Check Point CloudGuard vs. Cisco TrustSec vs. OpsCompass

Checkpoint Cloud Guard Native Security Platform is much better in native cloud infra security requirements. It works well, and the manageability of said product is good. But If you are having some hybrid kind of environment, it is not suitable, and the products have more complexity to deploy. There are so many other players to do well in this segment.

Incentivized

• Control access to critical enterprise resources by business role, device type, and location, so policy changes can be made without redesigning the network.
• Easily manage access control and segmentation while maintaining compliance.
• Create and manage policies in an easy-to-use matrix.
• Reduce the need for costly network re-architecture by automating firewall rules and access control list (ACL) administration.

Incentivized

We previously had separate products to manage Azure and AWS, each with different capabilities, and it was very complex for our team to go back and forth and try to make sense of each environment. OpsCompass is very well suited to give you a single view of our entire cloud environment. OpsCompass also brings excellent compliance policies. We were not highly skilled with these policies, but the product made it easy to perform an assessment of our current state and identify areas where we had non-compliance issues. CIS policies were a great area to start and we later tried the Microsoft 365 policies, which were also helpful. More policies would be great to see.

• Advanced Threat protection via Check Point CloudGuard proven ThreatCloud intelligence feeds for malicious IP's is a nice feature.
• We have not set up the cloud bots auto-remediation functionality yet, but from initial testing, it looks to be something worth utilizing.
• Having reporting tie in's with our ServiceNow asset management platform is very handy.

Incentivized

• Reduce operational expenses by simplifying network segmentation and defining security groups based on business roles, not IP addresses.
• Limit the impact of a data breach by quickly isolating and containing threats using technology already in your network.

Incentivized

• Quick inventory of all my cloud resources
• Detects changes to my cloud resources--including the source of the changes (user or system)
• Cost impacts of changes to my cloud infrastructure

• Support Services - Support during implementation
• Proof-of-concept - Needs to more detailed
• Troubleshooting multi-cloud/ vendor issues
• Should contain all the compliance standards - NIST, HIPPA, FedRAMP

Incentivized

• Help and solutions if needed, support

Incentivized

• I would like to see more integrations to help surface alerts. Slack would be great, as an example.
• An imbedded tour or onboarding would help our new users, but overall, the product is pretty easy to figure out

Is easy to use, and the standad configuration is well prepared.

Incentivized

Checkpoint support is great. They provide great SLAs and they comply with service times accordingly.

Incentivized

Most products have their pros and cons but Dome9 does everything Evident.io and Redlock can do and more. Evident was a good tool but merging the two products into one complicated things.

Incentivized

In this price range, we didn't find any other tools that provide this degree of cloud resource visibility. It's been an efficiency game-changer. I hope we'll see new modules as they expand their features to include active resource management policies. They've done such a good job of anticipating the needs of our CloudOps team, I plan to evaluate those new features (if/when they arrive).

• Significant $$$ cost savings as compared to other competitors in the market
• Long term contracting also helped in cost savings and good ROI - 750k USD approx
• Multi-vendor and Multi-cloud capabilities also helped us forecast the capex well
• No need of any other IAM solution - Some cost savings in that area as well for us,

Incentivized

• Reduction in IT operational costs

Incentivized

• Our team was able to do roughly 30% more with the product. The automation helps us spot issues without a lot of manual work
• We identified changes that would have had a massive cost impact--spinning up or forgetting about infrastructure we didn't need.
• OpsCompass prevents configuration drift and maintains a healthy state across multi-clouds.