Forcepoint Next Generation Firewall Overview

Forcepoint Next Generation Firewall is the #4 ranked solution in our list of SD-WAN tools. It is most often compared to Fortinet FortiGate: Forcepoint Next Generation Firewall vs Fortinet FortiGate

What is Forcepoint Next Generation Firewall?
Forcepoint Stonesoft Next Generation Firewall protects enterprise networks with high-performance "intelligence aware" security supported by real-time updates. This enables Stonesoft to deliver the industry's best defense against advanced evasions, alone with complete next-generation firewall protection when and where you need it - at remote sites, branch offices, data centers, and the network edge.

Forcepoint Next Generation Firewall is also known as Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform.

Forcepoint Next Generation Firewall Buyer's Guide

Download the Forcepoint Next Generation Firewall Buyer's Guide including reviews and more. Updated: June 2021

Forcepoint Next Generation Firewall Customers
California Department of Corrections and Rehabilitation (CDCR)
Forcepoint Next Generation Firewall Video

Pricing Advice

What users are saying about Forcepoint Next Generation Firewall pricing:
  • "I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."
  • "The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."

Filter Reviews

Filter by:
Filter Reviews
Industry
Loading...
Filter Unavailable
Company Size
Loading...
Filter Unavailable
Job Level
Loading...
Filter Unavailable
Rating
Loading...
Filter Unavailable
Considered
Loading...
Filter Unavailable
Order by:
Loading...
  • Date
  • Highest Rating
  • Lowest Rating
  • Review Length
Search:
Showingreviews based on the current filters. Reset all filters
Solutions Architect at Gilat telecom
Real User
Top 5
Good console management, but the interface is not user-friendly and application filtering needs finer granularity

What is our primary use case?

We had planned on using this product as our multi-tenant firewall. After one year, we stopped using it because there was a problem with supporting some of the protocols.

Pros and Cons

  • "The most valuable feature is the console management."
  • "If I want to allow access to Facebook, yet not allow the user to access videos, then I am not able to do it with this product."

What other advice do I have?

We tried a few implementations and we did not have very much success because the interface is not user-friendly and the product is complicated. If we had the training on time then it may have been easy but that wasn't the case. The biggest lesson that I learned from using this solution is that you can't trust what people tell you. When they say that they will take care of things and support it, that is not included. My advice for anybody who is implementing this solution is to make sure that the training is completed first, ahead of trying to implement it. I would rate this solution a four out…
BH
Security Pre-Sales Manager at a tech services company with 51-200 employees
Real User
Top 10
Has good performance and security and offers everything in one package

What is our primary use case?

Our customers use Forcepoint like a cluster, which is standby active and passive. They also use it for the perimeter firewall, so it's on-premises. The primary use case for this solution is when a customer asks for something that does automatic optimization, as well as security at the same time. It also has high performance capabilities, including enabling the SSL decryption feature. I recommend Forcepoint for these customers. If the customer has another solution for deep packet inspection of SSL encrypted traffic, I recommend Palo Alto, because they already have a solution for deep packet… more »

Pros and Cons

  • "When our customer needs some optimization, along with performance and security. If they want everything in one package, I recommend Forcepoint because they have everything."
  • "The optimization is not really ready. If you want very good optimization, you have to add it to the network."

What other advice do I have?

They just need to make sure that their environment is ready for implementing the firewall. They have to prepare for about two hours of downtime because we need some downtime to do the initial configuration. They need to be prepared for the deployment plan. That's all. The biggest lesson I learned is that you cannot provide everything in one box. You can provide everything in one box, but you cannot provide everything deeply with the same quality all in one box. You need to give up on something to gain another. I'm always telling the customer, what's your biggest issue? Is it security or…
Learn what your peers think about Forcepoint Next Generation Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: June 2021.
509,641 professionals have used our research since 2012.
PM
Security Specialist at a energy/utilities company with 51-200 employees
Real User
Top 5
Centralized security management eases configuration to help prevent attacks

What is our primary use case?

Our primary use case for this solution is as a perimeter between our internal and external networks. It is a critical security firewall. We have an on-premises deployment.

Pros and Cons

  • "The central security management center and the content management center are very good."
  • "This solution would be improved with the inclusion of custom reporting."

What other advice do I have?

Forcepoint is my favorite enterprise firewall. The security management center is the best part of this solution. It is always very simple to see the state of the firewall and to configure it to look for faults. The quality of this component is very high. Previous solutions were not very good with respect to the management center, but now, in this solution, it is very good. This is the main reason that I recommend this solution to others. This feature is absolutely necessary if you want to configure devices to prevent attacks. I would rate this solution a ten out of ten.
TA
Systems Engineer at a tech services company with 11-50 employees
Reseller
Top 5Leaderboard
A stable solution that has improved a lot

What is our primary use case?

