Check Point ThreatCloud vs. Palo Alto Networks Advanced Threat Prevention

If you have the Check Point environment and want to utilize the Checkpoint environment, you should use the [Check Point] ThreatCloud. Without [Check Point] ThreatCloud, there’s no way to stop the 0days or APTs. However, [Check Point] ThreatCloud relies on the Checkpoint infrastructure to be used and integrated. If you have other firewall and/or endpoint vendors, [Check Point] ThreatCloud is not the best service to be used. Checkpoint also offers 24x7 threat cloud-managed security services to [...] organizations. Threat cloud-managed security services leverage the threat cloud decreasing the detection time and false-positive rates via increasing protection rates.

Incentivized

Palo Alto NTP is an appropriate suite of protection for any enterprise environment or anyone that truly needs some serious perimeter protection in a one-stop, all-in-one unit. There are no modules or add-ons or clunky interfaces to deal with it; everything works out of one management plane, licensing, implementation, monitoring. updating, etc. As a network admin, that is immensely valuable to me. Additionally, I get real-time reporting on all the stuff NTP is catching, and it is nothing to shirk at. The real value in NTP comes in only after you begin doing SSL-decryption, however, to truly inspect the traffic. Short of that, you are just seeing a bunch of encrypted data and the NTP suite of tools isn't going to avail you. NTP plus decryption, though, is invaluable!

Incentivized

• anti virus
• anti bot

Incentivized

• Anti virus
• Vulnerability protection
• Anti spyware

Incentivized

• SOAR integration, Checkpoint does not have built in SOAR
• Automation throughout the findings of [Check Point] ThreatCloud
• Special team for threat intelligence
• K8s threat cloud integration and K8S forensics
• Native SIEM integration

Incentivized

• Sometimes I struggle to find the deny or specific traffic log for file blocking profile under Unified logs.
• Reporting around Threat Prevention suite could be much better.
• Possibly a specific threat prevention search function that spans across of threat features.

Incentivized

As Checkpoint next generation firewalls were already implemented in the network, ThreatCloud was easy to implement and had better features and reputation than competitors

Incentivized

It is comparable but not as robust as other stand alone IPS/IDS.

Incentivized

• High score rates [are] seen on breach systems after deploying systems integrated with [Check Point] ThreatCloud
• Catch rates are very high compared to other vendors
• One missing thing is the detection for localized URLs and IPs
• Purchasing within the 3-year perspective is cheap compared to other solutions; ROI is generally six months
• [Check Point] ThreatCloud eliminates the need [for] other additional services that may need to be deployed like dedicated IPS, Dedicated Sandbox, DNS solution, etc.

Incentivized

• We have various compliance standards we have to meet and the Palo Alto with its Networks Threat Protection suite has checked off pretty much all the boxes we needed and at a price point that couldn't be easily beat for comparable features, throughput, etc.
• IT/Network staff has saved a A LOT of time using this platform for protection (coming from an ASA)

Incentivized