Check Point IPS vs Palo Alto Networks URL Filtering with PAN-DB comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point IPS and Palo Alto Networks URL Filtering with PAN-DB based on real PeerSpot user reviews.

Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS).
To learn more, read our detailed Intrusion Detection and Prevention Software (IDPS) Report (Updated: March 2024).
768,578 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Among its great features is the ability to detect outgoing malware or extraction of compromised data and stop it, thus safeguarding us by isolating the network, the equipment, or the identity of the affected users.""The notifications are the most valuable feature of the solution.""We are able to define our own rules for detection.""I can easily monitor all of our connected devices and I get instant notification of reconnections and new connections, which removes some of the monitoring burden.""The Check Point IPS module allows me granularity in creating rules.""Real-time protection has blocked most threats that could affect system operations.""The Check Point IPS feature I find the most valuable is the firewall. It is great and easy to work with.""The number of the IPS protections is amazing - after the latest update I see more than 11000 in the SmartConsole."

More Check Point IPS Pros →

"Being able to manage blacklists and whitelists easily is very useful, especially for internal access and limiting outbound access.""The initial setup is easy.""It's allowed us to have better visibility and protection from threats.""Prohibited URLs can be listed by category.""The most valuable feature is that the product can do everything in a single device, including the firewall, rules, and the PBL. It also has good routing and switching.""The Palo Alto solution has improved our organization by providing threat protection across a variety of internet connections. Our company also gets valuable insights regarding threat analysis.""Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit."

More Palo Alto Networks URL Filtering with PAN-DB Pros →

Cons
"There are a lot of false positives. I would like to see integration with some kind of network detection and response in order to make some automation on IPS configuration.""I observed on our management that sometimes IPS does not connect to the threat cloud, we have to check and improve it. Otherwise, all of the features are good.""The cost is high.""The pain point that I have with this solution is contacting technical support.""In my opinion, the Check Point software engineers should works on the performance of the blade - when it is activated with the big number of the protections in place, the monitoring shows us the significant increase in the CPU utilization for the gateway appliances - up to 30 percents, even so we are cherry-picking only the profiles that we really needed.""I would like the product to provide us with intelligence to understand what we really have in our environment.""The hardware-based version of Check Point IPS could be more scalable. Right now, it's not scalable.""Despite being a blade, this is expensive."

More Check Point IPS Cons →

"We have had some challenges with making Palo Alto Networks URL Filtering with PAN-DB work with ELK stack.""One way Palo Alto can improve is by offering sandboxing. I don't know if they currently offer a sandboxing feature together with the firewall or not. They should provide secure sandboxing with the firewalls.""It is an expensive solution and not everyone has the budget for it.""Performance monitoring could use improvement.""An area for improvement would be the technical support, which can be slow.""The solution is a bit expensive.""For hosting sites like Blogspot, they host sites that should be in different categories, but get lumped together in general. There needs to be more granularity or multiple categorizations."

More Palo Alto Networks URL Filtering with PAN-DB Cons →

Pricing and Cost Advice
  • "I think that the price of support is around $40,000 USD or $50,000 USD per year."
  • "The price of this product should be reduced."
  • "Enabling IPS does not require any additional license purchase from OEM, as it comes by default with the NGFW bundle."
  • "The pricing for Check Point IPS is competitive and brings good value for the money."
  • "The module has a considerable cost but you can save by purchasing a package with several modules instead of making a single purchase."
  • "Pricing for this solution is negotiable and I'm happy with our pricing."
  • "There is a license needed to use the Check Point IPS which is not expensive. However, the Check Point IPS device is expensive."
  • "You can pay for Check Point IPS yearly, or you can go with a three-year license. There's no extra cost apart from the standard licensing fee."
  • More Check Point IPS Pricing and Cost Advice →

