Check Point Quantum Security Gateway Next Generation Firewall vs. WatchGuard Network Security

1) For huge DC environments and complex networks 2) Where clients were consistent up-time like FSI and healthcare 3) Application-aware client req. and preventing day 0 cyber attacks. 4) Securing East-West traffic, hyper-scaling capabilities 5)Some advantages - Best Security meets Ultimate Hardware and SandBlast Zero Day Protection out of the box, Modular hardware 6) High Performance CPUs

Incentivized

Generally speaking, our customers have standard requirements and the WatchGuard Network Security Firebox is there to ensure they stay protected. We've never had a successful breach on a customer's on-premise setup with a WatchGuard Network Security Firebox installed. 3rd parties (like CCTV, Printers, Login Systems, etc.) do not know which port their devices work over, so we have to identify that with them and there are often delays when this occurs.

Incentivized

• SSL inspection provides more effective mitigation of threat and data leakage with the ability to inspect and analyze encrypted traffic.
• Threat emulation and extraction provides protection against zero-day threats without compromising the data of infected files.
• 'Office mode' VPN provides a seamless connected experience for remotely connected individuals.
• Application control features provide granular restrictions to the type of application traffic than can pass through the network.

Incentivized

• Incoming Torrent attempts were blocked, but outgoing (by a user) were permitted. Similarly, other direct attempts were summarily blocked.
• provides full administrative support for analysis of usage and scope.
• strong Wi-Fi support and security - area wi-fi maps
• They think of all the things secure and I don't have to worry about it.
• I have not identified anything else that needs improvement - I am well satisfied.

Incentivized

• HTTPS Inspection -- The firewall has troubles re-packaging the packet in a way that some websites are able to interpret correctly
• Support -- Even getting support directly from Check Point isn't the easiest of experiences. They are more concerned about how fast they can close a ticket out, rather than fixing the problem.
• Custom reports -- Custom reporting is extremely limited

Incentivized

• Bridging ports, after the firewall is setup, isn't as easy as it could be.
• Cloud integration for management requires recreating the entire device. It should just convert the current config.
• Adding a Proxy policy should be on a different page from the other policy creation page.

Incentivized

I'm giving this note to WatchGuard Network Security due to its ease of daily support (after acquiring necessary knowledge in the solution), which allows agility in configuration changes, its integration of several reliable security features (such as SSL VPN, VPN Virtual Interfaces between companies, and others) and functional and stability in operation, with no downtime in the equipment due to problems or malfunctions

Incentivized

Although it might take some time to figure out, we have been able to use WatchGuard's online reference library and tech support to create/implement/modify all of our filtering rules and exceptions needed. There really has not been a shortcoming other than perhaps a learning curve.

Incentivized

Applications errors should always be expected in any kind of technology. What matters most is the way you find to resolve it.

Incentivized

WatchGuard works seemlessly and so in the background you don't realize it's there until you need it!

Incentivized

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

We have only had to contact them once during the initial set up to help bring the internet back on line. After that for the most part our systems have been automated, and could easily be checked form their online FAQ and Knowledge base that they provide. Everything else is easily handled from their browser based interface

Incentivized

We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.

Incentivized

Online training is good for learning how to use the product. It does not teach security strategy because that is not its intent.

Incentivized

I had my key information for setting up the firewall, and they assisted me in finding the settings and appropriate places to enter data. They also helped troubleshoot when I didn't understand some of their feature concepts, and we got it running.

Incentivized

In a heterogeneous environment, we wanted to keep multiple vendors for multiple purposes. CP was found very good in handling basic Next generation firewalls features along with handling of VPNs.

Incentivized

At 3 of my locations I use both a Sonic Wall and a watch guard. In my experience, the sonic wall has a much better interface. I feel it was much easier for someone that has never accessed a fire wall to be able to make changes and learn very quickly. I feel the Watchguard has better built in applications and the VPN was easier to use and access.

Incentivized

We scaled it exactly as we needed it to be! Easy, money-saving, and we didn't end up with features or options that we'd never use or worry about.

Incentivized

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• The VPNs are very easy to configure, less time to loose at new implementation.
• The traffic monitor can be improved, I can't see the ISO layers to do a faster diagnosis.
• Having an ADDS authentication is a plus, can use it with rules and vpn for remote access. Very useful.
• The dimension feature can be developed as a website + database for NGINX, Apache2, IIS, etc., I feel traped on that linux vm only.
• Most of the customers doesn't like to pay for a solution like this. They will accept only after beign attacked. WatchGuard can improve the sales with a demo (hacking, active security, etc.).