We are a platinum partner of Forcepoint. We work on most of the Forcepoint portfolio, such as web security, event security, and DLP at the endpoint level as well as at the laptop level. This solution can be used for different use cases. You can deploy it as an IPS near the data center zone. You can also put it in-line, which is recommended most of the time not only for Forcepoint but also for many other next-generation firewall vendors. Otherwise, you need to deploy it as a normal next-generation firewall and enable some specific IPS policies on the firewall itself. One of our customers needed… more »

Pros and Cons

  • "It is a stable solution, and there are no issues so far."
  • "Its management center should be easier to use. The management interface of Forcepoint is unique and a little bit different from some of the firewall solutions on which people might have worked before. Sometimes, the customers say that it is not very friendly, and we help them with how to use this management interface. It just takes a little bit of time, and after some time, it gets easy to manage or use. It is quite similar to Palo Alto, Fortinet, and legacy Juniper solutions. Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us."

What other advice do I have?

I would recommend this solution in general. We have collected a lot of feedback from customers related to the management, which we will forward to Forcepoint, and then after some time, they will take action on that. They have improved a lot since they were acquired from McAfee. Earlier, if you wanted to access SMC, you needed remote desktop access to the server or you had to install a small software from the SMC as a client to control the firewall. Customers used to ask us about why they cannot access the firewall management by UI or browser when most of the other firewalls already have such…
DM
Associate Consultant at SoftwareONE
Reseller
Good URL filtering with helpful technical support and good scalability

What is our primary use case?

We primarily provide the solution to our customers. I don't create the use cases. I just deploy as required. Largely, the solution is used for protection. It can be used for various purposes, including URL filtering, spam filtering, and VPN.

Pros and Cons

  • "Technical support has been quite helpful in the past."
  • "The company should update the URL filtering database. They need to enhance the URL filtering and make it easier to customize."

What other advice do I have?

We have a partnership with Forcepoint. We are resellers of the solution. We have clients that have the solution, and therefore we tend to deal with different versions of the solution. It might not always be the latest. I would recommend the solution. I would rate it at an eight out of ten.
IN
Information Security Consultant at a tech services company with 51-200 employees
Consultant
Top 10
Excellent for clustering but not a user-friendly solution with very bad GUI

Pros and Cons

  • "One of the most valuable features is having the ability to cluster multiple firewalls even if they are different versions."
  • "It's a complicated firewall. Until you come to know the firewall inducers, most people don't like the firewall because the components for the firewall are a little bit complex. User-friendliness is a little bit tough. It needs to be user-friendly when creating policies, and pushing policies. Committing takes more time compared to Palo Alto."

What other advice do I have?

What others need to know is that they need to have a clear idea of why they're going for this particular firewall. They need to know if are they looking for clustering or if are they looking for link load balancing. If they're not going for clustering, I would suggest they go with the most moderate firewalls like Palo Alto or Fortinet. A certain type of attack, such as evasion techniques, isn't something that other firewalls really protect against. According to NSS Labs, Forcepoint firewall has been on top for the last consecutive four or so years because of the detection rate of evasion…
AN
Head of Infrastructure & Cloud Section at a computer software company with 1,001-5,000 employees
Real User
Top 20
It comes with functionalities to simplify operations and management

What is our primary use case?

We give consultancy and propose technology based on the customer's design. We also do long-term deployments. Normally, our solutions are deployed on-premises. We have some key projects where almost everything is deployed on-premises. We also manage the solutions and infrastructures with firewalls, network devices, etc. We have a great experience with different technologies, and Forcepoint is one of them.

Pros and Cons

  • "The feature that we like the most about Forcepoint is that we know the technology and have confidence in it. We can have several functionalities to simplify operations and management. We can combine functionalities like log ownership to review the number of devices in the infrastructure."
  • "Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices."

What other advice do I have?

We are managing a customer's infrastructure where we have two pairs of Forcepoint Next Generation Firewall working without any major problem. I would recommend Forcepoint Next Generation Firewall based on your needs. It's very useful for us to mix several technologies on the same platform to increase its security level. We have experience with Check Point, FortiGate, Palo Alto, and StrongGate (which became McAfee and then Forcepoint). Many times, we combine two or three technologies into the same platform without any problem. However, we did have a horrible experience with Forcepoint in the…
MS
Managing Director at a tech vendor with 11-50 employees
Real User
Top 20
Good blocking and very stable but needs better network functionality

What is our primary use case?

I provide Forcepoint services to my clients.

Pros and Cons

  • "The blocking, based on the signal provided, is the solution's most valuable aspect."
  • "The solution needs to build upon its network functionality. It needs to be a bit smarter."

What other advice do I have?

We're a developing company that works with a lot of legacy suppliers that offer clients security solutions. From my perspective, such legacy supplier companies such as McAfee, Checkpoint, and Forcepoint. We help our clients implement certain solutions. I would absolutely recommend the solution. When it comes to the ease of deployment of the functionality, I would strongly recommend it. Forcepoint has great security functionality. However, one downside that is I see is that they need to improve some network functionality. This is very important due to the fact that network functionality is very…
See 16 more Forcepoint Next Generation Firewall Reviews
Product Categories
Firewalls SD-WAN WAN Edge
Buyer's Guide
Download our free Forcepoint Next Generation Firewall Report and get advice and tips from experienced pros sharing their opinions.