Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard Network Security vs ShieldX comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
581
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Check Point CloudGuard Netw...
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
161
Ranking in other categories
Firewalls (8th), Managed Security Services Providers (MSSP) (1st), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (4th), WAN Edge (3rd), Unified Threat Management (UTM) (3rd)
ShieldX
Average Rating
9.2
Number of Reviews
4
Ranking in other categories
Microsegmentation Software (11th)
 

Mindshare comparison

Firewalls Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard Network Security1.4%
Fortinet FortiGate18.7%
OPNsense10.5%
Other69.4%
Firewalls
Microsegmentation Software Market Share Distribution
ProductMarket Share (%)
ShieldX1.2%
Illumio26.8%
Akamai Guardicore Segmentation23.5%
Other48.5%
Microsegmentation Software
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
DG
Network administrator at Helios IT Service GmbH
Valuable features improve operations while providing high security standards
I honestly do not know how it can be improved anymore. There are probably people with more knowledge or experience who could suggest improvements. Most of the solutions we have used have been straightforward and effective. Occasionally, there is a strange bug, however, we just contact Check Point for a hotfix if we are a significant client. And since that is our situation, the solution works. There might be a possibility for Check Point to offer more training opportunities for users to get to know the solution better, perhaps through courses or similar resources. However, it depends on our company's arrangements with Check Point. In our case, we have a vendor involved. Everything we do with Check Point must go through the vendor first, which is somewhat inconvenient. It would be easier to deal with Check Point directly, however, it depends on the vendor. There is a wealth of material available online for those technically inclined. In this fast-paced industry, we must continue learning. Courses or online meetings, like Zoom or Teams sessions, for one or two hours each week, would be helpful. Despite using it for a long time, there are always new features. For example, just last week, I discovered a new feature that had been in the software for years yet it was not visible due to its placement behind multiple menus. Teaching sessions would be beneficial, yet it is our responsibility to learn, so we cannot entirely rely on Check Point.
MP
IT Director at park holidays uk
Proactively monitors, blocks, and reports what it has blocked; and self-updates meaning there is zero maintenance
The most valuable feature is the automatic scaling. With its microservices, it scales both up and down, depending on traffic and throughput. The traffic through our website depends on holiday bookings. It's very quiet in November through January, and then our traffic picks up quite rapidly and, at our peak, we will take in excess of a million pounds of business a day through our website. The UI was also one of the huge selling points. My web development manager was blown away with the detail and the granularity that you can get out of the UI. It is a very strong and informative UI, with the amount of data it provides. Uptime on the system has been 648 days and we do very little to it because it self-updates and alerts. It does everything that we need it to do, so the administration side of it is zero. One of the beauties about ShieldX is that it's such a good "fire-and-forget" product.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The security fabric is excellent."
"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."
"There’s something magical about the way the flavors blend together, creating a dish that is both comforting and exciting."
"The product is easy to configure."
"FortiAnalyzer's capability to provide detailed reporting based on various criteria is highly valuable."
"The initial setup is straightforward."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"Fortinet FortiGate is stable; I am told that Fortinet FortiGate is one of the best solutions available, and I believe it."
"The easy management of the policies is great for us because we are a small team and having easy management is great and useful for us."
"We have unified management. It is one of the advantages of this product."
"The automation and unified security management have helped me significantly; it saves me eighty percent of the time and reduces errors."
"The most valuable feature of Check Point CloudGuard Network Security is the increased mail protection including spam."
"The solution's most valuable feature is scalability. We can increase the number of CPUs, memory, and firewall throughput easily. Using CloudGuard Network Security for managing cloud firewall rules is considered easier than using the normal security groups provided by Azure or AWS."
"All the features that we subscribe to from CloudGuard NGTP are valuable. All the threat prevention and access control features give us the network security that we expect."
"Check Point CloudGuard provides comprehensive security coverage."
"The solution is easier to manage than an on-premise firewall. It is easy to manage. The use of dynamic objects for these gateways made it easy to create the right rules and the right policies. Integration with Azure is also easy where we have to just add the subnets. In an on-premise setup, we have to add everything from scratch. We can automate a lot of actions."
"ShieldX has been designed from the very beginning to work well in cloud environments. It understands autoscaling, automation, and auto-configuration. These are the things which are important in today's operating environment."
"It has helped us tighten our security posture. Now, staff can only access things that they should be accessing."
"...It takes the exact same policies that you would apply to your on-premise environment and enables you to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud."
"The UI was also one of the huge selling points. My web development manager was blown away with the detail and the granularity that you can get out of the UI. It is a very strong and informative UI, with the amount of data it provides."
"The Adaptive Intention Engine is fantastic. It allows us to develop security policies using the language of our internal customers. It's machine-learning applied to security workflows. That allows us to much more easily construct the policies that will protect those workflows."
"The most valuable feature is the automatic scaling. With its microservices, it scales both up and down, depending on traffic and throughput."
"We were able to see what devices are talking to each other, giving us more visibility."
 

