Check Point 4000 Appliances vs Cisco Firepower 1000 Series

• Management access is difficult to get to and requires a specific client, plus sourcing from a permitted IP address.
• Anti-malware, anti-spyware, and anti-bot engines do a great job at protecting from malicious content.
• Anti-spoofing makes certain exploits like the LAND attack vector as null and void.

Read full review

• Network segmentation by zones--allows trusted traffic to pass inspected or uninspected while non-trusted traffic is always inspected.
• Scalable management--many different types of policies are available within Cisco Firepower 1000 Series management to ensure proper access, authorization, inspection, and threat response.
• Redundancy--Cisco Firepower 1000 Series devices can be set up in High Availability in the event there are issues with one member.
• Compatibility--Cisco Firepower 1000 Series devices can be used in tandem easily with other Cisco products or in a vendor-arbitrary environment.

Read full review

• Steep learning curve for admins
• No packet tracer application like the ASA to test flows prior to putting in new rules, etc.
• Policy packages are all or nothing. I cannot uninstall or turn off a piece of the overall policy, it's all or nothing.

Read full review

• License model is a nightmare
• For time to time is too complex to configure
• Needs other tools to get the result you are looking

Read full review

• We have not seen a zero-day exploit since implementing the anti-spyware, anti-malware, and URL filtering functionality
• We have not seen a successful intrusion into our systems since the implementation of our checkpoint 4000
• We have had this firewall for 5+ years, and it still has much life left in it.

Read full review

• Secure high-end solution, protects the business
• Updates threat licensing, constant updates allow ease of management
• Higher cost of ongoing maintenance
• Higher cost of licensing features

Read full review