Check Point 4000 Appliances vs. Cisco Firepower 1000 Series

Well suited for small to medium business with less than 1000 users. Good edge device, NAT is easy to work with. The anti-malware, anti-spyware are worthwhile paid add-ons. Anti-spoofing is built in, and required to be put in. The split of management between Gaia and secure platform applications is painful, but nothing that can't be gotten around.

Incentivized

I think it is well suited for smaller companies or (as in our case) extension to a central system with higher performance. My personal guess is, that it can be quite annoying with those delays in bigger environments, when 20 or more devices needed to be managed. From the point of security, support and updates it works quite good and seem to have no downsides.

Incentivized

• If you have critical data then you can use this firewall for secure your organization
• You can also use for cloud security
• If you want the deep packet inspection then this is one of the best firewall for you.

• My organization is all Cisco and wants to stay in the Cisco life cycle, Firepower 1000 series is great for small to medium-size office.
• Very robust enterprise-grade security solution with updated threat features to handle any current and upcoming threats. The solution is backed by Cisco to ensure constant security updates. Integrated AnyConnect remote client VPN is a big plus to allow for secure remote workers access. Easier to set up a site to site VPN due to the large user base and case studies published on integrating to other manufacturer solutions.

Incentivized

• Steep learning curve for admins
• No packet tracer application like the ASA to test flows prior to putting in new rules, etc.
• Policy packages are all or nothing. I cannot uninstall or turn off a piece of the overall policy, it's all or nothing.

Incentivized

• ACLS in gui are PIA cant see object details
• Objects in ACLs dont show IP addresses
• Have to renames every object to name+ip to make acl GUI useable
• Speed to data can use improvement.
• Health warnings should allow you to resolve you have to dig n search in some cases.

It is quite good, robust and reliable but not always so easy to manage and configure. The tools could be improved and the price is not low for an entry level firewall

Incentivized

Firepowers are secure, reliable, central management and configuration is easy and they fit in well with our existing Cisco infrastructure. Good feature set and support. Good management and control with chassis manager and central control with additional Firepower Management Centre.

Incentivized

Has not let me down yet.

Incentivized

Great performance even on the lower end model of the series. You can push a lot of traffic through these devices without much performance impact. If you decide you want to inspect encrypted traffic however, you may take a big hit on the cpu and memory of the box, but they still manage to keep up even with all the bells and whistles turned on.

Incentivized

I have had troubles with Firepower Management Center and the FTD's in the past. Sticking to a Gold Star image and upgrading when the "bugs" are fixed is great. That still doesn't mean you are left vulnerable though. The extra features are just not enabled yet. Great product and calling support is readily available for any issue.

Incentivized

Utilize the new FMC cloud which is available in Cisco Defense Orchestrator.

Incentivized

We were using the Cisco ASA 5525 but this firewall was not fully secure. Lots of advanced features were missing so we installed the Check Point 4000 Appliances and we are really happy with the features, advanced IPS and web filtering help us to protect our organization and also more control our user traffic.

Cisco Meraki MX is much more simple to configure it if you compare to Cisco Firepower 1000, but it is more limited to pur some complex configurations. The Cisco Firepower 1000 Series is typically deployed as a physical appliance, while the Meraki MX can be deployed as a physical or virtual appliance.The Firepower 1000 Series has a more complex user interface, with a steeper learning curve, but offers more customization and configuration options. The Meraki MX has a simpler, more intuitive interface,

Incentivized

• We have not seen a zero-day exploit since implementing the anti-spyware, anti-malware, and URL filtering functionality
• We have not seen a successful intrusion into our systems since the implementation of our checkpoint 4000
• We have had this firewall for 5+ years, and it still has much life left in it.

Incentivized

• We have seen improved throughput on our internet.
• It took several attempts with Cisco engineers to configure the device; it requires a deep set of knowledge to set up in a more complicated environment.
• This will allow us to move forward with a more stable and configurable environment with security available we didn't have before.

Incentivized