Check Point CloudGuard Posture Management vs. Cisco Security Cloud Control

Dome9 can be used to have visibility into cloud assets and security policies across all the virtual networks, regions, and accounts on AWS, Azure and GCP. It also provides continuous enforcement of regulatory compliance standards and security best practices, with the ability to auto-remediate misconfigurations. So Dome9 is well suited for companies using cloud providers that want to take control of their resources.

Incentivized

Use case would be if you wanted most of the functionality of the FMC on prem but had no datacenter, cloud presence in AWS, or a cloud presence in Azure for an FMCv. You gain an always up FMC to manage the firewalls due to resiliency of the cloud FMC. You get almost all the functionality of an FMC on prem.

Incentivized

• Minimal false positives if configured properly.
• End to end visibility in real-time.
• Multi platform monitoring.

Incentivized

• Upgrade OS
• Manage changes at scale
• Group like configurations
• Clone configs for other firewalls
• Migrate from on prem to cloud

Incentivized

• Needs to add features for an on-premise cloud.
• Cost is a little high.

Incentivized

• Better templates like pushing config. when a particular firewall checks in with CDO.
• Compliance checking for configurations would be great. For example: make sure http is shut and https is open.

Incentivized

I give this score because I believe that Cisco Defense Orchestrator helps our company to be resilient, this is because this software is also focused on offering security resilience at the enterprise level, that is, through its features such as high visibility, acceleration of threat detection and response, simple management, and end-to-end protection. By having it, it is more feasible to avoid disasters or risks in the devices that are handled daily and of course avoid data loss and, given this, be able to recover quickly if something happens.

Is easy to use, and the standad configuration is well prepared.

Incentivized

I believe that Cisco Defense Orchestrator is available when needed, this solution has allowed the security team to have better productivity thanks to the fact that their workflow is less intense because they can carry out their tasks with the help of this software, in addition to the presence If there is an error, they can be overcome quickly because their support team is efficient.

Checkpoint support is great. They provide great SLAs and they comply with service times accordingly.

Incentivized

Cisco Defense Orchestrator is a software that is easy to implement, although knowledge is required for it, but if you do not have it, going to its valuable support team is very helpful. If done knowingly, this process can take less than two hours. Having a simple implementation is a valuable feature because it saves time and expense.

First and foremost reason of our client selecting CheckPoint CloudGuard Posture Management / Dome9 was because they already had CheckPoint Firewalls which are in active use e.g. R75.40 and R82.x products. Customization Vs these other Vendors is another great asset Reporting is one more standout feature, + Multi-cloud capabilities Centralized dashboarding is smooth to navigate as compared to other Vendors Syslog handling is much better as compared to some other vendors , Memory and space issues if planned well are less

Incentivized

McAfee ePolicy Orchestrator is a simple, flexible, and easy-to-implement configuration solution, however, with Cisco Defense Orchestrator there is an implementation in the cloud and the ease of managing all devices from a single console regardless of location, in addition to its analysis of security policies security help us to know if the ones that are being used are fulfilling their function or if changes are required to make infrastructure more secure, that is why we chose this Cisco software.

• Having one single pane of glass dashboard helps cut downtime for one tech to assess the overall health of the cloud.
• The cost was a little high, and the setup time was longer than expected to leverage the functionality we paid for fully.
• Overall a good product so far

Incentivized

• Much faster management.
• Can access firewall without having to go on site if the VPN tunnel is down.

Incentivized