Check Point Quantum Security Gateway vs Juniper SRX

Likelihood to Recommend

Check Point Next Generation Firewall is a great solution for larger companies that have the ability to dedicate a large budget towards information security controls. In order to get the best return on investment, however, the company should have a highly functioning information security maturity level and the ability to invest in dedicated training so that all features are utilized effectively. The SmartEvent dashboards are able to provide ongoing data that can track this effectively.

Read full review

Verified User

Manager in Information Technology

Maritime Company, 1001-5000 employees

View all 3 answers on this topic

Juniper SRX is well suitable for large-scale organizations and also large service providers who use Advanced security and routing features and provide service to clients. juniper is very expensive and difficult to configure.

Read full review

Vipin Sharma

Network security engineer

MultiTech ServersInformation Technology & Services, 1-10 employees

View all 8 answers on this topic

Feature Rating Comparison

Check Point Quantum Security Gateway

Juniper SRX

Identification Technologies

Visualization Tools

Content Inspection

Policy-based Controls

Active Directory and LDAP

Firewall Management Console

Reporting and Logging

VPN

High Availability

Stateful Inspection

Proxy Server

Pros

Logging -- Logs are clearly displayed with all information about the packet
Canned reports -- The reports "out of the box" are pretty nice and give you a lot of detail
Rule Configuration -- Defining (basic) rules is easy to do, and understandable

Read full review

Verified User

Analyst in Information Technology

Financial Services Company, 201-500 employees

View all 3 answers on this topic

One JUNOS is the Juniper mantra, including for the SRXs. While not entirely true, it comes close enough that if you learn some SRX configuration tricks, they will likely work across all of your SRXs.
Out of the box, with no additional license required, you have a NextGen firewall, by default. You can turn off the firewall and have just a plain ole router.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 201-500 employees

View all 8 answers on this topic

Cons

Check Point has a complex range of reporting tools, some of which can take time to learn and be comfortable with.
The firewall is solid and needs to have someone with training to manage it which means any little mistake can bring down the network and have you on the phone with Check Point support.
They are pricey for some of the hardware and reporting tools.

Read full review

Ramesh Ramrattan

Systems Administrator

UA Brands (Uniform Advantage)Retail, 201-500 employees

View all 3 answers on this topic

My only real criticism of the product is that it's hard to figure out how to upgrade the firmware from the CLI via TFTP via the docs, but it works great once you get it sorted.

Read full review

Bear Golightly

IT Operations Manager / IT Service Manager

Nashville WrapsWholesale, 51-200 employees

View all 8 answers on this topic

Support Rating

Check Point Quantum Security Gateway 10.0

Based on 1 answer

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Read full review

Verified User

Manager in Information Technology

Maritime Company, 1001-5000 employees

View all 1 answers on this topic

Juniper SRX 5.9

Based on 4 answers

This is the one area where I have a beef with Juniper. When I called into Cisco TAC, 90% of the time, the first person I spoke with was able to resolve my issue. With Juniper TAC, 90% of the time, the first person I speak with is not able to resolve my issue, seems to almost be reading from a script, and must escalate my ticket. All of which takes time.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 201-500 employees

View all 4 answers on this topic

Alternatives Considered

At the time when we were evaluating Fortinet, it was not a layer 7, while Check Point did offer this. It appears that since then they have created next-gen firewalls as well. The interface of Check Point is a little easier to use (although the interface tends to use a lot of bright pink colors)

Read full review

Verified User

Analyst in Information Technology

Financial Services Company, 201-500 employees

View all 3 answers on this topic

The juniper is very versatile router/firewall box. it is an excellent router/edge device with zone based firewall.

The PaloAlto and the Fortinet have better GUIs and similar firewall featureset but they are not as flexible routers.

The Cisco CSR1kv is the only box that I would rank similar or higher to the Juniper SRX as it is as versatile as a router and supports the same security feature-set as the Juniper but it has better support and Cisco IOS is more widely adopted by the industry.

Read full review

Amr Momtaz

Cloud Migration Architect

IBMComputer & Network Security, 10,001+ employees

View all 8 answers on this topic

Return on Investment

Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Read full review

Ramesh Ramrattan

Systems Administrator

UA Brands (Uniform Advantage)Retail, 201-500 employees

View all 3 answers on this topic

It is a workhorse for our field operations. It provides the last touch for an ISP to the customer. The customer has no view of the device, but with the repeatability of the device, they do not need to.
The ability to roll out a dynamic routing protocol attached to a security zone allows elasticity to the environment that supports growth.
VLAN support on the inside interfaces allow this to be the only device in some smaller deployments we install these in.

Read full review

Eric Stephenson

Staff System Engineer

CommScopeTelecommunications, 10,001+ employees

View all 8 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Rating Summary

Check Point Quantum Security Gateway

Juniper SRX

Check Point Quantum Security Gateway

Juniper SRX

Check Point Quantum Security Gateway

Juniper SRX

Check Point Quantum Security Gateway vs Juniper SRX