Check Point Harmony Browse vs. Palo Alto Networks Prisma Cloud

Check Point Harmony Browse is particularly well suited for protecting against the various zero-day attack vectors, which is what it is designed to do. It offers very good protection against users visiting phishing sites, malware sites, downloading or opening ransomware, and just generally providing the safety net required in a corporate environment against users visiting potentially harmful websites.

Incentivized

Finding specific Cloud Vendor specific Cloud resource configuration, tags, network information and etc. is fairly easy to do. Cloud alert capabilities are pretty good and with proper knowledge top notch alerts can be created. Only downside I can think of is ease of use.

Incentivized

• Protection from phishing.
• protection from malware.
• protection from ransomware.
• General protection against zero-day attack vectors.

Incentivized

• Vulnerability assessment using Twistlock
• Enhancing Security by scanning workload based on different Security standards and provide a compliance report
• CF template integration with CI/CD pipeline to identify any security issue before workload are deployed
• IAM/UEBA features additional to enchaining security posture
• Auto remediation
• Integration is simple and solution is supported on multiple cloud
• Customized dashboard/queries

Incentivized

• When inspecting traffic there can be a some performance degradation.
• We have had a few instances of protections interfering with legitimate traffic. Worth the trade-off though.

Incentivized

• Real-time supports would be much appreciated. At the moment they have a third-party ticketing support tool, which can be replaced with real-time support, which can be provided to the user at the time of the issue.
• The user should be provided with all the learning material by the Palo Alto team at the time of license purchase. This would save a lot of users' time, which is taken up by research and finding the correct documents from the website.
• Themes can be introduced in the feature set, which would help the user customize the software as per their needs.

Incentivized

We were already in the Check Point ecosystem and therefore did not look into alternatives like CrowdStrike or Kaspersky. Looking back, Check Point stacks up very nicely with the competitors on the market in terms of features, but I can't speak to actual real work performance having not used the others.

Incentivized

Our organization didn't consider any other tool, and so far we are pretty much satisfied with Prisma Cloud.

Incentivized

• Improved security posture overall with reduced risk.
• Relatively low cost and easy implementation easily recouped by allowing us to shift resources to other priorities and away from manual monitoring tasks.
• Peace of mind for our users knowing they have a safety net in place.

Incentivized

• Investigation time is severely reduced
• Has potential to identify misconfigurations
• Hard to setup

Incentivized