Check Point Quantum Firewalls and Security Gateways vs. Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series

1) For huge DC environments and complex networks 2) Where clients were consistent up-time like FSI and healthcare 3) Application-aware client req. and preventing day 0 cyber attacks. 4) Securing East-West traffic, hyper-scaling capabilities 5)Some advantages - Best Security meets Ultimate Hardware and SandBlast Zero Day Protection out of the box, Modular hardware 6) High Performance CPUs

Incentivized

PaloAlto VM-200 is a virtualized firewall with high processing power and network edge protection. The great advantage is being able to implement in a VMware environment without worrying about hardware, rack space, physical network connections and others. It can be easily managed via the web and remotely to create protection, access and reporting rules. The VM-200 firewall can be used by any company, small or large because it has several models available according to the real needs of each one.

Incentivized

• SSL inspection provides more effective mitigation of threat and data leakage with the ability to inspect and analyze encrypted traffic.
• Threat emulation and extraction provides protection against zero-day threats without compromising the data of infected files.
• 'Office mode' VPN provides a seamless connected experience for remotely connected individuals.
• Application control features provide granular restrictions to the type of application traffic than can pass through the network.

Incentivized

• Decrypt internet traffic
• daily reporting of top internet users
• classify internet traffic in real-time to allow us to understand the organization needs.
• Strong AI capabilities

Incentivized

• HTTPS Inspection -- The firewall has troubles re-packaging the packet in a way that some websites are able to interpret correctly
• Support -- Even getting support directly from Check Point isn't the easiest of experiences. They are more concerned about how fast they can close a ticket out, rather than fixing the problem.
• Custom reports -- Custom reporting is extremely limited

Incentivized

• High Availability can be improved to allow active-active deployment
• All command line documentation to provide and support automation
• It will be nice to have link aggregation just like in the hardware firewall models.

Incentivized

Security Gateways are coming with a Hyperscale solution that provides maximum usability in production.

Incentivized

It is very easy to use, even for those with little experience in this particular firewall. Some of the advanced content filtering and content-based policies are difficult to pick up; however, almost all required decoders are built in. Built-in logging and rule testing make rule definition easy, and labels/tags allow filtering, grouping, and categorisation of rules. Updates are easy, and high availability is also reliable.

Incentivized

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

Palo Alto VM series are best selling and industry's top-selling security product which customers prefer while securing their public cloud environment

Incentivized

In a heterogeneous environment, we wanted to keep multiple vendors for multiple purposes. CP was found very good in handling basic Next generation firewalls features along with handling of VPNs.

Incentivized

palo alto firewalls are application-oriented systems. They can beat other product which are based on layer 3/4 inspection. Vm series are also quickly available and could be useful in urgent deployment needs . other vendors like Fortinet and cisco could take much more time to provide the VM and in some cases installation and license validation are complicated

Incentivized

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• ROI has been achieved quickly through lack of security incidents.
• Inline filtering happens at line rate, unline Sourcefire from Cisco.
• Great incentives from PAN to switch made a difference in the choice to change.

Incentivized