Check Point Quantum Security Gateway Next Generation Firewall vs. Palo Alto Networks Next-Generation Firewalls - PA Series

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Check Point Quantum Security Gateway
Score 9.1 out of 10
N/A
The Check Point Quantum Security Gateway Next Generation Firewall is a tiered firewall product. The base model includes the core firewall services, and can be upgraded to include anti-bot/virus/spam and sandboxing capabilities.N/A
Next-Generation Firewalls - PA Series
Score 9.2 out of 10
N/A
Palo Alto next-generation firewalls classify all traffic, including encrypted and internal traffic, based on application, application function, user and content. Users can create security policies to enable only authorized users to run sanctioned applications.N/A
Pricing
Check Point Quantum Security Gateway Next Generation FirewallPalo Alto Networks Next-Generation Firewalls - PA Series
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Check Point Quantum Security GatewayNext-Generation Firewalls - PA Series
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Check Point Quantum Security Gateway Next Generation FirewallPalo Alto Networks Next-Generation Firewalls - PA Series
Considered Both Products
Check Point Quantum Security Gateway
Chose Check Point Quantum Security Gateway Next Generation Firewall
In a heterogeneous environment, we wanted to keep multiple vendors for multiple purposes. CP was found very good in handling basic Next generation firewalls features along with handling of VPNs.
Chose Check Point Quantum Security Gateway Next Generation Firewall
While Palo Alto Networks Next Generation Firewalls are priced more competitively against Check Point Products, the overall product has not as stable, effective or intuitive for us during our evaluation period:
  • A side by side comparison of traffic logs were done between Palo Alto …
Next-Generation Firewalls - PA Series
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
At first we continued using Check Point as our port-based firewall while using Palo Alto for content/URL filtering and threat prevention. However, we soon realized the Palo Alto did everything the Check Point did, plus quite a bit more. Hence, it made sense to consolidate all …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
I did not originally choose Palo Alto as our core firewall appliance. It has already been purchased when I came on board. However, I did recently choose to purchase new Palo Alto firewalls to replaced our older models. I have had experience working with Cisco ASAs and …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Why did we choose PAN? The number of exploits written for PAN devices are much smaller than ASA. It's much simpler to manage than the checkpoint. It includes web filtering module with the product. Quite simply, it was just the best bang for the buck. Our management consistently …
Chose Palo Alto Networks Next-Generation Firewalls - PA Series
Palo Alto beats all other current UTM/NGFW at this point in time. Palo Alto has a complete vision and is less buggy/requires less management overhead than other NGFW/UTMs on the market. They are currently developing a lot of products and I can see in the next 5 years, other …
Top Pros
Top Cons
Features
Check Point Quantum Security Gateway Next Generation FirewallPalo Alto Networks Next-Generation Firewalls - PA Series
Firewall
Comparison of Firewall features of Product A and Product B
Check Point Quantum Security Gateway Next Generation Firewall
8.1
3 Ratings
5% below category average
Palo Alto Networks Next-Generation Firewalls - PA Series
9.4
21 Ratings
10% above category average
Identification Technologies7.02 Ratings9.921 Ratings
Visualization Tools10.01 Ratings9.021 Ratings
Content Inspection7.03 Ratings9.921 Ratings
Policy-based Controls9.03 Ratings10.021 Ratings
Active Directory and LDAP6.02 Ratings9.920 Ratings
Firewall Management Console7.53 Ratings9.921 Ratings
Reporting and Logging8.53 Ratings7.721 Ratings
VPN9.03 Ratings8.521 Ratings
High Availability8.53 Ratings10.020 Ratings
Stateful Inspection9.03 Ratings10.020 Ratings
Proxy Server7.02 Ratings8.810 Ratings
Best Alternatives
Check Point Quantum Security Gateway Next Generation FirewallPalo Alto Networks Next-Generation Firewalls - PA Series
Small Businesses
SonicWall TZ
SonicWall TZ
Score 8.3 out of 10
SonicWall TZ
SonicWall TZ
Score 8.3 out of 10
Medium-sized Companies
Cisco Firepower 4100 Series
Cisco Firepower 4100 Series
Score 9.4 out of 10
Cisco Firepower 4100 Series
Cisco Firepower 4100 Series
Score 9.4 out of 10
Enterprises
Cisco Firepower 4100 Series
Cisco Firepower 4100 Series
Score 9.4 out of 10
Cisco Firepower 4100 Series
Cisco Firepower 4100 Series
Score 9.4 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Check Point Quantum Security Gateway Next Generation FirewallPalo Alto Networks Next-Generation Firewalls - PA Series
Likelihood to Recommend
7.5
(5 ratings)
9.5
(37 ratings)
Likelihood to Renew
-
(0 ratings)
10.0
(1 ratings)
Usability
-
(0 ratings)
10.0
(2 ratings)
Support Rating
10.0
(1 ratings)
8.4
(9 ratings)
User Testimonials
Check Point Quantum Security Gateway Next Generation FirewallPalo Alto Networks Next-Generation Firewalls - PA Series
Likelihood to Recommend
Check Point Software Technologies
1) For huge DC environments and complex networks 2) Where clients were consistent up-time like FSI and healthcare 3) Application-aware client req. and preventing day 0 cyber attacks. 4) Securing East-West traffic, hyper-scaling capabilities 5)Some advantages - Best Security meets Ultimate Hardware and SandBlast Zero Day Protection out of the box, Modular hardware 6) High Performance CPUs
Read full review
Palo Alto Networks
Palo Alto firewall only affords by Large level infrastructure having a budget for Security Prospect. I will recommend it for the Card information industry & Confidential data solutions. Because it provides a bucket of security features that are not easily vulnerable.
