We performed a comparison between Check Point NGFW, Fortinet FortiGate, and Juniper SRX Series Firewall based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."The security posture assessment with two-factor authentication has saved more time and commercial costs by avoiding deploying having to deploy another solution."
"The best feature is the ability to increase the capacity of the solution by exactly what you add, not losing anything for High Availability."
"The way in which it manages the nodes within a cluster architecture is excellent, offering fault tolerance which is, in my experience, practically imperceptible when one of the nodes fails."
"Newer versions are much more stable."
"I was impressed by how easy it was to activate blades and implement them on a security gateway, with the process taking less than five minutes."
"We can easily check firewall configurations against any compliance standard."
"I like the Next-Generation Firewall."
"There is a lot of legacy traffic from other vendors that has been migrated to Check Point which has resulted in a lot of stability in our environment."
"The customization potential is quite impressive."
"It's a firewall that secures our internal network. I have been using it since 2013, and I find that most of the features are advanced, and very user friendly."
"The most valuable features of Fortinet FortiGate are the rules and quality of service."
"I have found Fortinet FortiGate to be scalable."
"The web filtering feature and the intrusion protection system are the most valuable. It is a resilient appliance. I never had an issue with it in terms of any security breaches."
"The user interface (UI) is very, very good."
"FortiGate is very simple to manage and easy to use."
"There is an easy process for configuring it, and it is straightforward to implement the device from scratch."
"The solution is relatively easy and inexpensive to maintain."
"It's a reliable firewall and very stable, for both the hardware and applications it is stable."
"The solution has been good for fulfilling our basic needs."
"I have used technical support quite a bit, and they are really good."
"The solution is stable, inexpensive, and works well for medium size companies."
"The CLI works perfectly."
"CLI: Junos CLI is very easy to use, and it is also very easy to find back items in the configuration and to change them."
"We think they have a good interface, the operating system is good, it's robust. It has plenty of great features, and the relation between the cost and benefits works for our business."
"The product could provide an easier user interface and management, by combining all functions (network and policy configuration) into one single application rather than split it into different applications."
"The antivirus feature is a little bit weak and should be improved."
"It would be great if the access management, the user management features, were improved in terms of the number of users that can be connected, and how users can access the various resources with the help of firewall authentication."
"Check Point doesn't warn us when rules are about to expire. It was also inconvenient that we had to change hardware when we upgraded. It would be nice if they made the new version compatible with current hardware or if it only required a minor upgrade."
"Bug Fixes and enhancement requests should be remediated earlier, as we have multiple dependencies and auditors are forced to have the latest possible environments."
"One area which is still lacking is the site-to-site VPN solution."
"The tool is somewhat more expensive than its competitors."
"I'd like to see more use of applications and URLs in security policies moving forwards."
"Stability and technical support are the two major issues I have found with Fortinet."
"The Web-filter in this solution is not very good."
"The process of configuring firewall rules appears excessively complex."
"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."
"It would be nice if backups could more easily migrate between different models."
"In some cases, its initial setup could be hard for customers."
"It does not have key authentication for admin access."
"I would suggest that Fortinet add sandboxing to their solution."
"The interface could be more user-friendly."
"It could improve areas which need high performance."
"While the GUI is pretty good on the Juniper side, there can still be tweaks made to it that will make it even better."
"The CPU switch could be improved for a better overall performance of traffic flow."
"The capacity can be limiting. We have outgrown its capacity. You can only scale up to a certain extent, depending on the device purchased."
"There is room for improvement in scalability and performance. It's scalable and reliable, but when using next-generation firewall features, the performance decreases significantly for Juniper SRX."
"In comparison to other enterprise-level firewalls, such as Cisco FTD, Cisco has improved significantly. In the past, I believed that Juniper SRX was superior, but after seeing the advancements in the FTD platform, Cisco has better functionality. I have not recently explored Juniper SRX's next-generation firewall capabilities as we only use basic firewall filtering in our enterprise network."
"I would like them to add a dashboard because it's difficult to operate."