate FortiGate's flexibility, which allows for centralized management through FortiManager.""Provides good firewall security and has great VPN features.""The next-gen features, the unified threat management capabilities are something that just about everybody is interested in at this point.""We use a southern institution that's audited for IT security and the reporting that automatically comes off the unit makes it much easier to meet compliance standards and makes it easier as far as the amount of time that has to be spent to compile that information. If you get your reporting set up correctly when you initially set it up, you just select the one you want and hit print. The auditing trail on it is the best feature.""It's very easy to configure.""It is very flexible to use."

More Fortinet FortiGate Pros →

"It is easy to deploy or upgrade. There is no need to do this manually with commands. This solution can be set up online.""It's enabled us to move away from basic LAN to LAN segmentation to a more powerful user separation approach.""It's scalable and provides end-to-end resolution.""Apart from it having very good features, I personally like the vulnerability assistance via report management which detects host and network vulnerability.""We can build the new firewalls with minimum efforts.""The Check Point API let me make 100 net rules in just 10 minutes, which saved us time.""Extracting data from the logs and utilizing the log analyzer tool provides valuable insights and enhances the product's overall effectiveness.""It is easy to control from the central management system. For example, if we have 10 firewalls, and we want to push that same configuration among them, we can use this solution's central management system to do that simultaneously. So, there is time saving in that way. The time savings does depend on the situation. For example, if I am running half an hour of work on each firewall, that will take around 300 minutes. However, if I do this work from the central management system, then it will only take 30 minutes to push the same configuration to those same 10 devices."

More Check Point NGFW Pros →

"It's a very simple solution to manage.""The policies are very valuable. They allow me to secure and manage future traffic effectively.""The setup is simple.""The most valuable features of this solution are the integration within the environment, with centralized reporting.""​Initial setup was quite straightforward, as we can simply head to the required sections to apply the planned network.​""I really like that it's internationally deployable.""It is very useful to make lists for rules and prepare firewall rules.""The reporting is good."

More Fortinet FortiGate-VM Pros →

Cons
"Its filtering is sometimes too precise or strict. We sometimes have to bypass and authorize some of the sites, but they get blocked. We know that they are trusted sites, but they are blocked, and we don't know why.""The support we receive when we need to upgrade is not satisfactory and has room for improvement.""I think there could be more QoS features""Its reporting and pricing need improvement.""Fortinet currently has many products bundled with FortiGate including the basic firewall and load balancer, and I think that that they need to have separate product portfolios for each of these specialized services.""The way everything is set up could be easier. Currently, people need a lot of experience and knowledge to administer it and to link it to devices.""Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box.""I don't really have anything negative to say as far as Fortinet firewalls are concerned. If anything, they can support a user a little bit better. They can stop being so time-sensitive about how much time the support call has taken, and they can help you do it yourself."

More Fortinet FortiGate Cons →

"I feel the only thing that I see as a possible improvement in Check Point software is the lack of ability to create "static discard routes" which makes it difficult for NAT ranges to be advertised via BGP to neighbors.""One feature that could be improved is the internet object in the application control/URL filtering blade.""There are some issues compared to other products. Ease of use is one.""The management of memory in the hardware needs to improve. They have had a lot of issues with memory leakage.""Check Point can scale but at times we have experienced some issues.""The presentation of the reports need to be more user-friendly.""The SmartUpdate interface is a little bit crowded if your company has a lot of software items.""One of the main features that need improvement is the rule filter export."

More Check Point NGFW Cons →

"We have lost some information and we do not know how that happened through the solution. So that needs improvement.""The interface of the solution could be improved.""If I could add one feature, it would be free security profiles.""The operating system isn't stable, so it goes to memory counters every night.""Fortinet support needs improvement. The response times are lackluster. Fortunately, the product is stable and we seldom have issues. Also, it takes months for them to deliver hardware when we order it.""In the first two releases of FortiOS 5.6, we had some trouble with the SSL VPN service. Sometimes it stopped working, and the IPS daemon too.""Deployment can be difficult and they could dispense with reliance on FortiManager and FortiAnalyzer.""The product needs to focus on cloud-nativeness and pricing."

More Fortinet FortiGate-VM Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "I don't think the product's pricing is a good value. I feel it's very overpriced. I feel a lot of the features for a next gen firewall are there. But I feel it's overpriced, because of the stability issues. As far as support goes, I really can't speak to direct Check Point support, but the third-party was pretty terrible... As far as the licensing goes, it's pretty complex. If anybody was to purchase the Check Point product, definitely make sure they have an account rep come on site, and explain it line by line, what each thing is. It's not straightforward. It's very convoluted. There's no way you could just figure it out by looking at it."
  • "Check Point solutions are very expensive here. They're good, but they're expensive... Check Point is only useful for customers that have a big IT budget."
  • "The price is high in comparison to other solutions."
  • "We pay $5,000-$6,000 a year."
  • "Maybe the pricing is a bit high but you get the durability and the duration."
  • "Licensing issues may be confusing at times."
  • "It is quite an expensive product, although security is a top priority."
  • "This product is not cheap and there are additional costs that depend on what model or package that you buy."
  • More Check Point NGFW Pricing and Cost Advice →

