Check Point NGFW vs Fortinet FortiGate-VM comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
126,666 views|92,626 comparisons
Check Point Software Technologies Logo
28,743 views|17,898 comparisons
Fortinet Logo
14,950 views|8,480 comparisons
Comparison Buyer's Guide
Executive Summary
Updated on Jul 11, 2023

We performed a comparison between Check Point NGFW and Fortinet FortiGate-VM based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

Features: Check Point NGFW is praised for its extensive security features, centralized management, and virtualization capabilities. Fortinet FortiGate-VM receives appreciation for its stability, reliability, and user-friendly interface.

Check Point NGFW needs enhancements in integration, hardware upgrades, cost and pricing, stability and security, setup process, load balancing capabilities, technical support, and reporting. Fortinet FortiGate-VM requires improvements in key activation, log management, cloud management, IPsec failover, monitoring tool, setup and configuration, performance, firmware updates, log settings, GUI capabilities, costs, technical support, and integration.

Service and Support: The customer service for Check Point NGFW has garnered varying opinions, with some customers appreciating its helpfulness and responsiveness, while others believe there is room for improvement. Fortinet FortiGate-VM's support has received a mix of feedback. Certain customers commend its prompt response times and expertise, while others highlight concerns regarding delayed responses.

Ease of Deployment: Check Point NGFW's initial setup can be complex and may require expertise and experience for certain configurations and migrations. Fortinet FortiGate-VM offers a generally straightforward and easy setup process, aided by Fortinet's support and assistance.

Pricing: Check Point NGFW has a high setup cost, yet offers flexible licensing options. Fortinet FortiGate-VM has competitive pricing and includes support without extra charges.

ROI: Check Point NGFW provides cost savings, simplicity, and strong security enforcement, resulting in a favorable ROI. Fortinet FortiGate-VM offers stability and enhanced security, guaranteeing a positive ROI when purchased initially.

Comparison Results: Check Point NGFW is the preferred choice when comparing it to Fortinet FortiGate-VM. Check Point NGFW stands out for its extensive security features, such as URL filtering, intrusion prevention systems, identity and access management, and application control capabilities. Additionally, it offers centralized management and virtualization options, as well as stability, user-friendliness, and scalability.

To learn more, read our detailed Check Point NGFW vs. Fortinet FortiGate-VM Report (Updated: March 2024).
765,234 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"There are lots of features and most of them are deployed for internet security. Users are protected if they accidentally go to some malicious sites.""The base firewall features are quite valuable to us.""I like Fortinet's cloud management. It allows me to manage all my devices in different branches for three cloud accounts. Even though I use on-prem devices, I can manage everything on the cloud.""It works very well. It has a lot of different functionalities. Its cost is also fine for our customers.""We have been able to offer several services to customers in a single box.""The solution is very easy to understand. It's not overly complex.""Our project needs to link two sides through the internet. One of these was in Cairo and the other in another city. We used FortiGate as the integrating solution between the two locations, i.e. the Fortinet 30E & 100E.""This solution made it very easy to manage our bandwidth."

More Fortinet FortiGate Pros →

"Check Point NGFW generates very helpful reports based on the logs of the activated features.""The activation of additional features is very easy and well documented.""With the outstanding capabilities of Check Point, we managed to have stable site-to-site VPNs with all our partners and with every other vendor's devices.""The most valuable feature is the highly integrated NGFW features such as the IPS or Check Point Identity Awareness, which makes Check Point the best choice on the market.""The product is flexible.""The Check Point firewall features for Next Generation Firewalls are excellent.""We have found the central management (Smart Console) to be very helpful in managing all the firewalls and keeping the software/hotfix versions up to date.""The most valuable features are the security blades and the ease of managing the policies, searching log for events, and correlating them."

More Check Point NGFW Pros →

"An enhanced security solution for any kind of alert that we have configured.""The product can scale.""The setup is simple.""It's a relatively simple product that is easy to use. It's not overly complex.""The most valuable features are the SD-WAN and the web filtering applications control.""The user interface, stability, and scalability are the most valuable features.""We like FortiGate-VM's IPS features and its ability to create multiple virtual firewalls.""The stability of the solution is good. We haven't faced any issues at all while using the product."

