AlgoSec vs. CheckPoint vs. FireMon

It works okay for auditing existing network systems but seems to have trouble with cloud configurations.

Incentivized

CheckPoint performs well as an internal firewall between network zones, providing policy control and deep inspection of internal traffic. It works well for a multi network setup like ours across multiple sites. It is however not a fast changing interface and time needs to be taken to perform changes. It's not a quick as other vendors

Incentivized

FireMon is best used in a large environment (for example, I have >100
firewalls in my environment). It's best used when trying to improve
security posture and showing changes in firewall security over time. It
might not be the best choice for smaller environments or those that aren't concerned about security management.

Incentivized

• Firewall policy overview and optimisation by rule reordering and suggestions to delete unused rules
• Network map overview and implement topology changes based on source destination and port
• Pci audit results and recommendations for a better score
• Discover application based flows through auto-discovery and make changes to those flow.

Incentivized

• Threat Prevention better than Fortinet
• Granularity of security policy can be customized to the maximum
• hardware performance is really good
• Bugs are less as compared to other vendors
• support is excellent
• modules work as expected
• Features can achieve out of box requirements

Incentivized

• Give good real time reporting for anyone making a change to any of our firewalls
• Provides good reporting tools that are out of box
• Provide good customization tools that is specific to our needs
• Upgrades are a simple process and support does relatively well with assisting us.

Incentivized

• AlgoSec need to work on their support in India.
• Insufficient documentation.
• It should support other platforms like GCP, Alibaba, etc.

Incentivized

• In my experience, notifications are completely broken and non-functional
• In my opinion, confusing UX for the cloud portal
• Don't try and import 100's of endpoints when onboarding because it will create a mess
• When installing the CP client you have to remove Microsoft Defender and if that fails, CheckPoint technical support goes, "Not my problem, sucks to be you!"

Incentivized

• Some features could be added to the existing functionality which include NAT rules usage
• Rule expiration normalization from firewalls rather than entering them in rule documentation
• .csv exports of the files from the firewall pane only gives usage for 30 days by default and that should be increased

Incentivized

Every dollar to CheckPoint is a wasted dollar.

Incentivized

The shell is locked out and we can't run any general centos commands. The implementation and maintainence of the arch is very complex. Even with the right identifiers on log messages the log collection keeps failing. The warning messages on the device are ambiguous. The log messages on firemon are a bit confusing and don't show the exact issue.

Incentivized

It worked great for on-site systems but does not scale effectively.

Incentivized

the solution offer the most improvement about the usability by management more firewall in the same context or multicontext instead. The shared database allow to use one object for more than a package target of a cluster or more of gateways firewall. The management remain isolated from traffic pass through the firewall so the disruption is limited at minimum.

Incentivized

It save me time and I'm able to have the review - review the rule independently with using my time.

Incentivized

FireMon has been relatively stable overall. However, there have been a handful of times where we had issues with the console. For example, we couldn't update which devices to include in a security assessment. The initial suggestion from support was to just reboot it. It seems like there weren't many other options available such as to restart services before going to the extreme of a complete reboot.

Incentivized

I'm not sure we have the largest implementation of FireMon out there but we do have a few 1000 devices being probed by FireMon. Overall, the system's performance has been rock solid. The console refreshes quickly and reports are generated within an expected timeframe.

Incentivized

FireMon technical support is awesome! They respond quickly to our requests and they are well trained and very knowledgeable about the tool. Some issues have to be referred to the development team, but technical support largely provides solutions for any issues that we may have.

Incentivized

Implementation is fairly simple. Most issues can be resolved by referencing manuals.

Incentivized

User friendliness of Algosec is great!

Incentivized

The CheckPoint Firewall and Cisco ISR router serve different purposes. Our organisation uses both devices, but in different areas of the topology. The Cisco ISR is a remote device and its function is to relay information to our edge firewall, which then passes to our internal firewall (CheckPoint) to securely control traffic requests.

Incentivized

I has worked with AlgoSec and while they are very similar product, I find the FireMon is easier to understand and get rolling with. While both require some learning, FireMon is by far the easier one. Once you have an understanding of how things are arranged and labeled you can easily import firewalls and begin to work on them to improve them

Incentivized

Firemon Is easily scalable and maintainable with any size team. Although it requires some tech debt, it is well worth the time to invest to ensure compliance is visible and reports are accurate. Although our environment is very large we do not fully utilize the scalability of the Firemon product.

Incentivized

• Algosec has helped customers across the globe optimize their firewall policies and bring the best performance off their devices
• AlgoSec supports a wide range of devices and is constantly working to include support for many others
• The support and professional services team at AlgoSec is very knowledgeable and supportive.

Incentivized

• Smart console with lower operational overhead
• Compliance with Hipaa, PCISSS and saving on compliance plenties
• Less compatibility issues
• licensing model is costlier at the beginning
• Some modules require special training
• False positives may occur

Incentivized

• FireMon's Compliance Reporting provided an immediate and tangible benefit
• FireMon helps identify egregious or erroneous rules quickly across multiple platforms
• FireMon took our audit process from an Excel spreadsheet into a far more advanced process with readily available context for reviewers

Incentivized