Check Point CloudGuard vs. Pentest-Tools.com vs. Skybox Security

Checkpoint Cloud Guard Native Security Platform is much better in native cloud infra security requirements. It works well, and the manageability of said product is good. But If you are having some hybrid kind of environment, it is not suitable, and the products have more complexity to deploy. There are so many other players to do well in this segment.

Incentivized

This website is well suited for organisations that perform regular security assessments. In particular, external scans and reconnaissance. As an example, I am able to run a report on our Wordpress website to enable me to see whether we are missing any important security updates. We found it to be very useful for training new security analysts, due to the straightforward GUI. You can work on the same projects together to help you to do this. Having it laid out in front of them helps them to understand the concepts much easier than using dozens of different tools to achieve the same goals, and also speeds up training. If you're a personal user it may not be appropriate due to price. If you are a personal user, I would advise using the many open source tools there are that do the same things. The strength of this platform is that it combines them into a single pane of glass, but you can achieve the same things with other tools if necessary. For example, there are many other tools that you could use to run a UDP port scan that do not cost money (EG NMAP)

Incentivized

For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.

• Advanced Threat protection via Check Point CloudGuard proven ThreatCloud intelligence feeds for malicious IP's is a nice feature.
• We have not set up the cloud bots auto-remediation functionality yet, but from initial testing, it looks to be something worth utilizing.
• Having reporting tie in's with our ServiceNow asset management platform is very handy.

Incentivized

• Cheaper than some other platforms
• Good support
• Cloud based
• Integrates well with identity providers

Incentivized

• Skybox manages compliance for firewalls better than we have seen with other tools.
• Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change.
• The Skybox network map is more detailed than other management tools showing us paths other tools didn't find.

Incentivized

• Support Services - Support during implementation
• Proof-of-concept - Needs to more detailed
• Troubleshooting multi-cloud/ vendor issues
• Should contain all the compliance standards - NIST, HIPPA, FedRAMP

Incentivized

• No logging for things like scanning. This means you don't actually know when the scan has failed if you're not immediately on the ball.
• Reports could look better. It would be good to be able to customise the report with some different styles to suit your company's branding.
• Could have better tutorials.
• It may be useful to have a feature similar to Microsoft Secure Score, which compares your organisation to similar ones, so that you have a reference of how secure your environment actually is.

Incentivized

• User experience. On the first approach, it's not the simplest tool that I have ever used.
• Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox.
• Too many updates of the product.

Incentivized

Is easy to use, and the standad configuration is well prepared.

Incentivized

It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision

Checkpoint support is great. They provide great SLAs and they comply with service times accordingly.

Incentivized

The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.

Most products have their pros and cons but Dome9 does everything Evident.io and Redlock can do and more. Evident was a good tool but merging the two products into one complicated things.

Incentivized

Offers a great number of tools in one interface, giving you a single pane of glass to work from. Therefore, it's favourable compared to some of these other products, that do similar things but are less intuitive and less easy to use. This makes it not only easier to use, but easier to report results to your customers. Also, although the price point can seem high, once you start adding multiple paid tools that do the same job, there probably isn't a massive amount of difference (if any)

Incentivized

CloudGuard Dome9 does not have a suite for an on-premise datacenter.

Incentivized

• Significant $$$ cost savings as compared to other competitors in the market
• Long term contracting also helped in cost savings and good ROI - 750k USD approx
• Multi-vendor and Multi-cloud capabilities also helped us forecast the capex well
• No need of any other IAM solution - Some cost savings in that area as well for us,

Incentivized

• Price point allows us to sell the solution at an excellent margin
• Freed up time due to the automated solutions, allowing us to utilise staff better
• Use from anywhere due to being cloud based

Incentivized

• Skybox is in pilot
• Positive ROI is in change management

Incentivized