Cons

"The way everything is set up could be easier. Currently, people need a lot of experience and knowledge to administer it and to link it to devices."
"I'm not sure if it's something that they already have or are developing something, however, we need some dedicated features for container security."
"In terms of what could be improved, the SD-WAN is quite difficult, because if you install the new box, 15 is okay, but if you change from an old configuration, if there is already configuration and a policy when you change to SD-WAN, you must change the whole policy that you see in the interface."
"If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox."
"I would like to see more AI features included in future updates, as that would add significant value."
"The issue with Fortinet FortiGate is the many security CVEs around; I have read there are probably multiple critical CVEs above 9.0 in Fortinet FortiGate products."
"The main area needing improvement is the user-friendliness of FortiGate's integration with other Fortinet tools like FortiAuthenticator and VPN services."
"The product has to be upgraded every few weeks."
"From my experience, the failover times are unsatisfactory when dealing with HA failovers in the cloud, but this is connected to API calls within Azure. While this is largely due to limitations of the cloud architecture, an improvement in this area would be beneficial."
"The solution could improve to have a DLP feature."
"Pricing in Jamaica is a major issue, with users often citing it as a reason for not using Check Point."
"I believe that presentations on artificial intelligence indicate that analyzing logs via SmartEvent and SmartLog Security Event Information Management can offer insights into emerging trends and potential next steps. By correlating logs related to BYOD, BYOL, and Shadow IT, it will become easier to manage and hopefully mitigate or understand risks."
"I want the upgrades of their CloudGuard solution to major versions to be easier. We have had a few small hiccups. They have different types of cloud clusters called Geo Clusters, and those just cannot be upgraded past a certain point, which is a hurdle that we are currently experiencing."
"The complexity to deploy should be decreased."
"It should be more unified across all platforms."
"We have done a lot of automation with the firewall, but sometimes, there are some failures because of some bugs. The fixes for them are still not available. We have daily or weekly communication with the Check Point people giving support in the India region, but we have not seen much improvement or response to our requests for some additional features."
"They need to be consistent in performance and capabilities over time, given the fact that this is new and I want to see where this goes in the next year or so. As the vendor continues to evolve and add future functionality, we want to make sure that we are still keeping up with the integrations, etc. Time will be the key factor here. The proper support for some of the latest technologies, Docker containers, etc. They need to keep up with threat landscape, so we will see how the security get layered. This is what we are going to be keeping an eye on."
"There should be a bit more customer care, with regular review meetings on it or regular reports. It would be nice to have a quarterly or biannual review of what ShieldX has blocked."
"I would like better reports and in-depth reporting."
"With any kind of tool like ShieldX, where you're in the cloud instead of a traditional firewall, you're using CPU resources in those environments to provide the protection. So there's a cost associated with CPU resources. I'm pressing upon them to make the product much more efficient and use less CPUs to do the same thing."
"We are having some issues with their LDAP and integrating it with the Active Directory. We can't seem to set it up."
 

Pricing and Cost Advice

"For the performance that we get, the price is reasonable. There are cheaper options, but they may not deliver the same kind of performance that we want. For the performance they provide, the price is acceptable."
"FortiGate SWG is reasonably priced."
"In my opinion, the pricing of the product is reasonable."
"The price of Fortinet FortiGate is reasonable for an SME."
"We are currently evaluating a Palo Alto solution, and the pricing could be a reason for going for Palo Alto."
"It is not expensive as compared to Cisco."
"The price could be lower."
"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."
"It's not very expensive. It isn't very cheap either. Its price is okay. It depends on how much money you have. It might be expensive for some companies. Its licensing is on a yearly basis."
"The pricing is pretty high, not just for your capital, for what you have to pay upfront, but for what you pay for your annual software renewals as well, compared to a lot of other vendors. Check Point is near the top, as far as how much it's going to cost you."
"CloudGuard Network Security is not too cheap."
"The licensing model has since transitioned to a cluster-based variant."
"The licesning has some good features. For example, the scaling feature is free of charge, allowing multiple scale-ups and scale-downs over a two-week period, which is pretty good."
"On average, it is normally on the lower end, being less expensive than Palo Alto or Cisco."
"It is not expensive."
"The tool's pricing is reasonable."
"We are very happy with the pricing and licensing. It's about getting a site-wide license. One of the challenges that we've had with our previous vendor had been the cost of licensing."
"For a three-year deal we paid £55,000 plus tax... But, and this is a big "but," this was over two years ago. ShieldX had only just hit the market. We were the first company in Europe to buy ShieldX."
"Security policies are now applied as applications are going up. Because it's automated, we don't have the three to four week delay. The insertion of applications in the cloud for us dropped from an average of three to four weeks to a couple of days."
"ShieldX ensures that we can have the separation needed for our environment to avoid drastically increasing the cost on the licensing side. From this perspective, it's been very positive and helpful."
"ShieldX also enables us to migrate to cloud environments faster. That is an important part of it for sure because it takes the exact same policies that we would apply to our on-premise environment and enables us to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud."
"We are actually expecting our costs to drop in the coming year, but it is just a matter of the licensing expiring. That is going to happen in the next six months or so. Then, we will start to see a decrease in overall spend."
"For other security professions who are looking for something which is low in cost that does microsegmentation, they should look at ShieldX. It might not be the big name out there, but it does everything that you are looking for in microsegmentation at a very low price."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
881,665 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
15%
Marketing Services Firm
8%
Manufacturing Company
7%
Performing Arts
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise189
By reviewers
Company SizeCount
Small Business67
Midsize Enterprise40
Large Enterprise76
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Check Point CloudGuard Network Security?
The tool's most valuable feature is its management console.
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Although I do not know much about the pricing or setup costs, Check Point CloudGuard Network Security is very cost-ef...
What needs improvement with Check Point CloudGuard Network Security?
Check Point CloudGuard Network Security could be improved with faster policy propagation across large multi-cloud env...
Ask a question
Earn 20 points
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
APEIRO, ShieldX APEIRO
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Physicians Choice Laboratory Services, Helvetica Insurance
Iowa State University
Find out what your peers are saying about Check Point CloudGuard Network Security vs. ShieldX and other solutions. Updated: November 2024.
881,665 professionals have used our research since 2012.