Most Helpful Review
Find out what your peers are saying about Check Point NGFW vs. WatchGuard Firebox and other solutions. Updated: March 2020.
441,726 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"At this point, we find that this product has high productivity and high availability and there is no need for improvement."
"It is a highly stable product. We rarely receive any serious outdates, so it works quite well."
"It is a secure product."
"It is scalable and stable."
"Cisco ASA is very strong."
"It protects our network."
"The stability of the product is good."
"It is a comprehensive suite and complete package."
"The most valuable feature is the IPsec VPN."
"The Smart Dashboard and other user interfaces are very easy to use and can be handled without any significant IT skills."
"After introducing this NGFW, we have improved our security posture, and now, have peace of mind."
"It is easy to configure and it is a valuable antivirus protection. I especially like the IPS feature of this product."
"We never had an outage of the appliances or the consoles. Stability is very strong. I never had a problem related to stability."
"We use Check Point to complete the network compliance rules."
"The initial setup was very straightforward. You can customize it and change it as you need."
"The solution is easy to use. I like the monitoring the most."
"I could still keep the data rates really high, up near the two gigahertz data speeds, without compromise on the security perimeters being acted simultaneously."
"The reports are detailed."
"The most valuable feature for small and medium businesses is the support for various protocol proxies."
"The most valuable feature is the GUI, especially the real-time bandwidth usage report. Also, its integration with WiFi access points is nice."
"The Dimension control, the one-spot reporting and control, has been nice. It's been easy to go in and make sure people are doing what they're supposed to be doing and that only the right stuff is getting in."
"I like the High Availability features of the newest ones I'm using because they allow a firewall to fail and still be up and running."
"I like their management features a lot. Their System Manager server as well the System Manager software make managing them, and tracking changes, very easy and complete."
"The most valuable are the VPN and proxy features."
"<p>If there is old hardware, or appliances, it does not necessarily work with the new Cisco generation firewalls."
"It is not easy to configure."
"The scalability is a bit limiting, to be honest. In terms of when you look to changing landscape in terms of threats, I think to me, my personal it's a bit limiting."
"Tech support could not answer all of our questions. I had to do research on the web to solve my issues."
"Migration with other appliances is not easy. It has to be done manually, and this takes a long time."
"The pricing is a bit high."
"Cisco ASA should be easier to use. It is a bit tough to navigate and see what is going on."
"Even on a smaller scale, people are finding you need HA pairs, and there's no way that the ASA can do that, at least in the virtual version."
"Check Point Smart Dashboard does not support my Apple MacBook Air. It only supports Windows versions."
"The presentation of the reports need to be more user-friendly."
"I would like for them to develop the ability to manage a cloud firewall with the same console. That would be very helpful."
"This product has room for improvement in technical support for Africa."
"Although they have it now, we don't have a license for it, and I think mobile device security should be a standard feature. I cannot control someone bringing their device to my network and what they do."
"All the advanced features of automation, especially the first installation of tunnels, need improvement."
"Reporting has to be improved."
"One of the biggest disappointments is the GUI."
"Setup of this solution is complex, it's not plug and play."
"This solution needs the option to add an external hard drive."
"It would be wonderful if the WatchGuard team develops nice products for threat intelligence."
"We bought Firebox four or five years ago, and with the first version I had to reboot it every two or three months for no apparent reason. We upgraded last year to the M370 and it's been running, but it is rebooting from time to time. I don't know why."
"A 12-hour power outage... got our batteries."
"The documentation for the System Manager/Dimension configuration, could be a little bit clearer... The use case where you have multiple sites with multiple firewalls, and one site that has the System Manager server and the Dimension server, wasn't really well defined. It took me a little bit of digging to get that to actually work."
"It's very hard to get information from their website, for exactly what I need to do. Sometimes I end up having to open a lot of support tickets... It's a navigational issue which makes it hard to find what I'm looking for and it's just so broad."
"One other shortcoming is that there is no backup for it. We really haven't figured out how we might solve that problem. We may want to put a duplicate in... With WatchGuard, we just have the one box. If that were to fail, we'd probably be really hurting."
Pricing and Cost Advice
"The cost is a bit higher than other competitive solutions on the market."
"It is considered on the "high end" of the spectrum."
"Cisco recently has become very expensive."
"The cost is a bit high compared to other solutions in the market."
"Purchasing from the AWS Marketplace was easy. It was just point and click."
"It is pay-as-you-go, so it much cheaper than buying in the plants."
"Our individual release cycle has been quicker because the entire development and testing environment has been automated because of these virtual instances. It has aligned our development workflow. This is where we have seen the ROI increase."
"With the Cisco ASA, you do get what you pay for. What would really be awesome is to see Cisco blow out a real cheap version where you can use the sandbox, but leave it step-wise and go to another product relatively easily, like getting you hooked on candy."
"The price is high in comparison to other solutions."
"We pay $5,000-$6,000 a year."
