Check Point Quantum Firewalls and Security Gateways vs. Forcepoint Secure Web Gateway

Check Point Next Generation Firewall is a great solution for larger companies that have the ability to dedicate a large budget towards information security controls. In order to get the best return on investment, however, the company should have a highly functioning information security maturity level and the ability to invest in dedicated training so that all features are utilized effectively. The SmartEvent dashboards are able to provide ongoing data that can track this effectively.

Incentivized

Over the years, [in our experience], the maintenance of the Forcepoint Web Security solution proved to be more cumbersome and troublesome with each version upgrade. In addition, it did not transition well to support the large increase of remote workers. We also experienced weird incompatibilities with the client. We have since replaced this solution with Zscaler Internet Access, a cloud-based secure web gateway solution with a client that behaves as expected, is more flexible, and requires significantly less administration.

Incentivized

• Provides prime level security at perimeter with 99% Accuracy.
• NGTP blade can provide features with maximum benefit.
• Check Point all in one evaluation blade provide access to evaluate the features.

Incentivized

• This package is one of the few that offers a category, quota time, that allows us to limit certain categories and or websites for staff that would normally be blocked for customers and may not be something that is needed in their day to day job duties. We allow staff one hour a day, broken down into six 10 min increments, to visit sites for shopping, travel arrangement and other areas that are more of a personal need than a business need.
• Forcepoint has a wide selection of categories that can be enabled, quota timed or restricted at a top-level or you can go more granular and drill down to subcategories to allow for only partial access.

Incentivized

• Fine tune required in the malicious domains blocking
• Antivirus signatures should be updated in real time
• Network latency can be reduced during high utilization time window

Incentivized

• The user access logs contain a lot of useless information. I understand this is very hard to tackle as I've seen this across any product that logs web activity.
• I would like to see more customization options of website block pages.

Incentivized

It is very stable, the organisation has "locked in" the product and has no plans to change or try another product. We have already renewed our 2019-2020 licenses. It is user friendly and people catch on easily when they first use it. The only downtime is when we install Microsoft updates! It has excellent reporting which help in determining how the organisation's Internet is used and also during both internal and external IT audits.

Incentivized

Security Gateways are coming with a Hyperscale solution that provides maximum usability in production.

Incentivized

Despite the intimidating Linux CLI when you use the appliance for troubleshooting, the web security usability compensates as most of the Administration of the system is done there. It is GUI based and has an easy to use UI where one can navigate around rather easily like getting reports, checking alerts, looking the whole setup under deployment to check if all services are running in one place though there are other parts to the system.

Incentivized

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

The is a quick first response to acknowledge your issue and the Engineers never take more than two hours to fix an issue and we hardly get issues looking at the fact that the system is pretty stable. There is also a robust Knowledge Base in the site for known problems.

Incentivized

Research known issues with upgrading from the Support Knowledge base, this will enable you avoid road blocks along the way and reduce your dependence on Forcepoint Support

Incentivized

• Best Security meets Ultimate Hardware
• SandBlast Zero Day Protection out of the box
• Modular hardware
• High Performance CPUs
• I believe this has been covered prior - Smooth migration and very minimum downtime for a big FSI client. Our FSI client now also wants to integrate it with other 3rd party vendors which will be a part of Q3 or Q4 this FY

Incentivized

To be honest, once using Forcepoint for our Web Security, I have not wanted to look anywhere else. The dashboard gives me quick insight of threats, productivity, and bandwidth usage. Again, this is a layer in my security and it fills many holes. I feel safe and I do like I can just let it do its thing

Incentivized

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• We have had potential malware outbreaks prevented because of Forcepoint Web Security
• Questionable access of certain materials on the internet has been prevented because of our implementation
• The organization's network resources now have more bandwidth because of the restrictions the application provides

Incentivized