We just raised a $30M Series A: Read our story

Compare Check Point CloudGuard Network Security vs. Fortinet FortiGate-VM

Cancel
You must select at least 2 products to compare!
Featured Review
Anonymous User
Dhsrms Fff
Find out what your peers are saying about Check Point CloudGuard Network Security vs. Fortinet FortiGate-VM and other solutions. Updated: November 2021.
555,139 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"Being able to determine our active users vs inactive users has led us to increased productivity through visibility. Also, if an issue was happening with our throughput, then we wouldn't know without research. Now, notifications are more proactively happening.""Its Snort 3 IPS has better flexibility as far as being able to write rules. This gives me better granularity.""The most valuable features of this solution are advanced malware protection, IPS, and IDS.""One of the most valuable features of Firepower 7.0 is the "live log" type feature called Unified Event Viewer. That view has been really good in helping me get to data faster, decreasing the amount of time it takes to find information, and allowing me to fix problems faster. I've found that to be incredibly valuable because it's a lot easier to get to some points of data now.""Feature-wise, we mostly use IPS because it is a security requirement to protect against attacks from outside and inside. This is where IPS helps us out a bunch.""Firepower has been used for quite a few enterprise clients. Most of our clients are Fortune 500 and Firepower is used to improve their end to end firewall functionality.""The Firepower+ISE+AMP for endpoint integration is something that really stands it out with other vendor solutions. They have something called pxGrid and i think it is already endorsed by IETF. This allows all devices on the network to communicate.""We have not had to deal with stability issues."

More Cisco Firepower NGFW Firewall Pros »

"The solution has been quite stable.""The visibility, the one-pane-of-glass which allows me to see all of my edge protection through one window and one log, is great. Monitoring everything through that one pane of glass is extremely valuable.""The installation process doesn't take very long.""The comprehensiveness of the CloudGuard’s threat prevention security is great, especially once they integrate Dome9 in the whole thing. That really ties the whole thing together, so you can tie your entire cloud environment together into one central location, which is nice. Previously, we had three or four different tools that we were trying to leverage to do the same stuff that we are able to do with CloudGuard.""It's possible to sync the Check Point Management with the cloud portal, therefore allowing automated rules to be set in place whenever creating a new VM.""The most valuable features are the VPN Blade, IPS Blade, the URL filtering, and the Applications Control Blade.""The most valuable feature is that we can use the same manager server that we use on our own Check Point firewalls. We integrated CloudGuard on that manager and we can use the same kind of protections that we use on the on-prem firewalls, like the IPS and antivirus policy. We can have the same kind of protection on the Cloud environment that we have on-premise.""The initial setup is pretty easy."

More Check Point CloudGuard Network Security Pros »

"The technical support is very good.""The most valuable features of this solution are the integration within the environment, with centralized reporting.""The most valuables features are the ease of use and deployment.""The interface is decent.""The EPM bundle is a good feature.""I find the simplicity to be most valuable.""It's very easy to set up, even for more junior developers.""The most valuable features we have found to be the VPN, ease of use, and overall simplicity."

More Fortinet FortiGate-VM Pros »

Cons
"An area of improvement for this solution is the console visualization.""When you make any changes, irrespective of whether they are big or small, Firepower takes too much time. It is very time-consuming. Even for small changes, you have to wait for 60 seconds or maybe more, which is not good. Similarly, when you have many IPS rules and policies, it slows down, and there is an impact on its performance.""The intelligence has room for improvement. There are some hackers that we haven't seen before and its ability to detect those types of attacks needs to be improved.""Web filtering needs improvement because sometimes the URL is miscategorized.""In a future release, it would be ideal if they could offer an open interface to other security products so that we could easily connect to our own open industry standard.""I would like it to have faster deployment times. A typical deployment could take two to three minutes. Sometimes, it depends on the situation. It is better than it was in the past, but it could always use improvement.""One feature I would like to see, that Firepower doesn't have, is email security. Perhaps in the future, Cisco will integrate Cisco Umbrella with Firepower. I don't see why we should have to pay for two separate products when both could be integrated in one box.""I would like to see improvement when you create policies on Snort 3 IPS on Cisco Firepower. On Snort 2, it was more like a UI page where you had some multiple choices where you could tweak your config. On Snort 3, the idea is more to build some rules on the text file or JSON file, then push it. So, I would like to see a lot of improvements here."

