We just raised a $30M Series A: Read our story

Forcepoint Next Generation Firewall OverviewUNIXBusinessApplication

Forcepoint Next Generation Firewall is #5 ranked solution in SD-WAN tools, #5 ranked solution in top WAN Edge tools, and #16 ranked solution in best firewalls. IT Central Station users give Forcepoint Next Generation Firewall an average rating of 8 out of 10. Forcepoint Next Generation Firewall is most commonly compared to Fortinet FortiGate: Forcepoint Next Generation Firewall vs Fortinet FortiGate. The top industry researching this solution is Comms Service Provider, accounting for 27% of all views.
What is Forcepoint Next Generation Firewall?
Forcepoint Stonesoft Next Generation Firewall protects enterprise networks with high-performance "intelligence aware" security supported by real-time updates. This enables Stonesoft to deliver the industry's best defense against advanced evasions, alone with complete next-generation firewall protection when and where you need it - at remote sites, branch offices, data centers, and the network edge.

Forcepoint Next Generation Firewall is also known as Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform.

Forcepoint Next Generation Firewall Buyer's Guide

Download the Forcepoint Next Generation Firewall Buyer's Guide including reviews and more. Updated: October 2021

Forcepoint Next Generation Firewall Customers
California Department of Corrections and Rehabilitation (CDCR)
Forcepoint Next Generation Firewall Video

Pricing Advice

What users are saying about Forcepoint Next Generation Firewall pricing:
  • "Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
  • "We have just a subscription for the cloud, and this license is great. The license is so good."
  • "The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"

Forcepoint Next Generation Firewall Reviews

Filter by:
Filter Reviews
Industry
Loading...
Filter Unavailable
Company Size
Loading...
Filter Unavailable
Job Level
Loading...
Filter Unavailable
Rating
Loading...
Filter Unavailable
Considered
Loading...
Filter Unavailable
Order by:
Loading...
  • Date
  • Highest Rating
  • Lowest Rating
  • Review Length
Search:
Showingreviews based on the current filters. Reset all filters
Lipaz Hessel
Solutions Architect at Gilat telecom
Real User
Top 5
Good console management, but the interface is not user-friendly and application filtering needs finer granularity

Pros and Cons

  • "The most valuable feature is the console management."
  • "If I want to allow access to Facebook, yet not allow the user to access videos, then I am not able to do it with this product."

What is our primary use case?

We had planned on using this product as our multi-tenant firewall. After one year, we stopped using it because there was a problem with supporting some of the protocols.

What is most valuable?

The most valuable feature is the console management. It is very good and the security was great.

What needs improvement?

The interface is not user-friendly.

We were told that we would receive training but it came late and we had already started to deal with the product, which ultimately caused problems because we did it incorrectly. If the vendor focused more heavily on training as opposed to implementation then it would be a big improvement.

The UTM features are missing.

Application filtering is supported at a high level, but not at a low level. If I want to allow access to Facebook, yet not allow the user to access videos, then I am not able to do it with this product. Essentially, I'm allowed to block but I'm not allowed to limit. With other vendors, I can impose limits.

They need to add support for the Routing Information Protocol, RIP.

There is no support for the Built.io NIC driver.

For how long have I used the solution?

I had been working with the Forcepoint Next Generation Firewall for about one year.

What do I think about the stability of the solution?

We had Forcepoint NGFW running on a virtual machine and it was very stable.

What do I think about the scalability of the solution?

From the design that we took, it had the ability to scale up to 250 clients. That was good for what we needed but we failed with the first customer and could not complete the implementation for the second one.

In our environment, we had ten users.

How are customer service and technical support?

We contacted technical support but it was not the typical support situation where we opened a ticket and they responded. We were in contact with them directly. Because it was irregular, I cannot judge how good or bad the support would normally be.

Which solution did I use previously and why did I switch?

We are currently using three other vendors including Check Point, Fortinet, and Palo Alto. These have always been there but we were hoping to add Forcepoint as another option.

How was the initial setup?

The initial setup is complicated and difficult to do.

By comparison, we have a very large number of products implemented in our environment and we can deploy most of them ourselves.

The deployment took almost seven months and ultimately, we failed. During our work on the deployment, we had two people handling the maintenance.

What about the implementation team?

We received assistance directly from the vendor. There were several people who took part in the implementation including five from our side, one from the vendor, and two from the distributor. The help that we received from them was awesome.

