Check Point CloudGuard Posture Management vs. Rapid7 InsightVM

Scenarios most suited - 1) All the Cyber Security focused development environments 2) Definitely a must for Financial Clients since it deals with live money transactions - Hence it is imperative to keep the Network and tech asset environment secure, and compliant to standards 3) IAM is another area where it plays an IMP part - For eg one of our healthcare clients where they wanted to restrict access 4) Dashboards are also great, we can share the results to GISO/CISO level folks - Custom dashboard feature

Incentivized

Rapid7 InsightVM is perfect for a scenario where IT admin or CISO wants to scan its infrastructure to be sure that there is no vulnerability that could be exploited from outside or inside the company. It also could be used to automate patching and dealing with vulnerabilities. It's also adapted for users that need cloud security management

Incentivized

• Integration with public cloud providers.
• Rich UI with great dashboards.
• Great assets inventory.
• Clarity module.

Incentivized

• Being a vulnerability scanner tool, its purpose is to scan the systems to find the vulnerabilities. We can define the assets like IP address for the scans and it also allows to either schedule the scan at a preferred time or start the scan immediately. Upon completion of the scan, this tool can result provide the details like host type, OS information, hardware address, along with the vulnerabilities.
• Rapid7 Nexpose has a list of templates to perform the scan. Once the templates are defined then the scans are performed accordingly.
• It also contains an option to add credentials/authentication using passwords, usernames, private keys to perform the credential-based scans which I think is a great feature.

Incentivized

• There is not a comprehensive amount of documentation on how to set up best practices.
• Our initial set up assistance from Proofpoint approved vendor did not go smoothly.
• The ability to add more customized widgets in the main overview screen would be helpful.

Incentivized

• In comparison to Tenable SecurityCenter we saw it didn't exactly find the same vulnerabilities which we would assume it should have
• We rely on a ticketing system and not our VM tool to assign tasks so wasn't too useful having that in there
• Filtering capabilities aren't as good as its competitors

Incentivized

Is easy to use, and the standad configuration is well prepared.

Incentivized

I haven't dealt so much with support but we are enjoying the tool!

Incentivized

I gave it a seven due to the functionality and general ease of use after the initial setup headaches, but compared to Qualys, Rapid7 Nexpose falls short on features and ease of use. Their support drags this rating down a point as well. I have gone weeks with no update on semi-critical issues and typically have to make call after call to get a semi-coherent response.

Incentivized

First and foremost reason of our client selecting CheckPoint CloudGuard Posture Management / Dome9 was because they already had CheckPoint Firewalls which are in active use e.g. R75.40 and R82.x products. Customization Vs these other Vendors is another great asset Reporting is one more standout feature, + Multi-cloud capabilities Centralized dashboarding is smooth to navigate as compared to other Vendors Syslog handling is much better as compared to some other vendors , Memory and space issues if planned well are less

Incentivized

Nessus Pro does scans, but does not maintain an inventory from scan to scan. There is no history for a specific device, you have to look inside the results of each scan. Search across inventory is non-existent. There are no dashboards for data analysis. This is no tracking for remediation

Incentivized

• For production environments it is worth the investment.
• Getting to know how many assets you have helps with cost savings.

Incentivized

• Can reduce time to patch most critical vulnerabilities
• Can help to identify who is spending time patching things of lower risk thus keeping the organization in a more vulnerable position
• Easily provides the patch team with a work plan to enhance security more quickly

Incentivized