Check Point 4000 Appliances vs Cisco Firepower 2100 Series

• Management access is difficult to get to and requires a specific client, plus sourcing from a permitted IP address.
• Anti-malware, anti-spyware, and anti-bot engines do a great job at protecting from malicious content.
• Anti-spoofing makes certain exploits like the LAND attack vector as null and void.

Read full review

• Nice HTML5 web interface instead of the old java client
• Many added features over the ASA
• Firepower built in and faster than before

Read full review

• Steep learning curve for admins
• No packet tracer application like the ASA to test flows prior to putting in new rules, etc.
• Policy packages are all or nothing. I cannot uninstall or turn off a piece of the overall policy, it's all or nothing.

Read full review

• Cisco patches bugs quickly but patches are slow to install and reboot
• Smart licensing is getting better but still can be troublesome
• Some weird visual interface glitches that require clicking the same options a few extra times

Read full review

• We have not seen a zero-day exploit since implementing the anti-spyware, anti-malware, and URL filtering functionality
• We have not seen a successful intrusion into our systems since the implementation of our checkpoint 4000
• We have had this firewall for 5+ years, and it still has much life left in it.

Read full review

• Simplifying our lives by reducing our time spent in a console
• Being comfortable knowing the full might of Cisco is safeguarding your network
• A good excuse to bump up the IT budget in the next fiscal year!

Read full review