The distributor knows the product more from a theoretical point of view. When it comes to the hands-on experience, they know the basics. When the person from the vendor came, they knew more about the product but had no experience with the multi-tenant aspect. So, for the part that we needed, they were failing. We spent a lot of time and received help from different people, and it was still a failure in the end. We disposed of the product.

What's my experience with pricing, setup cost, and licensing?

We paid for a subscription license, vendor support, and the training.

Which other solutions did I evaluate?

We are a large service provider and we are always looking for new solutions. We had evaluated solutions by Sophos and SonicWall, although we decided that we were going to try Forcepoint.

We would not say No to another try with Forcepoint if, for example, they come back to us with a new version in another year. It would have to have documentation to show that what we want to do is now supported.

What other advice do I have?

We tried a few implementations and we did not have very much success because the interface is not user-friendly and the product is complicated. If we had the training on time then it may have been easy but that wasn't the case.

The biggest lesson that I learned from using this solution is that you can't trust what people tell you. When they say that they will take care of things and support it, that is not included.

My advice for anybody who is implementing this solution is to make sure that the training is completed first, ahead of trying to implement it.

I would rate this solution a four out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
TA
Systems Engineer at a tech services company with 11-50 employees
Reseller
Top 5Leaderboard
A stable solution that has improved a lot

Pros and Cons

  • "It is a stable solution, and there are no issues so far."
  • "Its management center should be easier to use. The management interface of Forcepoint is unique and a little bit different from some of the firewall solutions on which people might have worked before. Sometimes, the customers say that it is not very friendly, and we help them with how to use this management interface. It just takes a little bit of time, and after some time, it gets easy to manage or use. It is quite similar to Palo Alto, Fortinet, and legacy Juniper solutions. Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us."

What is our primary use case?

We are a platinum partner of Forcepoint. We work on most of the Forcepoint portfolio, such as web security, event security, and DLP at the endpoint level as well as at the laptop level. 

This solution can be used for different use cases. You can deploy it as an IPS near the data center zone. You can also put it in-line, which is recommended most of the time not only for Forcepoint but also for many other next-generation firewall vendors. Otherwise, you need to deploy it as a normal next-generation firewall and enable some specific IPS policies on the firewall itself. One of our customers needed encryption between remote sites.

We have a professional services team that handles the implementation of these solutions. We install the latest version of this solution. Most of the customers ask for an on-premises deployment. There are some customers who ask for a private cloud deployment.

What is most valuable?

It is a stable solution, and there are no issues so far.

What needs improvement?

Its management center should be easier to use. The management interface of Forcepoint is unique and a little bit different from some of the firewall solutions on which people might have worked before. Sometimes, the customers say that it is not very friendly, and we help them with how to use this management interface. It just takes a little bit of time, and after some time, it gets easy to manage or use. It is quite similar to Palo Alto, Fortinet, and legacy Juniper solutions. 

Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us.

For how long have I used the solution?

I have been working with this solution for almost five years.

What do I think about the stability of the solution?

It is stable.

What do I think about the scalability of the solution?

We have around 50 users of this solution in our company.

How are customer service and technical support?

Their technical support is not bad, but it is also not good at the same time. It should be faster, especially for the RMA. We understand the situation related to the pandemic, but their response wasn't good even prior to that. I believe it is something related to logistics.

How was the initial setup?

The initial setup is of medium complexity. It is neither straightforward nor complex. If you want to implement a new firewall, you need to connect it to something called SMC or security management center, which is the main thing. It is the brain of the firewall, and without that, you cannot manage the firewalls. There are certain steps that need to be done on the SMC to do the configuration of the firewall. 

What about the implementation team?

We are not a big company. We have two post-sales people who provide professional service. We have two to three pre-sales people as well as technicians.

What other advice do I have?

I would recommend this solution in general. We have collected a lot of feedback from customers related to the management, which we will forward to Forcepoint, and then after some time, they will take action on that.

They have improved a lot since they were acquired from McAfee. Earlier, if you wanted to access SMC, you needed remote desktop access to the server or you had to install a small software from the SMC as a client to control the firewall. Customers used to ask us about why they cannot access the firewall management by UI or browser when most of the other firewalls already have such access. We received a lot of such feedback from customers, and when we escalated this to Forcepoint, they took a serious note of it. After some time, they released that option. You can now access the management center through UI, which is a good improvement.

I would rate Forcepoint Next Generation Firewall an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Learn what your peers think about Forcepoint Next Generation Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: October 2021.
543,424 professionals have used our research since 2012.
DM
Associate Consultant at SoftwareONE
Reseller
Top 20
Good URL filtering with helpful technical support and good scalability

Pros and Cons

  • "Technical support has been quite helpful in the past."
  • "The company should update the URL filtering database. They need to enhance the URL filtering and make it easier to customize."

