Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Menlo Secure comparison

Check Point Software Technologies and Menlo Security are both solutions in the Firewalls category. Check Point Software Technologies is ranked #8 with an average rating of 8.4, while Menlo Security is ranked #51. Check Point Software Technologies holds a 2.1% mindshare in Firewalls, compared to Menlo Security’s 0.3% mindshare. Additionally, 97% of Check Point Software Technologies users are willing to recommend the solution, compared to 100% of Menlo Security users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 15, 2026

Menlo Secure and Check Point Cloud Firewall are major players in the cloud security sector. Menlo Secure gains an advantage in user-friendly aspects like cost and service, while Check Point Cloud Firewall prevails with stronger security features and value.

Features: Menlo Secure includes internet isolation to mitigate web threats, a single console for policy management, and SSL decryption capabilities. Check Point Cloud Firewall features advanced threat prevention, unified security management, and robust application control.

Room for Improvement: Menlo Secure could enhance logging and isolation features, and prevent certain websites from bypassing the system. Check Point Cloud Firewall's setup complexity and need for better vendor support suggest areas for enhancement alongside policy enforcement precision.

Ease of Deployment and Customer Service: Menlo Secure offers simple deployment and effective customer support, appealing to a broad user base. Check Point Cloud Firewall, although more intricate in deployment, benefits from comprehensive service and vast resources.

Pricing and ROI: Menlo Secure attracts budget-minded groups with its affordability and swift ROI. Check Point Cloud Firewall, while more costly upfront, is known for delivering extensive returns due to its comprehensive features, making a strong case for long-term benefits.

To learn more, read our detailed Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Menlo Secure Report (Updated: April 2026).

Buyer's Guide

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Menlo Secure

April 2026

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 2.1%, up from 0.4% compared to the previous year. The mindshare of Menlo Secure is 0.3%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	16.0%
Check Point Cloud Firewall (formerly CloudGuard Network Security)	2.1%
Menlo Secure	0.3%
Other	81.6%

Firewalls

Featured Reviews

Abhinandan Yadav

Network Security Engineer at Arrow PC Network Pvt Ltd

Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches

Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.

Read full review

Viral Shaa

IT Security Analyst at Eos Energy Enterprises, Inc.

Cloud security has unified hybrid policies and now protects critical energy workloads continuously

I would say Check Point Cloud Firewall (formerly CloudGuard Network Security) is valuable due to its hybrid cloud security features. It offers granular policy management across the on-premises and cloud environments, giving administrators consistent control for configuration drift. We need to change the policy and the inbound and outbound traffic settings, indicating what traffic must be blocked or allowed, and this capability with Check Point provides significant input into our security strategy. Check Point Cloud Firewall (formerly CloudGuard Network Security) provides unified security management across both hybrid clouds and on-premises environments. Unified security management affects my security operations positively, as we maintain critical systems on the cloud that require strong security and air gap networks. This cloud-native routing and policy installation helps close gaps in protecting critical applications and environments from exposure to the public cloud. From an administrator's perspective, Check Point Cloud Firewall (formerly CloudGuard Network Security) enhances our organization with clearer and more intuitive logging, making decisions easier to understand without deep investigation. In the CloudGuard UI, I can see which threats have triggered alerts, and this information is available on the unified dashboard that provides details of the threat analysis upon alert. As a small team, we log into the console to check specific alerts for high or low network usage or machine shutdowns. If needed, I tune the configuration policy, and the visualizing tools with reporting functionality simplify tracking changes made on the firewall, including the relevant source IP or device names. We ingest logs into our SIEM for detailed oversight, which allows us to monitor any administrative changes. Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk. We clearly understand our threat landscape and the associated risks. Onboarding the CloudGuard solution directly into our cloud environment has significantly lowered the risks throughout the network and it is easy to launch. When we assess our security posture with third-party assessments, we gain granular visibility into our network pre- and post-CloudGuard installation, showing how we have addressed significant risks and secured vulnerabilities.

Read full review

reviewer2701794

Head Of Bluechip Enterprise at a manufacturing company with 51-200 employees

Provides strong protection and multiple use cases but struggles with market recognition

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto. Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco. What can be improved is market awareness and adoption of the technology. When selling it in the channel, regardless of how good the technology might be, success depends more on market adoption and awareness.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's super reliable, I don't think I've ever had a reliability issue with it."

"Reliability is the best feature. We faced some issues when we were setting it up, but the service, portal, and administration are good."

"The most valuable feature is the web filter."

"Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable."

"Fortigate represents a really scalable way of delivering perimeter network security, some level of layer 7 security, WAF, and also a way to create a meshed ADVPN solution."

