CheckPoint vs. FortiManager

If the org has more than a couple of hundred endpoints, I would recommend help from pro services otherwise the UX is going to cause confusion. Its almost as if a new customer would need hand holding because the UX is so .... unconventional. CheckPoint technical support does not have the manpower to meet the needs of paying customers.

Incentivized

FortiManager is well suited for larger organizations which require unified configurations and IT departments that need quick turn around on firewall related tickets. I believe MSPs can also benefit with the use of the VDOM feature, if strict separation between clients is needed. FortiManager wouldn't be ideal for 1-3 site operations, unless their configurations are extremely complex or have a high number of active users.

Incentivized

• Scans local endpoints for malware fairly quickly
• Can be installed by InTune
• Technical Support Managers will close support cases for invalid reasons
• Sales representatives think its OK for support to ghost paying customers

Incentivized

• Centralized FortiGate FW Management in a single console
• Available physical, virtual, or cloud deployment
• Single console for next-generation FW features
• Multiple Administrative Domains

Incentivized

• In my experience, notifications are completely broken and non-functional
• In my opinion, confusing UX for the cloud portal
• Don't try and import 100's of endpoints when onboarding because it will create a mess
• When installing the CP client you have to remove Microsoft Defender and if that fails, CheckPoint technical support goes, "Not my problem, sucks to be you!"

Incentivized

• Various bugs: The software is buggy, and if you don't have a good understanding of it's underlaying operation, you can get confused or stuck when pushing a configuration. There are lots of little quirks you will have to learn, which are not described in any documentation.
• Conflict resolution: Occasionally, during larger changes, bringing new devices in, pushing a config will fail due to dependencies, conflicts, or other software bugs. This is somewhat time consuming because the error messages provided aren't descriptive
• CLI Options: Some configuration changes require creating scripts that execute on each device, and can't be done via the GUI

Incentivized

Every dollar to CheckPoint is a wasted dollar.

Incentivized

Roll the dice and see what happens is what CheckPoint technical support wants its customers to do.

Incentivized

There is no clear leader for anti-malware, all have strengths and weaknesses, nothing is good or great at everything.

Incentivized

FortiManager is the best choice for managing numerous FortiGate firewalls. It allows for easy integration into ServiceNow and automates simple repetitive tasks that are very straightforward. Role-based access control is easy to enable and you can get quite granular with user permissions. Administrative Domains help segregate firewall management and compliance within the FortiManager console, by almost any classification method that makes sense to your organization.

Incentivized

• ROI is satisfactory because it is doing the basics of preventing malware infections

Incentivized

• Significant reduction in new firewall deployment turn around time, 50% reduction
• Reduction in time spent on website access related IT support tickets. Avg 5 minutes from response to close
• Reduction in time spent by IT team for setting up WFH employees to allow working over SSL VPN.

Incentivized