  • "It is more expensive than ASA but is far cheaper than Checkpoint. So, pricing wise, it is right in the middle."
  • "Expensive, but that's because it provides everything."
  • More Palo Alto Networks URL Filtering with PAN-DB Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    768,578 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:It offers robust protection with features such as Next Generation firewall capabilities, mobile solutions, and proactive threat prevention.
    Top Answer:Enhancements are necessary for the proficiency of notifications in the event of a Social Security incident, whether through email or alternative channels such as SMS.
    Top Answer:Palo Alto Networks URL Filtering with PAN-DB is a great way to keep your network secure and safe from malicious websites. It's my favorite feature because it allows me to easily customize and tailor… more »
    Top Answer:URL Filtering with Palo Alto Networks PAN-DB can help you protect your networks and users from malicious URLs, but it's not perfect. For starters, the database needs to be constantly updated to… more »
    Top Answer:When it comes to URL filtering, Palo Alto Networks URL Filtering with PAN-DB is the way to go. It helps you maintain complete control of your network security by identifying and blocking risky… more »
    Ranking
    Views
    5,858
    Comparisons
    4,065
    Reviews
    27
    Average Words per Review
    430
    Rating
    8.4
    Views
    3,853
    Comparisons
    1,950
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Comparisons
    Also Known As
    Check Point Intrusion Prevention System
    Palo Alto Networks URL Filtering PAN-DB
    Learn More
    Overview

    Check Point IPS is an intrusion prevention system that aims to detect and prevent attempts to exploit weaknesses in vulnerable systems or applications. The solution provides complete, integrated, next-generation firewall intrusion prevention capabilities at multi-gigabit speeds with a low false positive rate and high security. It helps organizations secure their enterprise network, and protect servers and critical data against known and unknown automated malware, blended threats, and other threats.

    Check Point IPS Features

    Check Point IPS has many valuable key features. Some of the most useful ones include:

    • Real-time protections: IPS is constantly updated with new defenses against emerging threats. Because the solution’s IPS protections are pre-emptive, it provides organizations with defenses before exploits are created or vulnerabilities are even discovered.
    • Virtual patching: The solution combines robust IPS functionality with a concerted patching strategy, allowing network administrators to secure networks between upgrades and patches.
    • Flexible deployment: Check Point IPS was designed to be deployed easily and efficiently.
    • 360 visibility and reporting: To help users achieve an unmatched level of visibility that detects and prevents threats, Check Point IPS integrates with SmartEvent, enabling security operations center (SOC) staff to respond to high-priority events first.

    Check Point IPS Benefits

    There are many benefits to implementing Check Point IPS. Some of the biggest advantages the solution offers include:

    • Efficient: Check Point IPS includes acceleration technologies that let you safely enable IPS. Additionally, its low false positive rate can save a lot of time.
    • Secure: The solution delivers thousands of signature and behavioral preemptive protections, making it a very secure tool.
    • Unified: With Check Point IPS, users can Enable IPS on any Check Point security gateway, thereby reducing Total Cost of Ownership (TCO).

    Reviews from Real Users

    Check Point IPS is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it has granularity capabilities for rule creation, quick updates of signatures, and a helpful mechanism that allows users to turn IPS signatures to a different mode automatically.

    A System and Network Administrator at Auriga mentions, “The Check Point IPS module allows me granularity in creating rules. I can specify which definition to apply and to which scope or network.” The reviewer also adds, “I can create multiple profiles, which is helpful.”

    “The quick updates of the signatures when a new threat is identified are great. For instance, when Microsoft releases patches, we usually see new signatures for those issues that have to be patched in a day. This gives us time to test/deploy the patches while already being protected from the threats. Also, it's very good with reporting. I can generate reports for management automatically based on the threats of the last day/week/whatever is needed,” says a Systems en networks engineer at CB.

    Another PeerSpot user, a Network Engineer at VSP Vision Care, writes, “The mechanism where you can let the system automatically turn the IPS signature to a different mode (prevent / monitor / inactive) is a nice feature that allows us to easily adjust the balance between security protection and the risk of business impact.”

    Palo Alto Networks URL Filtering with PAN-DB is an advanced URL filtering solution that provides a way to control web access, as well as how users interact with online content. With this solution, your organization can prevent credential phishing theft by assuming strict control over which sites users can enter their corporate credentials into. Palo Alto Networks Advanced URL Filtering with PAN-DB provides web protection by using URL database capabilities to help you automatically detect and prevent new malicious and targeted web-based threats instantly.

    Palo Alto Networks URL Filtering with PAN-DB Features

    Palo Alto Networks URL Filtering with PAN-DB has many valuable key features. Some of the most useful ones include:

    • Inline protection: Palo Alto Networks URL Filtering with PAN-DB provides inline protection from new malicious web pages by using machine learning to detect and block new threats in milliseconds.
    • Anti-evasion: Palo Alto Networks URL Filtering with PAN-DB analyzes live web content, disrupting attackers and identifying the true nature of malicious sites hiding behind evasive techniques.
    • Phishing protection: By using Palo Alto Networks URL Filtering with PAN-DB, you can spot phishing pages instantly and accurately before they destroy your network.
    • URL database: Palo Alto Networks URL Filtering with PAN-DB has a URL database that maintains hundreds of millions of known malicious and benign URLs categorized through a combination of static, dynamic, machine learning, and human analysis.
    • Criteria matching: With this feature, you can designate multiple policy action types based on URL categories or criteria.