"I found the upgrades valuable."

"FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering."

"The most valuable feature of Fortinet FortiGate is URL filtering."

More Fortinet FortiGate pros

"The notifications, the visibility, and the deployment are the most valuable. It could be packaged in such a way that it took a lot of time and resources off our hands, so it was more efficient."

"The most valuable features for me are related to management. I can use the data center objects directly in the policy without worrying about specific static IP addresses. The data center objects update automatically if the IP addresses change."

"The ease of deployment has been nice. It is like managing any of our on-prem firewalls."

"The most valuable feature of this solution is that you can start off with a simple firewall and expand it to UTM."

"The solution is easier to manage than an on-premise firewall. It is easy to manage. The use of dynamic objects for these gateways made it easy to create the right rules and the right policies. Integration with Azure is also easy where we have to just add the subnets. In an on-premise setup, we have to add everything from scratch. We can automate a lot of actions."

"The solution helps protect network security by offering threat prevention, addressing vulnerabilities, and utilizing blades."

"The solution is stable. Most Check Point solutions are stable."

"The solution, overall, has worked very well for our organization."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pros

"The solution is invisible to our end users, so it doesn't have any impact on their work or performance."

"We are not aware of a single compromise from the web since implementing the solution."

"This security technology addresses risk and enables people to conduct business without that risk, which is where the ROI is realized."

"Either you have access to something or don't have access to it, and if you do, we can ensure, 100 percent of the time, that there is nothing malicious that is going to impact our system in any way."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

"We have definitely seen ROI, as we save a ton of money and time because the numerous hits that we were receiving from our security tools prior to implementing them had to all be chased down, dispositioned, and endpoints had to be reimaged."

More Menlo Secure pros

Cons

"It should be more stable."

"The command line is complicated, and the interface could be better."

"The union with the two technologies, endpoint, and firewall, doesn't work well."

"The solution could be more user friendly."

"The built-in logging and reporting is limited without FortiAnalyzer."

"From my experience, I see that the datasheets of the Fortinet FortiGate portfolio need to be more accurate because correct sizing is essential."

"They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI."

"The solution has limited scalability."

More Fortinet FortiGate cons

"I want the upgrades of their CloudGuard solution to major versions to be easier. We have had a few small hiccups. They have different types of cloud clusters called Geo Clusters, and those just cannot be upgraded past a certain point, which is a hurdle that we are currently experiencing."

"We have done a lot of automation with the firewall, but sometimes, there are some failures because of some bugs. The fixes for them are still not available. We have daily or weekly communication with the Check Point people giving support in the India region, but we have not seen much improvement or response to our requests for some additional features."

"I would like to see more focus on east-west traffic inspection and AWS."

"Our environment basically expanded to such a large scale that it wasn't feasible for us to use CloudGuard in our multiple-account production environment."

"The user interface could be more intuitive."

"The documentation could be much better."

"Every good security product requires a company with many research departments and staff."

"Integration could be easier, especially with Scale Set and related features."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) cons

"Currently, I don't have a good way to see which of my rules are being used in the access control lists."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"The user monitoring could still be improved."

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

"In the best of all worlds, we wouldn't have to make any exceptions. For example, there are some very complex, application-oriented sites that we end up making exceptions for."

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists. I have numerous entries, but are they all still needed? A report that would show me my list of who is allowed and whether we're actually using it would be useful because I can then go clean up my list. It would be easier to manage. We would eliminate the vulnerability of unused services."

More Menlo Secure cons

Pricing and Cost Advice

"It is around $50,000 per month."

"I rate the price of Fortinet FortiGate SWG a seven and a half out of ten since it is not a cheap solution, though I feel it is a good product for the money one pays."

"It is somewhat expensive compared to other solutions such as Sophos."

"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."

"Fortinet is reasonable in pricing and licensing. Overall, FortiGate is affordable. The licensing fee can be a little high, depending on the budget for your project."

"Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."

"It's very affordable."

"I give the pricing a nine out of ten."

More Fortinet FortiGate pricing and cost advice

"My experience has been extremely positive. It was not a concern because I had an account team that fought for pricing for our company. They were not pushing me to professional services for certain help. I was instantly getting a CloudGuard architect to help us out."

"I do not know the exact price, but it is fairly priced. It is neither cheap nor costly."

"The price of Check Point CloudGuard Network Security is very high compared to other solutions, such as Fortinet FortiMail. For the over 2,000 mailboxes we use with the solution it is very expensive."

