We just raised a $30M Series A: Read our story

Compare Check Point NGFW vs. Meraki MX

Cancel
You must select at least 2 products to compare!
Check Point NGFW Logo
15,983 views|11,435 comparisons
Meraki MX Logo
38,174 views|32,571 comparisons
Featured Review
Find out what your peers are saying about Check Point NGFW vs. Meraki MX and other solutions. Updated: March 2020.
552,136 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"The most important feature is the intensive way you can troubleshoot Cisco Firepower Firewalls. You can go to the bit level to see why traffic is not handled in the correct way, and the majority of the time it's a networking issue and not a firewall issue. You can solve any problem without Cisco TAC help, because you can go very deeply under the hood to find out how traffic is flowing and whether it is not flowing as expected. That is something I have never seen with other brands.""The most valuable features of this solution are the integrations and IPS throughput.""One of the nice things about Firepower is that you can set it to discover the environment. If that is happening, then Firepower is learning about every device, software operating system, and application running inside or across your environment. Then, you can leverage the discovery intelligence to get Firepower to select the most appropriate intrusion prevention rules to use for your environment rather than picking one of the base policies that might have 50,000 IPS rules in it, which can put a lot of overhead on your firewall. If you choose the recommendations, as long as you update them regularly, you might be able to get your rule set down to only 1,000 or 1,500, which is a significant reduction in a base rule set. This means that the firewall will give you better performance because there are less rules being checked unnecessarily. That is really useful.""Firepower NGFW has improved my organization in several ways. Before, we were trying to stamp out security threats and issues, it was a one-off type of way to attack it. I spent a lot of manpower trying to track down the individual issues or flare-ups that we would see. With Cisco's Firepower Management, we're able to have that push up to basically one monitor and one UI and be able to track that and stop threats immediately. It also gives us a little more granularity on what those threats might be.""We have not had to deal with stability issues.""It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS.""Firepower has been used for quite a few enterprise clients. Most of our clients are Fortune 500 and Firepower is used to improve their end to end firewall functionality.""Feature-wise, we mostly use IPS because it is a security requirement to protect against attacks from outside and inside. This is where IPS helps us out a bunch."

More Cisco Firepower NGFW Firewall Pros »

"Now we can add application signature in the same rule base & don't have to create a different policy for that.""The scalability is very good.""Even though Check Point NGFW provides a set of security features that enforce protection on the network, the most valuable aspect is also the most used feature: the plain and simple firewall component. This is the core of the product and works to a great extent without the need for all other available bells and whistles.""The event logs are relatively informative and can provide information on why traffic was accepted or rejected.""It's enabled us to move away from basic LAN to LAN segmentation to a more powerful user separation approach.""The central management makes it easier, and is a time-saver, when implementing changes.""Everything is easily managed through their Smart Console dashboard. It's a very easy-to-understand dashboard that provides a detailed view.""The different hardware models focus on a wide spectrum of the market, so any company can choose a model that makes sense for them from the range."

More Check Point NGFW Pros »

"Dual WAN connections are greatly simplified and point-to-point VPNs automatically connect regardless of what WAN connection is active.""We've had no issues with the scalability or the stability of this solution""In general, Meraki MX is easy to work with.""Point-to-point VPNs can dynamically follow IP changes with no need for static IPs.""Meraki MX offers advanced filtration options, plus it behaves like a router and a firewall at the same time.""It is very easy to use and manage. It is also very easy to scale.""They have very good technical support and I have relied heavily on them.""The technical support people from Meraki are brilliant."

More Meraki MX Pros »

Cons
"The initial setup could be simplified, as it can be complex for new users.""The solution could offer better control that would allow the ability to restrictions certain features from a website.""On the VPN side, Firepower could be better. It needs more monitoring on VPNs. Right now, it's not that good. You can set up a VPN in Firepower, but you can't monitor it.""They need a VTI. I know it's going to be available in the next software version, which is the 6.7 version. However, the problem with that is that the 6.7 is going to deprecate all the older IKEv1 deployment tunnels. Therefore, the problem is that we have a lot of customers which are using older encryptions. If I do that, update it, it's not going to work for me.""Cisco Firepower NGFW Firewall can be more secure.""We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond.""I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device.""The initial setup was a bit complex. It wasn't a major challenge, but due to our requirements and network, it was not very straightforward but still easy enough."