    Palo Alto Networks URL Filtering with PAN-DB Benefits

    There are many benefits to implementing Palo Alto Networks URL Filtering with PAN-DB. Some of the biggest advantages the solution offers include:

    • Eliminates security silos: Palo Alto Networks URL Filtering with PAN-DB gets rid of security silos so you can attain proper security posture and keep users safe.
    • Cloud native: Because Palo Alto Networks URL Filtering with PAN-DB is cloud native, it enables you to easily expand and scale capabilities when necessary.
    • Minimizes operational expenditure: By reducing the need for standalone solutions, Palo Alto Networks URL Filtering with PAN-DB helps your organization decrease operational expenditures.
    • Safeguards against phishing: Palo Alto Networks URL Filtering with PAN-DB enables you to stop credential phishing attempts by offering layers of prevention to protect your organization from known and brand-new phishing sites.
    • Consistent security policies and capabilities: With Palo Alto Networks URL Filtering with PAN-DB, you can deploy advanced URL filtering with hardware appliances, on virtual environments, or in the cloud with the same set of policies and security consistently applied.
    • Increased detection: Detect evasive and targeted attacks by detecting real web traffic and not web crawler data.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the Palo Alto Networks URL Filtering with PAN-DB solution.

    Consultant Michael V. says, “What I really like about PAN and what makes it a worthwhile solution is that rather than having an administrator constantly updating a list of prohibited URLs, you can do it by categories. Every one of these URLs gets meta-tagged as hate speech or antisemitic or pornography, or whatever it is, and when you set up the filter everything that's prohibited by HR policy is there. I don't have to maintain anything, it catches everything.”

    PeerSpot user Darshil S., Consultant at a tech services company, mentions, “The multiple categorizations of URLs are quite helpful. For example, if a URL is a social media website, such as facebook.com, it can be classified at a certain risk level - from high to low.”

    Karthikeyan S., Sr. Cloud Data Architect at Sun Cloud LLC, explains, "Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit."

    Sample Customers
    Morton Salt, Medical Advocacy and Outreach, BH Telecom, Lightbeam Health Solutions, X by Orange, Cadence, Nihondentsu, Datastream Connexion, Good Sam, Omnyway, FIASA, Pacific Life, Banco del Pacifico, Control Southern, Xero, Centrify
    TRI-AD, Telkom Indonesia
    Top Industries
    REVIEWERS
    Security Firm21%
    Computer Software Company13%
    Financial Services Firm13%
    Government11%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Comms Service Provider9%
    Financial Services Firm8%
    Security Firm7%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Financial Services Firm11%
    Government8%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business45%
    Midsize Enterprise26%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise18%
    Large Enterprise55%
    REVIEWERS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise43%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise15%
    Large Enterprise63%
    Buyer's Guide
    Intrusion Detection and Prevention Software (IDPS)
    March 2024
    Find out what your peers are saying about Darktrace, Vectra AI, Check Point Software Technologies and others in Intrusion Detection and Prevention Software (IDPS). Updated: March 2024.
    768,578 professionals have used our research since 2012.

    Check Point IPS is ranked 3rd in Intrusion Detection and Prevention Software (IDPS) with 45 reviews while Palo Alto Networks URL Filtering with PAN-DB is ranked 18th in Intrusion Detection and Prevention Software (IDPS). Check Point IPS is rated 8.6, while Palo Alto Networks URL Filtering with PAN-DB is rated 8.4. The top reviewer of Check Point IPS writes "Great for detection and access with the capabilities of defining specific rules". On the other hand, the top reviewer of Palo Alto Networks URL Filtering with PAN-DB writes "Provides regular updates with an auto download option; prohibited URLs can be listed by category ". Check Point IPS is most compared with Darktrace, Palo Alto Networks Advanced Threat Prevention, Trend Micro TippingPoint Threat Protection System, Cisco NGIPS and Fortinet FortiGate IPS, whereas Palo Alto Networks URL Filtering with PAN-DB is most compared with Fortinet FortiGate IPS, Zscaler Cloud IPS, Palo Alto Networks Advanced Threat Prevention, Trend Micro Deep Discovery and Darktrace.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.