Check Point Harmony Browse vs. Palo Alto Networks Prisma Access

Check Point Harmony Browse is particularly well suited for protecting against the various zero-day attack vectors, which is what it is designed to do. It offers very good protection against users visiting phishing sites, malware sites, downloading or opening ransomware, and just generally providing the safety net required in a corporate environment against users visiting potentially harmful websites.

Incentivized

Depending on the complexity of your equipment, devices, the network you are with, the size of your company, or the budget you are willing to pay, you should consider buying Prisma. I have in mind that it is a tool to make the leap to extra security for your devices; it is a complex tool that cannot be learned in a single day. Without a doubt, I would recommend her to a company that has a proven track record and knows what it wants.

Incentivized

• Protection from phishing.
• protection from malware.
• protection from ransomware.
• General protection against zero-day attack vectors.

Incentivized

• Complete control and configuration of iOS devices across our network.
• Great username options in the latest version to help keep our devices organized and easy to manage.
• Easy to enroll devices to connect to the VPN.

Incentivized

• When inspecting traffic there can be a some performance degradation.
• We have had a few instances of protections interfering with legitimate traffic. Worth the trade-off though.

Incentivized

• It lags a bit on new features
• It is best used with an entire Palo Alto environment

Incentivized

We were already in the Check Point ecosystem and therefore did not look into alternatives like CrowdStrike or Kaspersky. Looking back, Check Point stacks up very nicely with the competitors on the market in terms of features, but I can't speak to actual real work performance having not used the others.

Incentivized

The management of connections is much more seamless with the Palo tool. AnyConnect was always a nightmare to get in and manage individual connections to what can and cannot be accessed based on IP addresses. We ended going with the newer methodology of remote access so that our users would be authenticated prior to entering login credentials.

Incentivized

• Improved security posture overall with reduced risk.
• Relatively low cost and easy implementation easily recouped by allowing us to shift resources to other priorities and away from manual monitoring tasks.
• Peace of mind for our users knowing they have a safety net in place.

Incentivized

• It allowed us to pass very strict audits from the world's largest banks.
• It was easy for our IT department to implement.

Incentivized