More Cisco Firepower NGFW Firewall Cons »

"The area it needs improvement is the SandBlast Agent. It receives a file, or if it detects a Zero-day attack, it takes the file and analyzes it, either on-premise or in the Check Point Cloud, and then it reports back whether the file is secure or non-secure, or is unknown. That particular area definitely needs a bit more improvement, because there is a delay... where it needs improvement is where [SandBlast is] an appliance-based solution rather than a software or cloud-based solution.""One area which is still lacking is the site-to-site VPN solution.""It would be ideal to manage everything from one central place.""The pricing could always be more competitive.""The predefined reports are few and it would be nice to increase them since the logs are excellent.""The number of physical network ports on the device should be increased to allow for greater capacity.""Technical support could be improved.""With the increase of volume of traffic, the required resource/hardware to properly run goes up. Therefore, the hardware engineering to architecture flow has to be more efficient."

More Check Point NGFW Cons »

"As far as what needs to be improved — nothing really comes to mind. It does what we need it to do.""You can only have one tunnel in the whole infrastructure — one tunnel with one device.""In general, the SD-WAN feature needs to be improved. The load sharing and load balancing of the traffic should be improved. I have had some problems with these features in the past.""Meraki tech support staff have a lot more visibility into your network than you do, which is frustrating at times. I understand the approach is to keep the dashboard easier to understand. This will frustrate more advanced users at times.​""In the next release, because the security is pretty basic, I think they could include additional security features.""It would be nice if the different services, including the SIEM SOC and endpoint detection and response (EDR) were integrated into one, so that I don't have to go to different vendors for different services.""You cannot use switching behaviors as you see on the Meraki switch.""The security is not as strong as it could be"

More Meraki MX Cons »

Pricing and Cost Advice
"Its pricing is good and competitive. There is a maintenance cost. It includes SecureX that makes it cost-effective as compared to the other solutions where you have to pay for XDR and SOAR capabilities.""The price is comparable.""Pricing is the same as other competitors. It is comparable. The licensing has gotten better. It has been easier with Smart Licensing.""Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed.""The price for Firepower is more expensive than FortiGate. The licensing is very complex. We usually ask for help from Solutel because of its complexity. I have a Cisco account where I can download the VPN client, then connect. Instead, I create an issue with Solutel, then Solutel solves the case.""This product is expensive.""Cisco pricing is premium. However, they gave us a 50 to 60 percent discount.""I like the Smart Licensing, because it is more dynamic and easier to keep track of where you are at. If we have a high availability firewall pair and they are deployed in active/standby rather than active/active, I would expect that we would only pay for one set of licenses because you are using only one firewall at any one time. The other is there just for resiliency. The licensing, from a Firepower perspective, still requires you to have two licenses, even if the firewalls are in active/standby, which means that you pay for the two licenses, even though you might only be using one firewall any one time. This is probably not the best way to do it and doesn't represent the best value for money. This could be looked at to see if it could be done in a fairer way."

More Cisco Firepower NGFW Firewall Pricing and Cost Advice »

"Licensing is pretty straightforward and is based on the blades available, such as NGFW, NGTP, and NGTX.""Licensing issues may be confusing at times.""I have done licensing and contracts for multiple firewalls. The license and contract configuration is completely fine, but if it is possible to make them cost a bit less, then this would be better.""The price of this product is not too costly and you do not need to pay for all of the features.""If you use the features then it's cost-effective. Otherwise, it's expensive.""Use the basic sizing tool to do the correct sizing so you don't waste too much money, because it's not a very cheap solution when compared to other vendors.""They sell it in one box. In that one box, they sell Antivirus and Threat Prevention. They have everything, so we are not required to purchase additional IPS hardware for it.""There is an annual license required for this solution."

More Check Point NGFW Pricing and Cost Advice »

"The price is slightly increased, but reasonable.""The license cost depends on the box. We acquired a different product line. We are dealing with MX appliance now, that is, MX6, MX54, MX100, MX250, MX450. Every box has got an identity, and it has got its own specification. Every box has got a different license fee. We deployed Meraki MX in UAE when it was not a mature product. We took a risk, but we were successful. We saved a huge amount of money after implementing and removing all the MPLS and leased lines. We got a broadband connection because Meraki MX could work on a broadband connection. We have drastically saved a very good amount of money, which was one of the successful things apart from the successful solution.""Meraki is the best option — based on the price and the features available.""​Other content filtering solutions that I have used had more bells and whistles, but given the cost, complexity, and management overhead, I am very pleased with Meraki’s solution.""It is a good global solution in terms of the price and features, but because we sell this solution in dollars, sometimes we don't get to sell this solution in Brazil because the dollar is very expensive. The price of every project is different. It varies depending upon the project, scenario, and client.""The price could be lower, but compared to the TCO of other products, it's not really that expensive.""Like any Cisco product, the license is really expensive for small business clients. It needs to be cheaper. If you look it up, you might go, "That doesn't make any sense."""The price varies depending on the hardware platform as well as the type of license and whether you're adding security or not."