Read full review
Pros
Check Point Software Technologies
  • SSL inspection provides more effective mitigation of threat and data leakage with the ability to inspect and analyze encrypted traffic.
  • Threat emulation and extraction provides protection against zero-day threats without compromising the data of infected files.
  • 'Office mode' VPN provides a seamless connected experience for remotely connected individuals.
  • Application control features provide granular restrictions to the type of application traffic than can pass through the network.
Read full review
Palo Alto Networks
  • The PA handles VPN connectivity without missing a beat. We have multiple VPN tunnels in use for redundancy to cloud-based services.
  • The PA has great functionality in supporting failover internet connections, again with the ability to have multiple paths out to our cloud-based services.
  • The PA is updated on the regular with various security updates, we are not concerned with the firewall's ability to see what packets are really flowing across the network. Being able to see beyond just IP and port requests lets you know things are locked down better than traditional firewalls.
  • It is a great overall kit, with URL filtering and other services that fill in the gaps between other solutions without breaking the bank.
Read full review
Cons
Check Point Software Technologies
  • HTTPS Inspection -- The firewall has troubles re-packaging the packet in a way that some websites are able to interpret correctly
  • Support -- Even getting support directly from Check Point isn't the easiest of experiences. They are more concerned about how fast they can close a ticket out, rather than fixing the problem.
  • Custom reports -- Custom reporting is extremely limited
Read full review
Palo Alto Networks
  • Our specific model is a bit slow and outdated and takes up to 10 minutes to commit a configuration change.
  • Nested security rules would be helpful instead of a linear approach. But rule creation in general is very simple.
  • Documentation gives a very straight forward answer to some items but is very vague in others.
  • Support could be a little better. An issue we had a tech was insistent it was the "other guy" and it ended up being the very latest PAN OS upgrade.
Read full review
Likelihood to Renew
Check Point Software Technologies
No answers on this topic
Palo Alto Networks
The PA5220s have far exceeded what we have expected out of them. It was a bit of a learning curve coming from another vendor, but everything falls into place now with ease. The capabilities of the solution still surprise us, allowing us to remove other costly hardware and providing a single point of management needed
Read full review
Usability
Check Point Software Technologies
No answers on this topic
Palo Alto Networks
In my opinion, the Palo Alto Firewall is the simplest firewall in terms of management interfaces; though it has more advanced options that apply to more advanced use cases. Configuring basic features on the firewall is nearly self-explanatory; configuring more advanced features can be met with very thorough vendor documentation.
Read full review
Support Rating
Check Point Software Technologies
Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.
Read full review
Palo Alto Networks
We've run into a couple undocumented bugs, but that seems to happen with every brand and technology. Any time we've had to engage Palo Alto support they've always been professional, knowledgeable and prompt. In almost all cases we've been able to resolve our issues without having to escalate our tickets.
Read full review
Alternatives Considered
Check Point Software Technologies
In a heterogeneous environment, we wanted to keep multiple vendors for multiple purposes. CP was found very good in handling basic Next generation firewalls features along with handling of VPNs.
Read full review
Palo Alto Networks
No one can say any other companies in this time is better than Palo Alto Networks Next-Generatoin Firewalls. Palo Alto offers very advanced features which protect you[r] organization. Advanced malware protection, anti spam, lots of other threats.
Read full review
Return on Investment
Check Point Software Technologies
  • Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
  • Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
  • Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.
Read full review
Palo Alto Networks
  • Overall, even though the device is very expensive (both hardware and licensing), the product does produce a decent ROI, given that one (or HA pair) of devices can do so many things, such as anti-virus, anti-malware, URL filtering, SSL decryption, SSL VPN, routing, etc.
  • There will definitely be sticker shock when you're renewal comes up annually (or after 3 years), so be sure to look very carefully at the recurring costs of this product, with respect to licensing and hardware/software maintenance.
Read full review
ScreenShots