Check Point Quantum Firewalls and Security Gateways vs. Cisco Secure Web Appliance

Check Point Next Generation Firewall is a great solution for larger companies that have the ability to dedicate a large budget towards information security controls. In order to get the best return on investment, however, the company should have a highly functioning information security maturity level and the ability to invest in dedicated training so that all features are utilized effectively. The SmartEvent dashboards are able to provide ongoing data that can track this effectively.

Incentivized

Based on the platforms I have evaluated, I think the WSA is a great fit for any organization that needs a proxy server that provides control over what web sites are accessed or when they can be accessed. I think it is probably overkill if you simply need a proxy server for bandwidth savings or because you need to proxy general Internet access without extensive filtering needs.

Incentivized

• Provides prime level security at perimeter with 99% Accuracy.
• NGTP blade can provide features with maximum benefit.
• Check Point all in one evaluation blade provide access to evaluate the features.

Incentivized

• It does a great job of filtering emails based on IP reputation. This feature works particularly very well. Cisco has a vast database of IP reputation scores and therefore offers very few false positives and negatives.
• It checks each email thoroughly without any compromise of privacy. Any malicious link present in the body of the email makes its way to the quarantine. The IP reputation scores also help in this case.

Incentivized

• Fine tune required in the malicious domains blocking
• Antivirus signatures should be updated in real time
• Network latency can be reduced during high utilization time window

Incentivized

• The categories provided are not as granular as some competitors, like Websense.
• Cisco does not have as many resources devoted to categorizing websites as some competitors, like Websense.
• New features require administrators to pay attention to updates. New features are disabled by default.

Incentivized

Security Gateways are coming with a Hyperscale solution that provides maximum usability in production.

Incentivized

Because it's one of those products you almost don't realize it exists from the end user. From the administrator perspective, you can do everything on its web interface and it's very intuitive to manage, once you know the concepts behind identities, acls, etc. Also, once you build the control structure, I mean, you link 'local' groups with your own Active Directory groups, as we did here, you don't need to be managing those things on the appliance itself.

Incentivized

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

Our experience with Cisco's support was terrible. Other than the fact that they don't respond to service-related emails with urgency, they also keep on changing the policies that affected us. Recently, they came up with a new look for the same software, which was insanely slow. Renewal of keys for the old interface took months. Overall, the support was not very friendly from the users' point of view.

Incentivized

• Best Security meets Ultimate Hardware
• SandBlast Zero Day Protection out of the box
• Modular hardware
• High Performance CPUs
• I believe this has been covered prior - Smooth migration and very minimum downtime for a big FSI client. Our FSI client now also wants to integrate it with other 3rd party vendors which will be a part of Q3 or Q4 this FY

Incentivized

Considering we're with Cisco IronPort Web Security Appliances for the last 9 years, as I stated, we don't have too much experience with other producs. What I can say is that in the past, we evaluated Websense before it became Forcepoint and we also used MS ISA Server for webfilter. As you may imagine, IronPort is a very very superior product.

Incentivized

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• Having a much safer work system has given us the guarantee and security of always staying out of danger.
• The prevention system is important for us and always keeping our devices, web and emails free of any malicious agent has allowed us an excellent workflow, without distractions or inconvenience in the development of projects.
• Thanks to the fact that we have kept our work system safe, we have saved ourselves a lot of inconvenience, time spent, avoiding equipment damage, payments to solve problems, among many other problems that thanks to Cisco Secure Web Appliance we have been able to solve.

Incentivized