CheckPoint vs. Forcepoint NGFW

CheckPoint performs well as an internal firewall between network zones, providing policy control and deep inspection of internal traffic. It works well for a multi network setup like ours across multiple sites. It is however not a fast changing interface and time needs to be taken to perform changes. It's not a quick as other vendors

Incentivized

If you are looking for a smaller network/security team, the ease and low complexity create an easy to manage environment. One engineer can easily manage 100 nodes/locations. If you are just starting to get security conscious and predict regular adjustments to policy, routing, and access, this is a very good system for making easy to understand and low impact changes on a regular basis without operations interruption.

Incentivized

• Threat Prevention better than Fortinet
• Granularity of security policy can be customized to the maximum
• hardware performance is really good
• Bugs are less as compared to other vendors
• support is excellent
• modules work as expected
• Features can achieve out of box requirements

Incentivized

• Easy to manage and make changes on - ACL's are done with ease.
• Easy USB initial configuration - The easy initial setup of a new location and firewall saves massive time. Settings are automatically pushed to new nodes upon contact with the controller.
• Low Complexity - This system does not have a lot of complexity requiring extra hours, training, or personnel to manage.

Incentivized

• In my experience, notifications are completely broken and non-functional
• In my opinion, confusing UX for the cloud portal
• Don't try and import 100's of endpoints when onboarding because it will create a mess
• When installing the CP client you have to remove Microsoft Defender and if that fails, CheckPoint technical support goes, "Not my problem, sucks to be you!"

Incentivized

• Poor Reporting - It exists but even when calling in to support for assistance, they have no idea how to tackle customizing reports or searching for specific data.

Incentivized

Every dollar to CheckPoint is a wasted dollar.

Incentivized

the solution offer the most improvement about the usability by management more firewall in the same context or multicontext instead. The shared database allow to use one object for more than a package target of a cluster or more of gateways firewall. The management remain isolated from traffic pass through the firewall so the disruption is limited at minimum.

Incentivized

The Graphical User Interface is very easy to read, understand and work with. The usability of this product is very high.

Incentivized

Support has varied over the history of the company. Terro is a name that comes up often with the best of service from this company.

Incentivized

The CheckPoint Firewall and Cisco ISR router serve different purposes. Our organisation uses both devices, but in different areas of the topology. The Cisco ISR is a remote device and its function is to relay information to our edge firewall, which then passes to our internal firewall (CheckPoint) to securely control traffic requests.

Incentivized

There are similar hardware and license costs between the two products. The Forcepoint NGFW product is by far easier to use and manage.

Incentivized

• Smart console with lower operational overhead
• Compliance with Hipaa, PCISSS and saving on compliance plenties
• Less compatibility issues
• licensing model is costlier at the beginning
• Some modules require special training
• False positives may occur

Incentivized

• Efficiency/Productivity increase. The company moved from Cisco firewall and routing hardware to Forcepoint NGFW. It now takes fewer people and fewer hours to manage the new product. This has allowed the company to put the man-hours to use on other projects and tasks.
• Long term viability. This has been a concern in the past when the company started as Stonegate, merged to become Stonesoft then got purchased by McAfee, then McAfee got purchased by Intel. However, with Forcepoint the product seems to have found a stable home.
• Low complexity. The Web GUI based system for management has reduced the cost of personnel and training required. There is no longer a need for the company to have higher trained and higher salary cost employees to manage the system. Mid-level admins at lower salaries are capable of managing the GUI based system with ease.

Incentivized