What is our primary use case?

We primarily provide the solution to our customers.

I don't create the use cases. I just deploy as required.

Largely, the solution is used for protection. It can be used for various purposes, including URL filtering, spam filtering, and VPN.

What is most valuable?

The URL filtering is the most valuable aspect of the product. I've used the VPN for that. It's of great value to the customer.

The solution is stable.

The product can scale well.

Technical support has been quite helpful in the past.

What needs improvement?

The company should work to improve its VPN capabilities.

For the most part, there aren't really any features or services that are missing.

The implementation may be a bit more complex for a person who doesn't have much experience with the process.

The company should update the URL filtering database. They need to enhance the URL filtering and make it easier to customize.

For how long have I used the solution?

I've been dealing with the solution for the past two years or so.

What do I think about the stability of the solution?

The solution is mostly stable. We've just had a little configuration issue around the access and net policy. However, beyond that, it's been pretty reliable.

What do I think about the scalability of the solution?

The solution scales well. If a company needs to scale, it can do so with ease.

How are customer service and technical support?

Lately, I have not needed their services, however, I have contacted them in the past. I find them to be very helpful and responsive. They have a good support team. We are quite satisfied with them.

Which solution did I use previously and why did I switch?

I also work with Palo Alto and Check Point.

How was the initial setup?

You cannot say this is a simple product. Comparatively, to other products, such as Fortinet's Firewall, it's much more complex. It has an Azure Server client-server architecture. You need to install the entire management server separately and you need the client's GUI to manage the console. 

Deployment takes a while. It may be ten to 15 days for a medium-sized organization. I've mostly installed this in mid-sized companies.

There is some maintenance required. Often, we offer a monthly health checkup to our clients and we would provide maintenance services. 

What about the implementation team?

I handle the installation for clients. I understand the process and can do everything for them.

What's my experience with pricing, setup cost, and licensing?

This is an expensive product compared to Fortinet, however, it is cheaper than Palo Alto. That said, I can't speak to exact pricing. A different team manages the sales and licensing aspects. 

Which other solutions did I evaluate?

You can compare this solution to a few other vendors. For example, most of the features available in this product are also available in other products as well. If you're talking about Check Point NG and Palo Alto, Forcepoint is very similar. Palo Alto and Fortinet use a single appliance. However, Check Point and the Forcepoint have a  server-client with the architecture actually. We need to install the GUI from that. And a management server and engine we'll install separately too.

What other advice do I have?

We have a partnership with Forcepoint. We are resellers of the solution.

We have clients that have the solution, and therefore we tend to deal with different versions of the solution. It might not always be the latest.

I would recommend the solution. I would rate it at an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Flag as inappropriate
AN
Head of Infrastructure & Cloud Section at a computer software company with 1,001-5,000 employees
Real User
Top 20
It comes with functionalities to simplify operations and management

Pros and Cons

  • "The feature that we like the most about Forcepoint is that we know the technology and have confidence in it. We can have several functionalities to simplify operations and management. We can combine functionalities like log ownership to review the number of devices in the infrastructure."
  • "Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices."

What is our primary use case?

We give consultancy and propose technology based on the customer's design. We also do long-term deployments. Normally, our solutions are deployed on-premises. We have some key projects where almost everything is deployed on-premises. We also manage the solutions and infrastructures with firewalls, network devices, etc. We have a great experience with different technologies, and Forcepoint is one of them.

What is most valuable?

The feature that we like the most about Forcepoint is that we know the technology and have confidence in it. 

We can have several functionalities to simplify operations and management. We can combine functionalities like log ownership to review the number of devices in the infrastructure. 

What needs improvement?

Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices.

For how long have I used the solution?

We began to work with Forcepoint when they got Stonesoft several years ago.

What do I think about the scalability of the solution?

Our projects are not very demanding in terms of performance. Therefore, we don't have any special requirements for scalability. We have some customers for whom we manage this kind of technology, and the scalability or performance is achieved by deploying a greater data appliance.

How are customer service and technical support?

I might have contacted them for some questions related to managing instances. We sometimes had problems with registering or activating licenses on the manufacturer portal. I haven't opened any ticket personally. My colleagues have contacted them for technical support, that is, for problems that go beyond the basics of the Forcepoint configuration, such as for replacing some faulty components. Their experience was good in general.

How was the initial setup?

