Check Point Harmony Browse vs. DNSFilter

Check Point Harmony Browse is particularly well suited for protecting against the various zero-day attack vectors, which is what it is designed to do. It offers very good protection against users visiting phishing sites, malware sites, downloading or opening ransomware, and just generally providing the safety net required in a corporate environment against users visiting potentially harmful websites.

Incentivized

I like how easy it is to manage the filtering software from the web portal. It's super straightforward to set up my networking equipment with clear instructions. I like that it automatically blocks threats without me having to do anything. It also lets me remotely manage both of our locations and networks from the same portal with the same policies. Very useful for saving time setting up content filtering.

Incentivized

• Protection from phishing.
• protection from malware.
• protection from ransomware.
• General protection against zero-day attack vectors.

Incentivized

• Content Filtering
• Threat Protection
• Detailed Reporting on Network Activity

Incentivized

• When inspecting traffic there can be a some performance degradation.
• We have had a few instances of protections interfering with legitimate traffic. Worth the trade-off though.

Incentivized

• Improved scalability: As an organization's needs grow and evolve, the software should be able to scale up and handle an increasing number of users and devices.
• More granular controls: The ability to set more detailed and specific policies, such as the ability to block certain types of content for specific groups of users, would give organizations more flexibility and control over their internet usage.
• Advanced threat protection: Increasing the software's ability to detect and protect against advanced threats such as zero-day exploits and APTs would provide a more comprehensive security solution.

Incentivized

We were already in the Check Point ecosystem and therefore did not look into alternatives like CrowdStrike or Kaspersky. Looking back, Check Point stacks up very nicely with the competitors on the market in terms of features, but I can't speak to actual real work performance having not used the others.

Incentivized

When compared to Kerio Control we found Central Management of filtering to be much easier, it also allowed us to apply filtering to remote devices like laptops and had better logging. We found DNSFilter to be much easier to deploy then Webroot DNS Protection because Webroot required the Anti Virus to be installed before deployment was even possible, and reporting features were very lacking.

Incentivized

• Improved security posture overall with reduced risk.
• Relatively low cost and easy implementation easily recouped by allowing us to shift resources to other priorities and away from manual monitoring tasks.
• Peace of mind for our users knowing they have a safety net in place.

Incentivized

• We used to deploy Cisco Umbrella before switching to DNSFilter. I feel like you need an advanced degree to set up and manage Cisco Umbrella. Not the case with DNSFilter. You will save time and money by leveraging a very easy to use product.

Incentivized