IT Infrastructure and Security Manager at a logistics company with 1,001-5,000 employees
Real User
Top 20
2023-08-22T15:57:09Z
Aug 22, 2023
For features and functionality, take a look at Palo Alto and Fortinet. Cisco is very good, however, they are not at the level for Next-gen features when compared to Palo Alto and Fortinet. If you have cloud infrastructure then you may wish to look at Zscaler. CheckPoint and Juniper are also very good options. If you are looking at open source then look at pfSense. Take a look at this article: 7 Best Firewall Solutions for Enterprises in 2023 (enterprisenetworkingplanet.com)
It's completely depend on the use case and budget. For easy management and better support you can go with Sonicwall NSA, for more security can go with Checkpoint, for low budget and for expert I recommend pFsense. In case of large tech service company, there should be 2 FW, one at external perimeter and other use in Internal network to protect sensitive area. For external use Checkpoint in HA and for internal you can use pFsense. Rest do more research and map your use case.
(I am obviously biased, but...) Please read the Miercom report:https://pages.checkpoint.com/m...Miercom is a leading independent test and validation organization that recently tested the security effectiveness of the industry’s top four enterprise firewall vendors. Miercom challenged all four vendor solutions with a wide range of malware, phishing and attack vectors. Check Point led in all categories by achieving a 99.7% malware block rate, 99.9% phishing prevention rate, and ultra-low 0.1% False Positive Detection rate.I hope this is helpful!
Vice President and Head - IT Telecom, Software License Management and Collaboration at Mphasis
Real User
Top 10
2023-08-25T05:30:33Z
Aug 25, 2023
It will be good if you can explore Palo Alto and Fortinet firewall series based on your capacity need. Both firewalls fall under the next generation category and have protection at various layers and with advanced features and integrations. Kill to manage these firewalls easily available in market and have scalability with respect to number of ports available on hardware.
Network / Security Design and Installation Engineer at a financial services firm with 1,001-5,000 employees
Real User
Top 5
2023-08-24T14:38:06Z
Aug 24, 2023
I have worked with all firewalls and the two that stand out are Checkpoint and Palo Alto. the disadvantage with Checkpoint is the cost of the device and training but it has been around the longest. if I would recommend any firewall it would be the Palo Alto due to the real layer 7 inspection. All call themselves the next-gen firewalls and in doing so have invalidated that word in the firewall market. Look for the layer 7 inspection abilities when considering a firewall ask for details on how it is done, and lastly ask what subscriptions are required to perform this service.
Outta my experience Cisco and Paloalto, both have its own USP's, also it depends on the use case. whether it's for gateway level or at branch level and depends on the usage of the end users. hope you've already considered all these parameters.
1. Cisco - Now the NGFW with new FTD software is really working out good with Enterprise customers, also the operational point of view ease to manage it with the help of FMC gives very good dashboard experience too. ( https://www.cisco.com/site/in/...)
A firewall is a device used for network security. It monitors network traffic (both incoming and outgoing) and then, based on a set of security rules, either permits or blocks data packets.
For features and functionality, take a look at Palo Alto and Fortinet. Cisco is very good, however, they are not at the level for Next-gen features when compared to Palo Alto and Fortinet. If you have cloud infrastructure then you may wish to look at Zscaler. CheckPoint and Juniper are also very good options. If you are looking at open source then look at pfSense. Take a look at this article: 7 Best Firewall Solutions for Enterprises in 2023 (enterprisenetworkingplanet.com)
It's completely depend on the use case and budget. For easy management and better support you can go with Sonicwall NSA, for more security can go with Checkpoint, for low budget and for expert I recommend pFsense. In case of large tech service company, there should be 2 FW, one at external perimeter and other use in Internal network to protect sensitive area. For external use Checkpoint in HA and for internal you can use pFsense. Rest do more research and map your use case.
(I am obviously biased, but...) Please read the Miercom report:https://pages.checkpoint.com/m...Miercom is a leading independent test and validation organization that recently tested the security effectiveness of the industry’s top four enterprise firewall vendors. Miercom challenged all four vendor solutions with a wide range of malware, phishing and attack vectors. Check Point led in all categories by achieving a 99.7% malware block rate, 99.9% phishing prevention rate, and ultra-low 0.1% False Positive Detection rate.I hope this is helpful!
It will be good if you can explore Palo Alto and Fortinet firewall series based on your capacity need. Both firewalls fall under the next generation category and have protection at various layers and with advanced features and integrations. Kill to manage these firewalls easily available in market and have scalability with respect to number of ports available on hardware.
I have worked with all firewalls and the two that stand out are Checkpoint and Palo Alto.
the disadvantage with Checkpoint is the cost of the device and training but it has been around the longest.
if I would recommend any firewall it would be the Palo Alto due to the real layer 7 inspection.
All call themselves the next-gen firewalls and in doing so have invalidated that word in the firewall market.
Look for the layer 7 inspection abilities when considering a firewall ask for details on how it is done, and lastly ask what subscriptions are required to perform this service.
1) freeware should be OPN Sense or PFSense
2) using license you can use Sophos or Fortinet
simple as that, any of those are really good.
Hi Hwaeum,
Outta my experience Cisco and Paloalto, both have its own USP's, also it depends on the use case. whether it's for gateway level or at branch level and depends on the usage of the end users. hope you've already considered all these parameters.
1. Cisco - Now the NGFW with new FTD software is really working out good with Enterprise customers, also the operational point of view ease to manage it with the help of FMC gives very good dashboard experience too. ( https://www.cisco.com/site/in/...)
2. Paloalto - When application usage is maximum at the Network this helps better. ( https://www.paloaltonetworks.c...)