"Maybe the pricing is a bit high but you get the durability and the duration."
"Licensing issues may be confusing at times."
"It is quite an expensive product, although security is a top priority."
"This product is not cheap and there are additional costs that depend on what model or package that you buy."
"Palo Alto is somehow not as good as Check Point, budget-wise and performance-wise. Palo Alto is more costly than Check Point."
"Comparatively, Check Point pricing is a little high. However, if you have that budget, I would recommend anybody to go with Check Point."
"The subscription that was purchased is for three years, but it is usually for one year at a time."
"The cheapest configuration, for maybe five people, is approximately $500."
"The price is so small that I don't pay attention to it anymore. I think we pay a few thousand dollars for two to three years, so about $100 per month. That's for all of our users. There is an additional cost if we want to go with a deeper licensing model, but we just pay for antivirus, IPS, and main product support."
"I haven't seen the pricing since 2017, but it was competitive. SonicWall, Barracuda, and WatchGuard were all about the same price when we did our last pricing."
"Each one, for the primary unit, was $8,600 and the High Availability unit was $2,000. That's with three years of subscription and support and the Total Security Suite."
"We only license our corporate one and the one we have at our DR site, we don't worry about the branches. It doesn't pay for us to license the ones at the branches. What they charge for what they call basic maintenance is extremely high for those little fireboxes."
"The two larger devices are about $1,000 each and the smaller ones are about $500 or $600 each... It's cheaper and you have more control because it's self-managed."
"The cost three years ago was about $800."
Questions from the Community
Top Answer: Fortinet FGs: Great devices, relatively easy to deploy and maintain. Cheaper than most devices of their kind. If you're… more »
Top Answer: They provide DDoS protection and multi-factor authentication. That is a good option as it enables work-from-home… more »
Top Answer: In terms of costs, other solutions are more expensive than Cisco. Palo Alto is more expensive than Cisco.
Top Answer: Centralised dashboard for all checkpoints gateway with options of copying policy from 1 gateway to another Providing… more »
Top Answer: Licensing issues may be confusing at times.
Top Answer: I recently went from an M200 to M270 through their trade-up program. It cost a few dollars more than the subscription… more »
Top Answer: The main reason we went with it was the security protocols. They were more robust on this device.
Top Answer: The pricing was in line with everyone else; maybe slightly higher. That's why it's not a 10 out of 10.
Compared 34% of the time.
Compared 15% of the time.
Compared 8% of the time.
Compared 5% of the time.
Compared 2% of the time.
Compared 58% of the time.
Compared 18% of the time.
Compared 6% of the time.
Compared 4% of the time.
Compared 3% of the time.
Compared 25% of the time.
Compared 14% of the time.
Compared 10% of the time.
Compared 10% of the time.
Compared 4% of the time.
Also Known As
|Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv||Check Point NG Firewall, Check Point Next Generation Firewall|
Cisco ASA firewalls deliver enterprise-class firewall functionality with highly scalable and flexible VPN capabilities to meet diverse needs, from small/branch offices to high performance data centers and service providers. Available in a wide range of models, Cisco ASA can be deployed as a physical or virtual appliance. Flexible VPN capabilities include support for remote access, site-to-site, and clientless VPN. Also, select appliances support clustering for increased performance, VPN load balancing to optimize available resources, advanced high availability configurations, and more.
Cisco ASAv is the virtualized version of the Cisco ASA firewall. Widely deployed in leading private and public clouds, Cisco ASAv is ideal for remote worker and multi-tenant environments. The solution scales up/down to meet performance requirements and high availability provides resilience. Also, Cisco ASAv can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables greater simplicity, visibility, and efficiency.
Offered via the Check Point Infinity architecture, Check Point’s NGFW includes 23 Firewall models optimized for running all threat prevention technologies simultaneously, including full SSL traffic inspection, without compromising on security or performance. Learn More about Next Generation Firewall and What is Firewall?
WatchGuard's approach to network security focuses on bringing best-in-class, enterprise-grade security to any organization, regardless of size or technical expertise. Ideal for SMBs and distributed enterprise organizations, our award-winning Unified Threat Management (UTM) appliances are designed from the ground up to focus on ease of deployment, use, and ongoing management, in addition to providing the strongest security possible.
Learn more about Cisco ASA Firewall
Learn more about Check Point NGFW
Learn more about WatchGuard Firebox
|There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.||Control Southern, Optimal Media||Ellips, Diecutstickers.com, Clarke Energy, NCR, Wrest Park, Homeslice Pizza, Fortessa Tableware Solutions, The Phoenix Residence|
Financial Services Firm20%
Comms Service Provider13%
Computer Software Company26%
Comms Service Provider26%
Financial Services Firm26%
Computer Software Company14%
Computer Software Company25%
Comms Service Provider22%
K 12 Educational Company Or School6%
Comms Service Provider21%
Computer Software Company20%
See our list of .