More Meraki MX Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
552,136 professionals have used our research since 2012.
Questions from the Community
Top Answer:  When you compare these firewalls you can identify them with different features, advantages, practices and… more »
Top Answer:  The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
Top Answer: It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
Top Answer: I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such)… more »
Top Answer: Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall… more »
Top Answer: The central management console has helped with segregation, where planned interventions with management consoles do not… more »
Top Answer:  Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports… more »
Top Answer: Its ease of configuration and management is very useful for us and for other companies that don't have an onsite IT… more »
Top Answer: We just have to pay for the product and the license. We have a license for three years, and it is renewed every three… more »
Comparisons
Also Known As
Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
Check Point NG Firewall, Check Point Next Generation Firewall
MX64, MX64W, MX84, MX100, MX400, MX600
Learn More
Overview

Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

Offered via the Check Point Infinity architecture, Check Point’s NGFW includes 23 Firewall models optimized for running all threat prevention technologies simultaneously, including full SSL traffic inspection, without compromising on security or performance. Learn More about Next Generation Firewall and What is Firewall?

With the proliferation of modern applications and mixed-use networks, host and port based security is no longer sufficient. Cisco Meraki's layer 7 "next generation" firewall, included in MX security appliances and every wireless AP, gives administrators complete control over the users, content, and applications on their network.
Offer
Learn more about Cisco Firepower NGFW Firewall
Learn more about Check Point NGFW
Learn more about Meraki MX
Sample Customers
Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
Control Southern, Optimal Media
Hyatt, ONS
Top Industries
REVIEWERS
Comms Service Provider22%
Financial Services Firm16%
Manufacturing Company8%
Non Profit8%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company21%
Government7%
Manufacturing Company4%
REVIEWERS
Financial Services Firm26%
Computer Software Company12%
Comms Service Provider8%
Retailer6%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company22%
Government6%
Financial Services Firm6%
REVIEWERS
Comms Service Provider31%
Financial Services Firm13%
Pharma/Biotech Company13%
Non Tech Company6%
VISITORS READING REVIEWS
Comms Service Provider29%
Computer Software Company20%
Government5%
Construction Company4%
Company Size
REVIEWERS
Small Business43%
Midsize Enterprise28%
Large Enterprise29%
VISITORS READING REVIEWS
Small Business21%
Midsize Enterprise13%
Large Enterprise66%
REVIEWERS
Small Business22%
Midsize Enterprise20%
Large Enterprise58%
VISITORS READING REVIEWS
Small Business18%
Midsize Enterprise25%
Large Enterprise56%
REVIEWERS
Small Business56%
Midsize Enterprise23%
Large Enterprise21%
VISITORS READING REVIEWS
Small Business40%
Midsize Enterprise22%
Large Enterprise38%
Find out what your peers are saying about Check Point NGFW vs. Meraki MX and other solutions. Updated: March 2020.
552,136 professionals have used our research since 2012.

Check Point NGFW is ranked 2nd in Firewalls with 147 reviews while Meraki MX is ranked 1st in Unified Threat Management (UTM) with 17 reviews. Check Point NGFW is rated 8.8, while Meraki MX is rated 8.4. The top reviewer of Check Point NGFW writes "Central architecture means we can see an end-to-end picture of attacks". On the other hand, the top reviewer of Meraki MX writes "Makes it easy to stay on top of everything for security". Check Point NGFW is most compared with Fortinet FortiGate, Azure Firewall, Palo Alto Networks NG Firewalls, Juniper SRX and Cisco ASA Firewall, whereas Meraki MX is most compared with Fortinet FortiGate, Cisco ASA Firewall, Sophos XG, Palo Alto Networks NG Firewalls and Azure Firewall. See our Check Point NGFW vs. Meraki MX report.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.