More Fortinet FortiGate-VM Pros →

Cons
"There is room for improvement related to the logging and reporting aspect.""Fortinet FortiGate could improve by having more capabilities for troubleshooting VPN connections. For example, I do get some feedback about the current status, but I could use some history and logging of important events. The information is logged in our Syslog server, but I could use that information from the device. If they could provide a GUI to have some more insight on what's going with my VPN would be useful.""The setup is pretty complex and not easy to implement.""Fortinet FortiGate could improve by having better visibility. Palo Alto has better visibility.""It is quite new for us, and we need to go more in-depth into the monitoring tools. It provides different features that we need to do what we want. So far, it is okay for us. In terms of improvement, in the future, they can provide a faster implementation of features. Some of the features are first available in other solutions. Fortinet sometimes takes a little bit longer than other solutions, such as Check Point, to implement new features.""The solution's framework needs to be frequently updated in order to have a stable solution.""The solution lacks multi-language support.""With FortiGate, the main complaint that I have heard is about the technical support."

More Fortinet FortiGate Cons →

"Their technical support can be better. In addition, when we need to use it in a government environment, we face a lot of legal issues related to different types of certifications. It would be better to improve it for these issues. Check Point doesn't have a SOAR system. They work with Siemplify, but it is an integration with another vendor. It would be great if Check Point has an integrated SOAR system.""The web UI for VSX could be better.""While not being cheap, their pricing models are competitive. In the pricing structure, however, they need improvement.""It could greatly improve our customer experience by centralizing management.""No product is perfect and there is always room for improvement.""I really want to see geo-blocking as a feature of NGFW.""Several security modules are based on HTTPS inspection, losing a relevant security capability if you don't implement it in your network.""Although the GUI is simple to use and fairly comprehensive, more support via CLI would be beneficial for bulk operations."

More Check Point NGFW Cons →

"The interface needs to be updated and simplified.""The product needs to focus on cloud-nativeness and pricing.""In the next release, we would like to see full integration with VMware NSX virtualized networks.""Deployment can be difficult and they could dispense with reliance on FortiManager and FortiAnalyzer.""There should be more options to use lower-end models in a high availability configuration.""There should be integration with an active directory — with Microsoft.""FortiGate should be more customer friendly and budgeted better.""The costs could be lowered."

More Fortinet FortiGate-VM Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "I don't think the product's pricing is a good value. I feel it's very overpriced. I feel a lot of the features for a next gen firewall are there. But I feel it's overpriced, because of the stability issues. As far as support goes, I really can't speak to direct Check Point support, but the third-party was pretty terrible... As far as the licensing goes, it's pretty complex. If anybody was to purchase the Check Point product, definitely make sure they have an account rep come on site, and explain it line by line, what each thing is. It's not straightforward. It's very convoluted. There's no way you could just figure it out by looking at it."
  • "Check Point solutions are very expensive here. They're good, but they're expensive... Check Point is only useful for customers that have a big IT budget."
  • "The price is high in comparison to other solutions."
  • "We pay $5,000-$6,000 a year."
  • "Maybe the pricing is a bit high but you get the durability and the duration."
  • "Licensing issues may be confusing at times."
  • "It is quite an expensive product, although security is a top priority."
  • "This product is not cheap and there are additional costs that depend on what model or package that you buy."
  • More Check Point NGFW Pricing and Cost Advice →

  • "The pricing and licensing are not as expensive as its competitors."
  • "It is an expensive solution if you are migrating from an open source solution."
  • "If you are in a licensed solution, like Cisco or Palo Alto, it is cheaper. I do recommend using it with a license, because it is a security solution and it needs updates.​"
  • "​The basic pricing in Austria is OK, but asking for special offers, e.g., NPOs, NGOs, trade up, and/or trade in, is always useful.​"
  • "​It is on par with what you receive. It can be expensive upfront."
  • "It would be nice to have the ability to extend FortiGuard subscriptions at a reasonable yearly cost versus a bulk three year pricing.​"
  • "The price is expensive compared with other vendors, like Cisco and Huawei."
  • "The best part of Fortinet is the license is bundled together, so it is easy to use and apply."
  • More Fortinet FortiGate-VM Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    765,234 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite… more »
    Top Answer:I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such)… more »
    Top Answer:Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall… more »
    Top Answer:Check Point NGFW provides essential security, featuring no-obligation access for secure connections, strong intrusion… more »
    Top Answer:In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
    Top Answer:Both of these solutions are excellent options that provide flexible scalability and solid security Fortinet Fortigate… more »
    Top Answer:It’s easy to integrate the solution with our network infrastructure.
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Check Point NG Firewall, Check Point Next Generation Firewall
    FortiGate Virtual Appliance, FortiGate-VM
    Learn More
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    Check Point NGFW is a next generation firewall that enables safe usage of internet applications by blocking malicious applications and unblocking safe applications. Check Point NGFW, which uses deep packet inspection to identify and control applications, has features such as application and user control and integrated intrusion prevention (IPS), as well as more advanced malware prevention capabilities like sandboxing.

