Check Point CloudGuard Posture Management vs. Trend Micro Deep Security

Dome9 can be used to have visibility into cloud assets and security policies across all the virtual networks, regions, and accounts on AWS, Azure and GCP. It also provides continuous enforcement of regulatory compliance standards and security best practices, with the ability to auto-remediate misconfigurations. So Dome9 is well suited for companies using cloud providers that want to take control of their resources.

Incentivized

So far we, unfortunately, have been using it in a limited scenario but we find that it has been very easy to use and manage in that scenario. Integrating the protection of our few saas applications was actually very simple and being able to use a very light weight agent like deep security agent has been very useful. Other agents ate up a lot of CPU or ram or both but this one is very light.

Incentivized

• Minimal false positives if configured properly.
• End to end visibility in real-time.
• Multi platform monitoring.

Incentivized

• Agentless Security
• Immediate protection upon boot
• Central Management Console
• DSVA easy deployment

Incentivized

• Needs to add features for an on-premise cloud.
• Cost is a little high.

Incentivized

• Agent updates can be a pain - sometimes requires a reboot.
• Trend upgrades don't always go as planned - install errors on the upgrades.
• It seems like there is a new vulnerability every week, sometimes.

Incentivized

It's the best one compared to other security applications

Incentivized

Is easy to use, and the standad configuration is well prepared.

Incentivized

It is the best application I've used. Its features are effective.

Incentivized

Checkpoint support is great. They provide great SLAs and they comply with service times accordingly.

Incentivized

Trend Micro's support is pretty decent, we have had issues in the past and they have been fairly responsive to us and our complaints. Depending on how severe the issue was. Any ticket that had a high priority was handled very shortly especially when we contacted our account rep even if it was after hours, we were still able to get support within a short time period.

Incentivized

Everything is good

Incentivized

First and foremost reason of our client selecting CheckPoint CloudGuard Posture Management / Dome9 was because they already had CheckPoint Firewalls which are in active use e.g. R75.40 and R82.x products. Customization Vs these other Vendors is another great asset Reporting is one more standout feature, + Multi-cloud capabilities Centralized dashboarding is smooth to navigate as compared to other Vendors Syslog handling is much better as compared to some other vendors , Memory and space issues if planned well are less

Incentivized

We selected trend micro to take the AV scans and filtering out of the hands of the Windows and Linux vm's we have deployed and move it to the hypervisor level. This has led us to be able to deploy only a single DSVA per host and can protect all VM"s that are on that hosts. This has allowed for more time being spent on other priority security tasks.

Incentivized

• Having one single pane of glass dashboard helps cut downtime for one tech to assess the overall health of the cloud.
• The cost was a little high, and the setup time was longer than expected to leverage the functionality we paid for fully.
• Overall a good product so far

Incentivized

• 100% positive ROI. Without Deep Security we would have to leverage and endpoint protection management solution like Sophos or SEPM (Symantec). Although both are good products, from a cost perspective it would have hit us much harder. Trend Micro Deep Security scales very nicely.
• Since Deep Security actually has zero (or at least unnoticeable) resource footprint on monitored VMs, it is a huge cost benefit for us. As previously mentioned, actual antivirus clients installed on each virtual machine (VM) would have significantly affected performance. This would have cost us much more additionally in paying for additional resources to allocate over VMs in the VMware environment. Deep Security is almost completely unintrusive from a resource perspective.
• Also, from a layered security perspective, it helps us meet our goals; and since the price of Trend Micro Deep Security quite reasonable, it is that much easier to get approval for this specific internal layer of security.

Incentivized