I'm not in the technical part right now, but based on what I have learned from my technical colleagues, the initial setup is not very difficult. When you have experience in setting up or working with these technologies, it's not difficult to set up a firewall. 

What about the implementation team?

We have certified people to manage this technology. We manage the infrastructure for our clients.

What other advice do I have?

We are managing a customer's infrastructure where we have two pairs of Forcepoint Next Generation Firewall working without any major problem. 

I would recommend Forcepoint Next Generation Firewall based on your needs. It's very useful for us to mix several technologies on the same platform to increase its security level. We have experience with Check Point, FortiGate, Palo Alto, and StrongGate (which became McAfee and then Forcepoint). Many times, we combine two or three technologies into the same platform without any problem. However, we did have a horrible experience with Forcepoint in the past. Some of the project deployments were not very great, specifically for applications offering very specific services to users. 

I would rate Forcepoint Next Generation Firewall an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
MS
Managing Director at a tech vendor with 11-50 employees
Real User
Top 20
Good blocking and very stable but needs better network functionality

Pros and Cons

  • "The blocking, based on the signal provided, is the solution's most valuable aspect."
  • "The solution needs to build upon its network functionality. It needs to be a bit smarter."

What is our primary use case?

I provide Forcepoint services to my clients.

What is most valuable?

The blocking, based on the signal provided, is the solution's most valuable aspect.

From my perspective, the user interface is decent.

What needs improvement?

Decryption needs improvement. It could be better in terms of the bandwidth and in terms of the speed of the tasks.

The solution needs to build upon its network functionality. It needs to be a bit smarter.

Communication with the cloud will be integral to the future of this solution. It needs to be easily deployed with the cloud going forward. 

The solution would also benefit from working within a multi-cloud environment. It should work with everything from Google to Azure to Salesforce. They need to have a more complex API to be able to successfully connect with other clouds and stations.

For how long have I used the solution?

I've been using the solution for about one year now.

What do I think about the stability of the solution?

The solution is stable. It's reliable. We have no issues there. We don't see any bugs or glitches. The solution doesn't crash.

What do I think about the scalability of the solution?

A company would have absolutely no problem scaling this solution. If a team needs to build it out, they can do so quite easily.

How are customer service and technical support?

We've contacted technical support in the past. They are decent. They provide enough support services to cover our needs. We are satisfied with the level of service they've provided us so far.

How was the initial setup?

The initial setup is easy to get started and the deployment itself is pretty simple.

The customer's infrastructure can really be diverse, however, and that will affect deployment. There are different complexities involved in the setup from the client's side. That's where complexity can really come in. The infrastructure, routines, and network traffic all vary and bring in their own unique challenges.

Typically, deployment takes about a week to complete.

What other advice do I have?

We're a developing company that works with a lot of legacy suppliers that offer clients security solutions. From my perspective, such legacy supplier companies such as McAfee, Checkpoint, and Forcepoint. We help our clients implement certain solutions.

I would absolutely recommend the solution. When it comes to the ease of deployment of the functionality, I would strongly recommend it. Forcepoint has great security functionality. 

However, one downside that is I see is that they need to improve some network functionality. This is very important due to the fact that network functionality is very crucial when it comes to deploying the solution.

I would rate the solution seven out of ten overall.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
MH
Managing Director at FORESEC
Real User
Top 5
Stable, scalable, and great support

Pros and Cons

  • "It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration."
  • "They need to increase the local support here. There are also some bugs or fixes on which they need to work. They very well know about these bugs. In terms of licensing, I would like them to either increase the number of features in a single license or make licensing more flexible."

What is most valuable?

It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration.

What needs improvement?

They need to increase the local support here. There are also some bugs or fixes on which they need to work. They very well know about these bugs.

In terms of licensing, I would like them to either increase the number of features in a single license or make licensing more flexible.

For how long have I used the solution?

I have been using this solution for two years.

What do I think about the stability of the solution?

It is stable.

What do I think about the scalability of the solution?

It is scalable. We have many customers, and some of them have from 500 to 1,000 users.

How are customer service and technical support?

Their support is great.

How was the initial setup?

Its initial setup is easy, but it also depends on the size of the implementation. 

The implementation of email security and web security is also easy, but the implementation of DLP is very complicated and can take six to eight months. You can install the software in an hour, but there are a lot of configuration changes, and some critical information must be gathered from the customer for implementation and configuration, which takes time.

What about the implementation team?

The number of people required to deploy and implement this solution varies. We have four or five technical staff members who can do the implementation. We have the same number of people for its support after the implementation. From the customer side, a local team is required to work with and manage this solution.

