We performed a comparison between Check Point NGFW, Fortinet FortiGate, and WatchGuard XTM [EOL] based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."The management interface is easy to operate and is a standardized way of managing different firewall modules in the same client application."
"The support offers the best services I have experienced. It's better than any other IT vendor."
"The initial setup was very straightforward. You can customize it and change it as you need."
"With the new SmartTask offered in R80.40, we will be happy to configure some automatic control-functions."
"Its greatest asset lies in its user-friendly interface, making it exceptionally suitable and reliable for managing gateways."
"The activation of additional features is very easy and well documented."
"It's quite a stable solution."
"Check Point has an awesome price-to-benefit ratio, netting you an awesome throughput of IDS/IPS capability compared to Palo Alto, Cisco, and so on."
"The solution is stable."
"The application control features, such as Facebook blocking and Spotify blocking, are the most valuable."
"The pricing is great and very reasonable."
"It's a firewall that secures our internal network. I have been using it since 2013, and I find that most of the features are advanced, and very user friendly."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"Fortinet FortiGate's reliability is valuable."
"The most valuable features are the policies, filtering, and configuration."
"There are lots of features and most of them are deployed for internet security. Users are protected if they accidentally go to some malicious sites."
"Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process."
"It configures in all-in-one place."
"After installing the product, we achieved awareness of our data protection needs and email misuse."
"I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site."
"There is a site-to-site VPN configuration between others people."
"SNMP status monitoring and the Central Management Software."
"It is stable and does not require you to reboot all the time."
"They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time."
"The routing rules and some more network settings should be listed on the Check Point Smart Console instead of GAIA Web GUI."
"Although there is a lot of automation and pattern that can be classified automatically, the IPS systems are sometimes a little bit complicated, and doing the fine-tuning in over 20,000 patterns is hard to do."
"Without any training, it is very hard to administrate the whole Check Point NGFW."
"It would be best if the security management server console access is simpler for ease of management."
"I primarily work on the network side, so my expertise lies in configuring and working with firewalls. I have experience in firewall policies and know how to configure them within CheckPoint, including blocking URLs and specific website categories. However, I acknowledge that there's room for improvement, particularly in areas related to application-level control within the firewall. While I can't pinpoint a specific area for improvement, I am trying open to enhancing my skills and knowledge in various aspects of firewall management."
"It could be easier to manage the licenses on blades and contracts."
"All the advanced features of automation, especially the first installation of tunnels, need improvement."
"I would like the user interface to be more user-friendly. I want the UI to be easier to use than Check Point's competitors."
"I think they need to improve more in order to be a competitor with the leaders of the field."
"FortiOS is not simple."
"It does not have key authentication for admin access."
"The central management for the FortiGate Fortinet Firewall needs improvement. They have the manager to do the essential management for both SD-WAN and for the security policy. They should also improve the SD-WAN function."
"They should improve the interface to make it more user-friendly."
"It would be nice if backups could more easily migrate between different models."
"Its customer service could be better."
"It should come integrated or have its own type of network monitor tool in a module. There should just be one package, and you are good to go."
"The VPN errors are not helpful when troubleshooting."
"The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out."
"The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic."
"Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer)."
"Sometimes we have had issues with stability of the product."
"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."
"One huge issue with WatchGuard XTM is that I'm not getting reports in a readable format. Readable means, I don't want Excel online. We repeat auditing when we trigger the report or setup calendar. That functionality is what we are looking for from WatchGuard XTM here."
"I would like them to improve the product's overall protections. This would be good for all product users."
Earn 20 points