More Cisco Firepower NGFW Firewall Cons »

"The biggest room for improvement is that, for a long time now, they've moved everything over to R80 but they still maintain some of the stuff in the old dashboard. They need to "buy in" and move everything to the modern dashboard so that you don't have to go to one place and to another place, at times, to configure the environment. It's time they just finish what they started and put everything in the new, modern dashboard.""Zero touch removes any independence for configuring.""I would like to see a step-by-step initial installation of the firewall. That would be really helpful. Like in Oracle appliances, when you start it asks you, what's your current IP address? An initial setup should be a step by step and intuitive process. You click on "begin," it asks you some simple questions. You fill in the blanks - your current IP address, what you want to do, you want to set up a site to site VPN, for example, that kind of thing. That would be the smartest thing to have.""It's meeting our needs at this time. If I could make it better, it would be by making it more standalone. That would be beneficial to us. I say that because our current platform for virtualization is VMware. The issue isn't any fault of Check Point, it's more how the virtualization platform partners allow for that partnership and integration. There has to be close ties and partnerships between the vendors to ensure interoperability and sup-portability. There is only so far that Check Point, or any security vendor technology can go without the partnership and enablement of the virtualization platform vendor as it relies on "Service Insertion" to maintain optimal performance.""As an administrator, I can say that among all of the Check Point products I have been working with so far, the Virtual Systems solution is one of the most difficult.""Most clients nowadays tend to move to the cloud and their data security is key. If CloudGuard could be able to give the client that full visibility of how their data is protected on the cloud, then that would be a great selling point for Check Point.""I hope that Check Point continues to improve its technical documentation regarding the Check Point CloudGuard IaaS gateway and management system.""The API integration is complex, which is an area that should be improved."

More Check Point CloudGuard Network Security Cons »

"When new versions are deployed they tend to be a little buggy, so they should be more fully tested before release.""There should be more options to use lower-end models in a high availability configuration.""The interface of the solution could be improved.""Their offering for MFA isn't the cleanest.""The price is problematic.""The one thing that could be improved is the integration with the exchange. The gateway level controls can be enhanced a bit more. For example, it's still little here and there. You do get malicious attacks and suspicious emails like spam. It's not like Sophos where we got a lot of spam email, and yet, it's still relatively vulnerable. It can be upgraded, maybe with a fifth-generation firmware that it is ready for unknown threats.""We have encountered certain issues with the bandwidth in respect of the security layer.""FortiGate-VM could be improved by making it cloud-based. I'd like it to be a cloud-based management solution instead of just a dedicated management orchestration tool."

More Fortinet FortiGate-VM Cons »

Pricing and Cost Advice
"When we purchased the firewall, we had to take the security license for IPS, malware protection, and VPN. If we are using high availability, we have to take a license for that. We also have to pay for hardware support and technical support. Its licensing is on a yearly basis.""The price of Firepower is not bad compared to other products.""This product is expensive.""It definitely competes with the other vendors in the market.""There are additional implementation and validation costs.""Its price is in the middle range. Both Firepower and FortiGate are not cheap. Palo Alto and Check Point are the cheapest ones. I don't remember any costs in addition to the standard licensing fees.""Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed.""I am happy with the product in general, including the pricing."

More Cisco Firepower NGFW Firewall Pricing and Cost Advice »

"There is flexibility in the different licensing models that are offered.""It is not expensive, but it is a little bit above the middle range. There are other solutions that are a little more expensive than this, but they also have some interesting features.""Pricing of CloudGuard is pretty fair when you have a single account. It's comparable with other cloud providers. But for our use case, it got really pricey when we had to deploy multiple CloudGuards on multiple accounts in different regions, because you can't have CloudGuard protecting multiple regions. That's the big thing.""Licensing is available on a monthly or yearly basis.""You get charged only for what resources you choose and how much traffic actually passes through the firewall, which in turn saves a lot of money.""The price could be better.""Licensing is simply by the number of hosts that you are looking to protect within your environment. It makes it much easier to ensure that you are covering your environment.""Although I don't have specifics for pricing, based on my overall experience, I can conclude that Check Point provides the best pricing when comparing to other vendors."