What's my experience with pricing, setup cost, and licensing?

Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see.

What other advice do I have?

Forcepoint is a very big company with a very good product line. It fulfills most of the needs of the customers, especially enterprise customers in the financial sector. I use Forcepoint Next Generation Firewall as well as the DLP, web, and email solutions from Forcepoint. No other solution can compete with Forcepoint's DLP solution. We are going to keep using Forcepoint products. Some of our customers are only interested in Forcepoint. 

I would rate Forcepoint Next Generation Firewall a nine out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Mustafa Adel
Senior Solutions Architect at Infort
Real User
Top 5
A next-generation firewall solution with a useful IPS feature

Pros and Cons

  • "I like the IPS. IPS is the master feature. I depend on the firewall and sandbox."
  • "Management could be better. They can improve the management. I think all our customers can't accept firewalls that have standalone management. So, they prefer Fortinet or Palo Alto. But overall, inspection and other features are working fine."

What is our primary use case?

We use it for SD-WAN, IPS, VPN, and subscription keys on the cloud or have an MDM on-premises. 

What is most valuable?

I like the IPS. IPS is the master feature. I depend on the firewall and sandbox.

What needs improvement?

Management could be better. They can improve the management. I think all our customers can't accept firewalls that have standalone management. So, they prefer Fortinet or Palo Alto. But overall, inspection and other features are working fine.

For how long have I used the solution?

I have been working with Forcepoint Next Generation Firewall for four years.

What do I think about the stability of the solution?

With Forcepoint, we can cluster as a team firewall, and we can do great without downtime. Our sales team can sell Forcepoint because of this feature.

How are customer service and technical support?

I would give technical support an eight out of ten. We had an issue with them because we had only support level one for each case we opened. We want them to improve their technical support because I still have three cases open from this year. From January until now, technical support didn't solve it. I feel like it's an easy case like the client's VPN and user ID, and it shouldn't take around five months. 

How was the initial setup?

The initial configuration is straightforward, and we can use it with the cloud. But sometimes, there are network issues we can't see when we're using the ethernet cable. I think you need an engineer with some experience before implementing the first implementation by yourself.

The time it takes to deploy this solution depends on the features I have to implement or configure. Normally, it takes five or six working days, but it might take another week if I have issues with the VPN or user IDs.

What about the implementation team?

We are an integrator. 

What's my experience with pricing, setup cost, and licensing?

We have just a subscription for the cloud, and this license is great. The license is so good.

What other advice do I have?

On a scale from one to ten, I would give Forcepoint Next Generation Firewall an eight.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Flag as inappropriate
AW
Technical Support Specialist Networks at a tech services company with 10,001+ employees
Real User
Top 20Leaderboard
Fully-featured and comes with everything required

Pros and Cons

  • "I don't have anything bad to say about the product. I absolutely love it."
  • "Something that I've noticed that Forcepoint lacks, is the training that they offer to their end-customers"

What is most valuable?

The most valuable features are mainly the Management and the Active capabilities.

What needs improvement?

From a managerial point of view, as long as you have proper training, it's very easy to manage this firewall. Something that I've noticed that Forcepoint lacks, is the training that they offer to their customers. It's quite expensive, I believe it costs roughly $11,000. Because of this, we haven't been fully trained in this solution; to get the most out of this product, you need proper training. That is the only negative comment I have surrounding Forcepoint.

Aside from the expensive training, I honestly can't think of another issue. It's a fully-featured firewall that comes with everything required. The version that we are using has a single power supply, whereas we would prefer having dual power supplies on or firewalls.  

For how long have I used the solution?

Our company has been using Forcepoint Next Generation Firewall for roughly two years. 

What do I think about the stability of the solution?

Stability-wise, I have never had any major issues with it. No matter the situation, it has always served its purpose.

What do I think about the scalability of the solution?

Scalability-wise, I cannot comment because we have not increased the number of firewalls or the number of nodes on our existing firewall. Although we have not implemented these changes, I know that it's very easy to increase the number of nodes and bandwidth, which means that it is very scalable, but from an on-premise point of view, we haven't done that. 

How are customer service and technical support?

We've never had a negative experience with customer support. They have always been quickly available. I can't complain, I think they have a pretty good team. 

What other advice do I have?

I don't have anything bad to say about the product. I absolutely love it.

On a scale from one to ten, I would give this solution a rating of nine. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Forcepoint Next Generation Firewall Report and get advice and tips from experienced pros sharing their opinions.