Check Point Quantum Security Gateway Next Generation Firewall vs. Symantec Edge Secure Gateway

1) For huge DC environments and complex networks 2) Where clients were consistent up-time like FSI and healthcare 3) Application-aware client req. and preventing day 0 cyber attacks. 4) Securing East-West traffic, hyper-scaling capabilities 5)Some advantages - Best Security meets Ultimate Hardware and SandBlast Zero Day Protection out of the box, Modular hardware 6) High Performance CPUs

Incentivized

• In our organization, Symantec ProxySG and Advanced Secure Gateway (ASG) is our primary and second line of defense facing the internet
• It is positioned behind in conjunction with an intrusion protection service.
• Before using this concept of defense, our Internet firewalls were continuously being overworked and saturated, slowing down traffic as a result.
• It is not an option any more not to have Symantec ProxySG and Advanced Secure Gateway (ASG) in our infrastructure.

• SSL inspection provides more effective mitigation of threat and data leakage with the ability to inspect and analyze encrypted traffic.
• Threat emulation and extraction provides protection against zero-day threats without compromising the data of infected files.
• 'Office mode' VPN provides a seamless connected experience for remotely connected individuals.
• Application control features provide granular restrictions to the type of application traffic than can pass through the network.

Incentivized

• In conjunction with Active Directory, we can allow or deny access to the internet very quickly. We can also determine the level of access to the internet.
• To satisfy our executive requirements, we can provide regular reports on internet usage.
• Malicious protection Symantec ProxySG and Advanced Secure Gateway (ASG) provides beyond our expectations.
• It is our first level of defense, thus allowing us to reduce our investment in internal security systems.

• HTTPS Inspection -- The firewall has troubles re-packaging the packet in a way that some websites are able to interpret correctly
• Support -- Even getting support directly from Check Point isn't the easiest of experiences. They are more concerned about how fast they can close a ticket out, rather than fixing the problem.
• Custom reports -- Custom reporting is extremely limited

Incentivized

• On occasion, content analysis needs some tweaking. Specifically, when huge files our downloaded.
• For our organization using cloud-based applications and services is very discouraged.
• However, the universe seems to be trending towards cloud-based offerings.
• It may be reassuring if Symantec ProxySG and Advanced Secure Gateway (ASG) could enhance protection in dealing with cloud services, particularly in protecting data.

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

• We have submitted support request to Symantec ProxySG and Advanced Secure Gateway (ASG). In all cases, responses have been timely, and very comprehensive.
• The support staff is very knowledgeable and does not hesitate to involve expert resources as required.
• We have never had an unsolved case with Symantec ProxySG and Advanced Secure Gateway (ASG).

In a heterogeneous environment, we wanted to keep multiple vendors for multiple purposes. CP was found very good in handling basic Next generation firewalls features along with handling of VPNs.

Incentivized

• Trend Micro IPS combined with Symantec ProxySG and Advanced Secure Gateway (ASG) is a winning formula for our organization
• Palo Alto next-generation Firewall. Could not handle the load and protection level that we have today.

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• With the advent of the Symantec ProxySG and Advanced Secure Gateway (ASG), we have reduced by 95% the number of internal security incidents and events.
• As a result, we have reduced the effort and cost of investigating security incidents.
• Knock on wood, as a result, and we have never had any data or security breaches.