We performed a comparison between Check Point CloudGuard Network Security and Palo Alto Networks VM-Series based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."There is an easy process for configuring it, and it is straightforward to implement the device from scratch."
"What's most important is the ease of use."
"It is a one box solution, which covers most of the edge device’s requirements."
"It is very flexible to use."
"The email protection and VPN features are the most valuable."
"The CLI and GUI do a good job of putting a lot at your fingertips."
"Fortinet FortiGate's most valuable features are ease of use, flexibility, and most of the configuration we can be done using the GUI. When we compare Fortinet FortiGate with other solutions the firewall policy are very easy to understand."
"Good anti-malware and web filtering features."
"It improves the availability of engineers to carry out projects."
"Monitoring using SmartConsole and all its features is extremely easy, and I find SmartEvent an excellent monitoring tool for spotting threats and user behaviour."
"The ease of deployment has been nice. It is like managing any of our on-prem firewalls."
"It is a good-to-use tool that is also flexible."
"Check Point CloudGuard technical support is good."
"Check Point CloudGuard Network Security has a beautiful threat emulation different from the market."
"SSL/TLS traffic inspection features are used for advanced threat prevention against secure SSL traffic."
"The tool's most valuable features are IPS and blades. These features are valuable for security."
"It provides complete security posture from end-to-end. This has given us better visibility into what our security aspects are."
"We have reduced the number of configuration lines by 90%. We need fewer number of admins right now because of it."
"AWS has improved our agility to apply firewall rules. It has reduced the amount of time that it takes to apply firewall rules because everything is based in the cloud."
"The feature that I have found the most useful is that it meets all our requirements technically."
"In AWS, Palo Alto provides us a better view than flow logs for network traffic."
"I like the UI. Most things are accessible from the user interface and it is quite user-friendly. With respect to both VM-based firewalls and physical firewalls, it's easy to create updates."
"The interface with Panorama makes it very easy to use."
"The most valuable features are the User ID, URL filtering, and application filtering."
"In the balance between links feature normally you can just choose one option to balance. It would be better for the solution to have more than one option, preferably three."
"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."
"Some features of Fortinet FortiGate are actually fee enabled that are inconvenient for deploying in production. Other issues relate to isolation with Cisco products and your server."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"One area for improvement is the performance on the bandwidth demands for smaller devices, as well as better web filtering."
"Currently, FortiGate is providing SSL VPN. But they're missing some features that are available in Palo Alto's SSL VPN."
"Cisco Meraki products are rising very quickly in the cloud and the connected era. Meraki products offer much better ROI, upgradability, and manageability."
"The cloud features and integration could be improved."
"CloudGuard Network Security needs to include new features. One specific feature I would like to see is the ability to protect external resources using single sign-on integration with various identity providers, including custom identity providers. Its pricing could also be cheaper."
"I would like to see more focus on east-west traffic inspection and AWS."
"Clustering in Azure is a bit different, not using the Check Point cluster but relying on load balancing. It's not as instant as I'm used to; in Azure, it might take around half a minute to a minute, and during this time, services could be down. The delay is attributed to Azure using its load balancing mechanisms instead of the Check Point cluster."
"I think they have pretty much mastered what can be done. There are some nuances like when you fail over from one cluster member to the other, the external IP address takes about two minutes to fail over."
"The cost needs improvement as it is currently quite expensive."
"They are coming out with more SD-WAN express route support from a firewall perspective. That would be great."
"Sometimes, if you aren't familiar with the solution, it can be a bit complex, but it does become easier to use with time. However, every time they launch a new version, it becomes more complex and you need to take time to get familiar with all the changes. For every version that they upgrade, you need to upskill yourself."
"The SD-WAN could be better."
"The DLP functionality or data classification can be improved in the solution's basic firewalling."
"The disadvantage with Palo Alto is that they don't have a cloud-based solution that includes a secure web gateway."
"Integrative capabilities with other solutions should be addressed."
"There are various reports that come with the box or with the VMware, but you can only run them daily."
"It has to be more scalable for the deployment of VMs on the cloud."
"Palo Alto should update their documentation to make it more readable and provide easier-to-follow instructions through videos."
"From time to time, they have released some content updates that have some issues, maybe twice a year."
"We don't know how it will scale once we start putting more load on it."
More Check Point CloudGuard Network Security Pricing and Cost Advice →
Check Point CloudGuard Network Security is ranked 8th in Firewalls with 119 reviews while Palo Alto Networks VM-Series is ranked 10th in Firewalls with 52 reviews. Check Point CloudGuard Network Security is rated 8.6, while Palo Alto Networks VM-Series is rated 8.6. The top reviewer of Check Point CloudGuard Network Security writes "The solution has good threat emulation, threat extraction, and reporting features". On the other hand, the top reviewer of Palo Alto Networks VM-Series writes "Many features are optimized for troubleshooting real-time scenarios, saving a lot of time". Check Point CloudGuard Network Security is most compared with Azure Firewall, VMware NSX, Cisco Secure Firewall, Akamai Guardicore Segmentation and Illumio, whereas Palo Alto Networks VM-Series is most compared with Azure Firewall, Fortinet FortiGate-VM, Cisco Secure Firewall, Palo Alto Networks NG Firewalls and Check Point NGFW. See our Check Point CloudGuard Network Security vs. Palo Alto Networks VM-Series report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.