Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
We never had an outage of the appliances or the consoles. Stability is very strong. I never had a problem related to stability.
It is easy to configure and it is a valuable antivirus protection. I especially like the IPS feature of this product.
The most valuable feature is the IPsec VPN.
The Smart Dashboard and other user interfaces are very easy to use and can be handled without any significant IT skills.
After introducing this NGFW, we have improved our security posture, and now, have peace of mind.
It filters unwanted traffic.
I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site.
I could still keep the data rates really high, up near the two gigahertz data speeds, without compromise on the security perimeters being acted simultaneously.
We have used technical support for WatchGuard many times and overall, we are satisfied with it. They are always listening and there is a good reaction time to our findings. When there are issues, they really try to resolve them.
Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular.
Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process.
They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time.
It is stable and does not require you to reboot all the time.
It configures in all-in-one place.
I would like for them to develop the ability to manage a cloud firewall with the same console. That would be very helpful.
The presentation of the reports need to be more user-friendly.
Check Point Smart Dashboard does not support my Apple MacBook Air. It only supports Windows versions.
Check Point Smart Dashboard does not support my Apple MacBook Air.
We looked very closely at ArcSight's solution because it's a multi-vendor solution. With ArcSight we could have Check Point, we could have RSA, we could have any brand and integrate several brands, from a security point of view. With Check Point, you cannot do so, you can integrate with Check Point products.
There are some issues compared to other products. Ease of use is one.
Stability issues. I built out this firewall in a cluster, and I had stability issues day one. Needs to be rebooted frequently. Tunnels need to be bounced frequently. Their hardware compatibility guide, when I built out the servers to host them on, was not accurate.
The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic.
Setup of this solution is complex, it's not plug and play.
Sometimes we have had issues with stability of the product.
WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure.
The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out.
Cloud-based central administration of all devices from one point would be nice
Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer).
The VPN errors are not helpful when troubleshooting.
Pricing and Cost Advice
The price is high in comparison to other solutions.
Check Point solutions are very expensive here. They're good, but they're expensive... Check Point is only useful for customers that have a big IT budget.
I don't think the product's pricing is a good value. I feel it's very overpriced. I feel a lot of the features for a next gen firewall are there. But I feel it's overpriced, because of the stability issues. As far as support goes, I really can't speak to direct Check Point support, but the third-party was pretty terrible... As far as the licensing goes, it's pretty complex. If anybody was to purchase the Check Point product, definitely make sure they have an account rep come on site, and explain it line by line, what each thing is. It's not straightforward. It's very convoluted. There's no way you could just figure it out by looking at it.
The licensing and renewal is very expensive.
Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative.
Very competitive pricing regarding throughput compared to other alternatives.
It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use.
Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network.
out of 48 in Firewalls
out of 48 in Firewalls
Compared 61% of the time.
Compared 39% of the time.
Compared 27% of the time.
Compared 14% of the time.
Compared 13% of the time.
Also Known As
|Check Point NG Firewall, Check Point Next Generation Firewall|
Your network is under constant threat. To secure it, you need the most advanced firewall protection. Check Point Next Generation Firewall identifies and controls applications by user and scans content to stop threats.
|Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection Ð but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.|
Learn more about Check Point NGFW
Learn more about WatchGuard XTM
Information Not Available
|AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense|
No Data Available
Financial Services Firm36%