"Every project needs different pricing. I believe that when we talk with the particular guys, we will find a price for the customer. They are flexible in terms of that because we need to be flexible, and we have many companies who are aggressive with discounts."

"CloudGuard Network Security's pricing is fine."

"I like the flexibility because I am pretty sure you can use the same license on Azure or AWS. I forgot the name of the license, but there is a specific type you can use that lets you interchange them, and that is pretty good. I like that."

"It is not expensive, but it is a little bit above the middle range. There are other solutions that are a little more expensive than this, but they also have some interesting features."

"We are using our BYOL. We are using our existing Check Point discounts to work with licensing. Overall, it is very competitive. Its pricing is reasonable to me."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pricing and cost advice

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

10%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Computer Software Company

11%

Financial Services Firm

11%

Comms Service Provider

Manufacturing Company

14%

Retailer

10%

Computer Software Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	367
Midsize Enterprise	135
Large Enterprise	193

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	41
Large Enterprise	77

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Check Point CloudGuard Network Security?

The tool's most valuable feature is its management console.

See all answers

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Although I do not know much about the pricing or setup costs, Check Point CloudGuard Network Security is very cost-ef...

See all answers

What needs improvement with Check Point CloudGuard Network Security?

Check Point CloudGuard Network Security could be improved with faster policy propagation across large multi-cloud env...

See all answers

What needs improvement with Menlo Security Secure Web Gateway?

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto....

See all answers

What is your primary use case for Menlo Security Secure Web Gateway?

People are mainly using it for zero trust web access. Menlo Secure is built from the ground up to provide zero basic ...

See all answers

What advice do you have for others considering Menlo Security Secure Web Gateway?

Secure file sharing and data protection is not exactly what Menlo Secure is designed to do. While it can handle some ...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Azure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 8% of the time

Cisco Secure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 6% of the time

Palo Alto Networks VM-Series vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 5% of the time

Prisma Cloud by Palo Alto Networks vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 4% of the time

More Check Point Cloud Firewall (formerly CloudGuard Network Security) Competitors

Prisma Access Browser vs Menlo Secure

Compared 21% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure

Compared 13% of the time

Netskope Next Gen Secure Web Gateway vs Menlo Secure

Compared 8% of the time

Cloudflare One vs Menlo Secure

Compared 7% of the time

Silo by Authentic8 vs Menlo Secure

Compared 7% of the time

More Menlo Secure Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2026

Download Fortinet FortiGate product report

Buyer's Guide

Check Point Cloud Firewall (formerly CloudGuard Network Security)

May 2026

Check Point Cloud Firewall (formerly CloudGuard Network Security) report

Download Check Point Cloud Firewall (formerly CloudGuard Network Security) product report

Buyer's Guide

Menlo Secure

April 2026

Download Menlo Secure product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security

Menlo Security Web Security, Menlo Web Security

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Check Point Cloud Firewall delivers advanced threat prevention and administration ease with centralized management of hybrid clouds. It offers seamless cloud platform integration, maintaining consistent security policies and enhancing efficiency.

Check Point Cloud Firewall is designed for comprehensive cloud security, ensuring perimeter protection, traffic inspection, and threat prevention. It is often used for safeguarding workloads and applications in public cloud settings like AWS and Azure. The firewall effectively controls both east-west and north-south traffic and supports hybrid cloud setups. Utilizing features like VPN, IPS, and URL filtering, it secures environments across multiple platforms, helping manage compliance effectively while addressing latency, API integration, and onboarding challenges.

What are the key features?

Advanced Threat Prevention: Defends against cyber threats across hybrid clouds.
Auto-Scaling: Automatically adjusts resources to meet demand.
Unified Security Management: Centralizes management for consistent security.
REST API Automation: Enables seamless integration with existing workflows.
Robust VPN Capabilities: Ensures secure data transmission across networks.

What benefits to expect in reviews?

Ease of Administration: Simplified management processes across environments.
Operational Efficiency: Enhances productivity by reducing risk and complexity.
Consistent Security Policies: Maintains a uniform security posture between clouds.
User-Friendly Interface: Streamlines user interactions and task completion.

Check Point Cloud Firewall sees frequent use in sectors needing robust perimeter protection, such as finance and healthcare, where compliance is critical. Its capabilities suit businesses utilizing public cloud infrastructures, managing complex hybrid models, or requiring strong VPN services and traffic control.

Check Point Software Technologies

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Physicians Choice Laboratory Services, Helvetica Insurance

Information Not Available

Buyer's Guide

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Menlo Secure

April 2026

Free Report: Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Menlo Secure

Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Menlo Secure and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,221 professionals have used our research since 2012.

See our Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Menlo Secure report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.