    Check Point NGFW includes 23 firewall models optimized for running all threat prevention technologies simultaneously, including full SSL traffic inspection, without compromising on security or performance.

    Benefits of Check Point's Next Generation Firewall

    • Robust security: Check Point NGFW delivers the best possible threat prevention with SandBlast Zero Day protection. The SandBlast protection agent constantly inspects passing network traffic for exploits and vulnerabilities. Suspicious files are then emulated in a virtual sandbox in order to detect and report malicious behavior.

    • Security at hyperscale: On-demand hyperscale threat prevention performance provides cloud level expansion and resiliency on premises.

    • Unified management: Check Point's SmartConsole makes it easy to manage and configure network security environments and policies. With the SmartConsole, users can manage all the firewall gateways and access logs and install databases from one location. Unified management control across the network increases the efficiency of security operations and reduces IT costs.
    • Continuous logging: Check Point NGFW’s Threat Management feature detects vulnerabilities and logs them. Using the logged data, users can easily create and implement efficient security policies.

    • Remote access: The remote access VPN provides a seamless connection for remote users.

    Check Point NGFW is suitable for organizations of all sizes, from small businesses to larger enterprises.

    Reviews from Real Users

    Check Point NGFW stands out among its competitors for a number of reasons. Two major ones are its intrusion prevention feature as well as its centralized management, which makes it very easy to deploy firewall policies to many firewalls with one click.

    Shivani J., a network security administrator, writes, "Check Point has a lot of features. The ones I love are the antivirus, intrusion prevention, and data loss prevention."

    G., a network administrator at Secretaría de Finanzas de Aguascalientes, writes, “Within the organization, the inspection of packages has given us great help in detecting traffic that may be a threat to the institution. The configuration of policies has allowed us to maintain control of access and users for each institution that is incorporated into our headquarters.”

    Arun J., a senior network engineer, notes, “The nicest feature is the centralized management of multiple firewalls. With the centralized management, we can easily use and operate multiple firewalls as well as create a diagram of them.”

    FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Control Southern, Optimal Media
    Security7 Networks, COOPENAE
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    REVIEWERS
    Financial Services Firm22%
    Computer Software Company15%
    Comms Service Provider7%
    Manufacturing Company6%
    VISITORS READING REVIEWS
    Educational Organization49%
    Computer Software Company8%
    Financial Services Firm5%
    Comms Service Provider5%
    REVIEWERS
    Computer Software Company16%
    Comms Service Provider14%
    Manufacturing Company11%
    Financial Services Firm9%
    VISITORS READING REVIEWS
    Computer Software Company22%
    Comms Service Provider10%
    Financial Services Firm7%
    Manufacturing Company6%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise32%
    Large Enterprise41%
    REVIEWERS
    Small Business32%
    Midsize Enterprise19%
    Large Enterprise49%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise57%
    Large Enterprise28%
    REVIEWERS
    Small Business54%
    Midsize Enterprise19%
    Large Enterprise27%
    VISITORS READING REVIEWS
    Small Business31%
    Midsize Enterprise19%
    Large Enterprise51%
    Buyer's Guide
    Check Point NGFW vs. Fortinet FortiGate-VM
    March 2024
    Find out what your peers are saying about Check Point NGFW vs. Fortinet FortiGate-VM and other solutions. Updated: March 2024.
    765,234 professionals have used our research since 2012.

    Check Point NGFW is ranked 5th in Firewalls with 275 reviews while Fortinet FortiGate-VM is ranked 8th in Firewalls with 113 reviews. Check Point NGFW is rated 8.8, while Fortinet FortiGate-VM is rated 8.4. The top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". On the other hand, the top reviewer of Fortinet FortiGate-VM writes "It's a solidly stable device with minimal downtime". Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Sophos XG, Netgate pfSense, Cisco Secure Firewall and Azure Firewall, whereas Fortinet FortiGate-VM is most compared with Azure Firewall, Palo Alto Networks VM-Series, Fortinet FortiOS, OPNsense and Netgate pfSense. See our Check Point NGFW vs. Fortinet FortiGate-VM report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.