  • "The pricing and licensing are not as expensive as its competitors."
  • "It is an expensive solution if you are migrating from an open source solution."
  • "If you are in a licensed solution, like Cisco or Palo Alto, it is cheaper. I do recommend using it with a license, because it is a security solution and it needs updates.​"
  • "​The basic pricing in Austria is OK, but asking for special offers, e.g., NPOs, NGOs, trade up, and/or trade in, is always useful.​"
  • "​It is on par with what you receive. It can be expensive upfront."
  • "It would be nice to have the ability to extend FortiGuard subscriptions at a reasonable yearly cost versus a bulk three year pricing.​"
  • "The price is expensive compared with other vendors, like Cisco and Huawei."
  • "The best part of Fortinet is the license is bundled together, so it is easy to use and apply."
  • More Fortinet FortiGate-VM Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    771,170 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite… more »
    Top Answer:I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such)… more »
    Top Answer:Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall… more »
    Top Answer:Check Point NGFW provides essential security, featuring no-obligation access for secure connections, strong intrusion… more »
    Top Answer:In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
    Top Answer:Both of these solutions are excellent options that provide flexible scalability and solid security Fortinet Fortigate… more »
    Top Answer:An enhanced security solution for any kind of alert that we have configured.
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Check Point NG Firewall, Check Point Next Generation Firewall
    FortiGate Virtual Appliance, FortiGate-VM
    Learn More
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    Check Point NGFW is a next generation firewall that enables safe usage of internet applications by blocking malicious applications and unblocking safe applications. Check Point NGFW, which uses deep packet inspection to identify and control applications, has features such as application and user control and integrated intrusion prevention (IPS), as well as more advanced malware prevention capabilities like sandboxing.

    Check Point NGFW includes 23 firewall models optimized for running all threat prevention technologies simultaneously, including full SSL traffic inspection, without compromising on security or performance.

    Benefits of Check Point's Next Generation Firewall

    • Robust security: Check Point NGFW delivers the best possible threat prevention with SandBlast Zero Day protection. The SandBlast protection agent constantly inspects passing network traffic for exploits and vulnerabilities. Suspicious files are then emulated in a virtual sandbox in order to detect and report malicious behavior.

    • Security at hyperscale: On-demand hyperscale threat prevention performance provides cloud level expansion and resiliency on premises.

    • Unified management: Check Point's SmartConsole makes it easy to manage and configure network security environments and policies. With the SmartConsole, users can manage all the firewall gateways and access logs and install databases from one location. Unified management control across the network increases the efficiency of security operations and reduces IT costs.
    • Continuous logging: Check Point NGFW’s Threat Management feature detects vulnerabilities and logs them. Using the logged data, users can easily create and implement efficient security policies.

    • Remote access: The remote access VPN provides a seamless connection for remote users.

    Check Point NGFW is suitable for organizations of all sizes, from small businesses to larger enterprises.

    Reviews from Real Users

    Check Point NGFW stands out among its competitors for a number of reasons. Two major ones are its intrusion prevention feature as well as its centralized management, which makes it very easy to deploy firewall policies to many firewalls with one click.

    Shivani J., a network security administrator, writes, "Check Point has a lot of features. The ones I love are the antivirus, intrusion prevention, and data loss prevention."

    G., a network administrator at Secretaría de Finanzas de Aguascalientes, writes, “Within the organization, the inspection of packages has given us great help in detecting traffic that may be a threat to the institution. The configuration of policies has allowed us to maintain control of access and users for each institution that is incorporated into our headquarters.”

    Arun J., a senior network engineer, notes, “The nicest feature is the centralized management of multiple firewalls. With the centralized management, we can easily use and operate multiple firewalls as well as create a diagram of them.”

    FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Control Southern, Optimal Media
    Security7 Networks, COOPENAE
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    REVIEWERS
    Financial Services Firm22%
    Computer Software Company15%
    Comms Service Provider7%
    Manufacturing Company6%
    VISITORS READING REVIEWS
    Educational Organization50%
    Computer Software Company8%
    Financial Services Firm5%
    Comms Service Provider4%
    REVIEWERS
    Computer Software Company16%
    Comms Service Provider14%
    Manufacturing Company11%
    Financial Services Firm9%
    VISITORS READING REVIEWS
    Computer Software Company22%
    Comms Service Provider9%
    Financial Services Firm7%
    Manufacturing Company6%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise32%
    Large Enterprise40%
    REVIEWERS
    Small Business32%
    Midsize Enterprise19%
    Large Enterprise49%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise58%
    Large Enterprise27%
    REVIEWERS
    Small Business54%
    Midsize Enterprise19%
    Large Enterprise27%
    VISITORS READING REVIEWS
    Small Business31%
    Midsize Enterprise19%
    Large Enterprise50%
    Buyer's Guide
    Check Point NGFW vs. Fortinet FortiGate-VM
    May 2024
    Find out what your peers are saying about Check Point NGFW vs. Fortinet FortiGate-VM and other solutions. Updated: May 2024.
    771,170 professionals have used our research since 2012.

    Check Point NGFW is ranked 5th in Firewalls with 277 reviews while Fortinet FortiGate-VM is ranked 9th in Firewalls with 113 reviews. Check Point NGFW is rated 8.8, while Fortinet FortiGate-VM is rated 8.4. The top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". On the other hand, the top reviewer of Fortinet FortiGate-VM writes "An easy-to-manage and configure tool that provides ample documentation to help with the setup phase". Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Sophos XG, Cisco Secure Firewall, Netgate pfSense and Azure Firewall, whereas Fortinet FortiGate-VM is most compared with Azure Firewall, Palo Alto Networks VM-Series, Fortinet FortiOS, OPNsense and Cisco Secure Firewall. See our Check Point NGFW vs. Fortinet FortiGate-VM report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.