More Check Point CloudGuard Network Security Pricing and Cost Advice »

"The price of this product is great compared to others.""There should be a reduction in the setup price and licensing costs.""Licensing is pretty standard. It's approximately 15% of the total cost per year as a subscription cost.""There is a support fee that can be bought on a yearly or two-yearly basis. I don't think they do five years. The best benefit is that the same pricing is guaranteed for that duration. If you can afford it, I would recommend using the longest possible time span.""With Fortinet FortiGate-VM you can bring your own licensing, or it can be paid on a yearly basis.""At present, the SD-WAN licenses are on an annual basis.""We pay for a yearly license.""There is a benefit in terms of the cost of using this solution because the price is very good."

More Fortinet FortiGate-VM Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
555,139 professionals have used our research since 2012.
Questions from the Community
Top Answer:  When you compare these firewalls you can identify them with different features, advantages, practices and… more »
Top Answer:  The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
Top Answer: It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
Top Answer: Check Point has pretty simple solutions, like the virtual appliance which you just download and it is imported into… more »
Top Answer: The cost is on the higher side, as it is based on workload, hence we need to decide which VPC or workload needs to be… more »
Top Answer: In terms of what could be improved, we have no support with the current Check Point environment. It ended maybe three or… more »
Top Answer: In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
Top Answer: Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate… more »
Top Answer: The most valuable feature is the WAN optimization.
Comparisons
Also Known As
Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
FortiGate Virtual Appliance, FortiGate-VM
Learn More
Overview

Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

Check Point CloudGuard provides unified cloud native security for all your assets and workloads, giving you the confidence to automate security, prevent threats, and manage posture – everywhere – across your multi-cloud environment.

FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

Offer
Learn more about Cisco Firepower NGFW Firewall
Learn more about Check Point CloudGuard Network Security
Learn more about Fortinet FortiGate-VM
Sample Customers
Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
Physicians Choice Laboratory Services, Helvetica Insurance
Security7 Networks, COOPENAE
Top Industries
REVIEWERS
Comms Service Provider22%
Financial Services Firm16%
Manufacturing Company8%
Non Profit8%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company21%
Government7%
Manufacturing Company3%
REVIEWERS
Financial Services Firm19%
Government11%
Computer Software Company11%
Program Development Consultancy7%
VISITORS READING REVIEWS
Comms Service Provider30%
Computer Software Company26%
Government5%
Energy/Utilities Company5%
REVIEWERS
Comms Service Provider19%
Financial Services Firm13%
Media Company6%
Construction Company6%
VISITORS READING REVIEWS
Comms Service Provider33%
Computer Software Company30%
Government5%
Energy/Utilities Company4%
Company Size
REVIEWERS
Small Business43%
Midsize Enterprise28%
Large Enterprise29%
VISITORS READING REVIEWS
Small Business21%
Midsize Enterprise13%
Large Enterprise66%
REVIEWERS
Small Business38%
Midsize Enterprise27%
Large Enterprise35%
VISITORS READING REVIEWS
Small Business8%
Midsize Enterprise55%
Large Enterprise37%
REVIEWERS
Small Business53%
Midsize Enterprise27%
Large Enterprise20%
Find out what your peers are saying about Check Point CloudGuard Network Security vs. Fortinet FortiGate-VM and other solutions. Updated: November 2021.
555,139 professionals have used our research since 2012.

Check Point CloudGuard Network Security is ranked 7th in Firewalls with 25 reviews while Fortinet FortiGate-VM is ranked 13th in Firewalls with 58 reviews. Check Point CloudGuard Network Security is rated 8.6, while Fortinet FortiGate-VM is rated 8.2. The top reviewer of Check Point CloudGuard Network Security writes "Unified Security Management has enabled us to combine our on-prem appliances and cloud environments". On the other hand, the top reviewer of Fortinet FortiGate-VM writes "Slightly unstable, needs a better user interface, and lacks good monitoring capabilities ". Check Point CloudGuard Network Security is most compared with Fortinet FortiGate, Palo Alto Networks NG Firewalls, Cisco ASA Firewall, Azure Firewall and VMware NSX, whereas Fortinet FortiGate-VM is most compared with Azure Firewall, Fortinet FortiGate, Palo Alto Networks VM-Series, OPNsense and Sophos XG. See our Check Point CloudGuard Network Security vs. Fortinet FortiGate-VM report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.