We performed a comparison between Check Point NGFW and Palo Alto Networks NG Firewalls based on our users’ reviews in four categories. Our conclusion is presented below.
Comparison Results: Our users feel Check Point NGFW is the better choice for NG Firewalls. Users appreciate its unique multi-layer, multi-blade approach. Additionally, the central management station allows users to manage everything in one place, helping to improve overall performance. The great price, support, and performance make this a great choice.
"The most valuable features are that it is very simple to configure and to manage."
"It can expand easily."
"It is easy to use and performs very well."
"Its administrative panel is very intuitive and simple. It is simpler than the other solutions that we had. As an administrator, we are always looking for the easiest solution to manage network policies. We are able to filter everything on our network and also use the VPN feature, which is important these days when people are working remotely during COVID."
"Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city. We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E."
"The payment function for applications is good."
"FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime."
"It's very easy to set up, it's very easy to make policies and, for an organization, that means you don't need IT expert in firewalls. You just need to have somebody who knows a little bit of IT, and that's it. With other products, you need someone with a "Masters" degree in firewalls."
"The initial setup is very straightforward."
"The VPN tunnels are very effective in terms of stability and quick connection."
"Its greatest asset lies in its user-friendly interface, making it exceptionally suitable and reliable for managing gateways."
"The edge security posture has dramatically improved as we can now detect and prevent threats from the public internet."
"One of the valuable characteristics of Check Point NGFW is that it presents very centralized management."
"We used Check Point for implementation, and they are top-notch. They know the hardware and software better than anyone."
"One of the most advantageous features of Check Point firewall is its multi-interface capability."
"We can easily check firewall configurations against any compliance standard."
"Protection from a single packet and ease of making security rules."
"The graphical interface is easy to troubleshoot because it has a drill-down sequence. It is easy to monitor traffic."
"Identifying applications is very easy with this solution."
"The solution is user-friendly. It's secure and easy to understand your network visibility, control the network, and prevent attacks."
"I like the architecture because it separates the management plan process and the data plan process."
"URL filtering and WildFire features are most valuable. It is very user-friendly. It is a very solid product, and it definitely works."
"The WildFire reporting and Cortex XDR platform have huge infrastructures in the cloud that secures the network against threats. So, we have the potential on the system, specifically for users, where we take care of this since the user is the most dangerous. We get reports back from WildFire on a minute-by-minute basis, rather than a daily or weekly update like I used to with different AV vendors. These features can detect viruses and malware more quickly, which is super important."
"The most important feature is the firewall. We can make rules to filter the application layer of traffic. It's a very helpful feature."
"Technical support needs to be improved."
"There is a lot of improvement needed with SSL-VPN."
"I haven't had a single issue since using Fortinet."
"We would like to see better pricing."
"There could be more integration between the logging and analytical platforms to make it more seamless and integrated."
"The firewall engine is not so strong as of now, in my opinion... My second concern is that, while they have Zero-day vulnerability and anti-malware features, the threat engine needs to be strengthened, its efficiency can be increased."
"Its reporting and pricing need improvement."
"Technical support for this solution can be improved."
"For the next release, we would like to have better ruleset cleanup tools that are already included."
"The VPN setup could be simplified. We had to engage professional services for that. That's not a problem, but compared to other products we've used, it was a little more complex."
"The current reporting capability needs to be parsed and edited to be appreciated by leadership."
"The Check Point support needs a lot of improvement."
"Check Point could do better to include acceleration technologies like SD-WAN in an integrated or embedded way to provide these new features that Check Point never had and is of great importance in the market."
"One of the biggest disappointments is the GUI."
"The command line is very difficult to use, which is one of the biggest drawbacks of this solution."
"The antivirus feature is a little bit weak and should be improved."
"The support could be improved. Palo Alto does not have a support team located in Bangladesh, and their support team operates from another location. Therefore, when we raise a ticket, it takes some time for them to respond, which can be problematic for us."
"When you delete and add a new rule, because of the one hundred rule limit, if the new rule has an ID that is greater than one hundred, even though you have fewer than that, it will not work."
"Sometimes some of the applications the customer has do not respond as they normally should."
"Its price can be better. They should also provide some more examples of configurations online."
"The initial configuration is complicated to set up."
"The solution needs some management tool enhancements. It could also use more reporting tools."
"If you enable SSL you will face a problem. The throughput of the firewall will be degraded. SSL is a big issue on all firewalls. All products suffer from issues with SSL, but Palo Alto firewalls suffer more from it."
"Palo Alto has introduced new features in their next-generation firewall, such as SD-WAN. However, the technique of SD-WAN implementation is not easy to understand. It is not easy to deploy at this moment. Maybe, in the future, they can improve the process and how the administrators, partners, or support team can easily deploy this SD-WAN solution on their next-generation firewall. The SD-WAN solution from Fortinet is easy to do. It does not take more than five or 10 minutes. When we talk about Palo Alto, it takes extra effort to implement SD-WAN."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Check Point NGFW is ranked 5th in Firewalls with 275 reviews while Palo Alto Networks NG Firewalls is ranked 6th in Firewalls with 162 reviews. Check Point NGFW is rated 8.8, while Palo Alto Networks NG Firewalls is rated 8.6. The top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". On the other hand, the top reviewer of Palo Alto Networks NG Firewalls writes "We get reports back from WildFire on a minute-by-minute basis". Check Point NGFW is most compared with Sophos XG, Cisco Secure Firewall, Netgate pfSense, Azure Firewall and OPNsense, whereas Palo Alto Networks NG Firewalls is most compared with Azure Firewall, Meraki MX, Sophos XG, Netgate pfSense and Cisco Secure Firewall. See our Check Point NGFW vs. Palo Alto Networks NG Firewalls report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Hi, I would suggest going for Checkpoint, the suitability depends on your specific security needs, budget constraints, network infrastructure, Integration capabilities, cloud integration, compliance and reporting, user-friendly interface but the support and the specific behavior for some solutions for routing, networking balance or specific connectivity is better known constraints, Checkpoint Multiplatform support (Open Servers Solutions) The advantages in Palo Alto (SSL Decryption, Wildfire SandBox Integration, Scalability)
Hi, I would suggest going for Check Point.
I'm with Check Point now, for more than 2 years. IPS, threat prevention, antibot identification, and antivirus notification are up to the mark. Moreover, it has a friendly user interface where anyone can create policies and work on it.