Check Point CloudGuard vs. NGINX

Scenarios most suited - 1) All the Cyber Security focused development environments 2) Definitely a must for Financial Clients since it deals with live money transactions - Hence it is imperative to keep the Network and tech asset environment secure, and compliant to standards 3) IAM is another area where it plays an IMP part - For eg one of our healthcare clients where they wanted to restrict access 4) Dashboards are also great, we can share the results to GISO/CISO level folks - Custom dashboard feature

Incentivized

[NGINX] is very well suited for high performance. I have seen it used on servers with 1k current connections with no issues. Despite seeing it used in many environments I've never seen software developers use it over apache, express, IIS in local dev environments so it may be more difficult to setup. I've also seen it used to load balance again without issues.

Incentivized

• Advanced Threat protection via Check Point CloudGuard proven ThreatCloud intelligence feeds for malicious IP's is a nice feature.
• We have not set up the cloud bots auto-remediation functionality yet, but from initial testing, it looks to be something worth utilizing.
• Having reporting tie in's with our ServiceNow asset management platform is very handy.

Incentivized

• Straight-forward configuration format that users of all skill levels can learn, and yet is powerful enough for the huge breadth of features that Nginx provides.
• Massive scale right out the box. We've never had a Nginx instance overwhelmed by requests, and if we did it would be trivial to spin up more Nginx instances to handle the load.
• SSL termination means that we can deliver content over HTTPS without needing our individual services to require TLS support. This saves us a lot of time and headache while keeping us secure.
• Nginx is open-source and free, meaning that anyone can use it to power their services, from individual projects to billion-dollar websites.

Incentivized

• Support Services - Support during implementation
• Proof-of-concept - Needs to more detailed
• Troubleshooting multi-cloud/ vendor issues
• Should contain all the compliance standards - NIST, HIPPA, FedRAMP

Incentivized

• Customer support can be strangely condescending, perhaps it's a language issue?
• I find it a little weird how the release versions used for Nginx+ aren't the same as for open source version. It can be very confusing to determine the cross-compatibility of modules, etc., because of this.
• It seems like some (most?) modules on their own site are ancient and no longer supported, so their documentation in this area needs work.
• It's difficult to navigate between nginx.com commercial site and customer support. They need to be integrated together.
• I'd love to see more work done on nginx+ monitoring without requiring logging every request. I understand that many statistics can only be derived from logs, but plenty should work without that. Logging is not an option in many environments.

Great value for the product

Incentivized

Is easy to use, and the standad configuration is well prepared.

Incentivized

This tool is really easy to use and configure. Consumes very less system resources. It is highly modular and configurable. You can easily use it with other tools like certbot for SSLs. You can configure basic security with configuration and headers

Incentivized

Checkpoint support is great. They provide great SLAs and they comply with service times accordingly.

Incentivized

Community support is great, and they've also had a presence at conferences. Overall, there is no shortage of documentation and community support. We're currently using it to serve up some WordPress sites, and configuring NGINX for this purpose is well documented.

Incentivized

We have performed all research and evaluation for all competitive players as well we did POC for every product. Based on our comparison chart, we found Check Point Cloud Guard Native Security Platform much better and works extremally well compared to all other peers. It has a robust architecture and has really good features.

Incentivized

All of those are paid solutions with very good features, but they also offer dedicated scenarios for web application hosting. If you run applications on on-premises web servers and don't have a Microsoft licence agreement, Nginx is a very good and reliable option, based on Linux distributions and available as freeware.

Incentivized

• Having one single pane of glass dashboard helps cut downtime for one tech to assess the overall health of the cloud.
• The cost was a little high, and the setup time was longer than expected to leverage the functionality we paid for fully.
• Overall a good product so far

Incentivized

• Our websites are noticeably faster, causing an increase in customer satisfaction.
• Nginx has such a low memory/resource footprint that we save money from not needing multiple large, expensive servers.
• Ability to load balance traffic, have server-redundancy, and have high-availability allows for 100% uptime and provides cost-effective solutions to alternatives that can cost a lot.

Incentivized