Check Point Harmony SASE and FortiSASE compete in the SASE category. Check Point Harmony SASE has the upper hand due to its impressive integration of security features and cloud-native services that enhance usability, whereas FortiSASE benefits existing Fortinet infrastructure users with its cost-effectiveness and integration capabilities.
Features: Check Point Harmony SASE features Zero Trust Network Access, phishing site blocking, and zero-day sandboxing. It also supports cloud-native services like Citrix SD-WAN integration and centralized management. FortiSASE offers secure web access, deep packet inspection, and strong integration with Fortinet solutions, managing everything through one web interface.
Room for Improvement: Check Point Harmony SASE can improve third-party integrations, enhance management portals, and streamline initial configuration processes. FortiSASE would benefit from improving third-party integration support, offering better mobile device management, and refining its usability for a wider user base.
Ease of Deployment and Customer Service: Check Point Harmony SASE provides flexible deployment across hybrid, public, and private clouds, with positive user feedback on technical support efficiency. The deployment process is straightforward, but some customer service response times have been slow. FortiSASE is praised for professional deployment support services and easy integration into Fortinet environments, though it also has some criticism regarding support response times and comprehensiveness when handling non-standard issues.
Pricing and ROI: Check Point Harmony SASE is considered premium with a feature set justifying the cost, leading to significant savings and positive ROI through reduced security incidents. FortiSASE offers competitive pricing, particularly favorable for existing Fortinet users, and is cost-efficient with a good ROI, enhancing network efficiency and reducing operational costs.
Centralized security management allows our team to monitor users, manage policies, and investigate security events from one place.
With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures.
Deploying iboss leads to good return on investment, estimated around 70% to 80%.
Check Point Harmony SASE (formerly Perimeter 81) blocked access to those URLs at the network level before users could click through.
We are saving 40% of our time, which is good.
With FortiCASB, we manage to save around 50% on our budget compared to other products.
I have seen more time saved as a return on investment because the platform is very stable, and we haven't had any issues of troubleshooting and working through fixing issues.
The quality of the support is fantastic.
We had promising discussions about resolving these issues, but no real action followed.
They do not always reply promptly, but they do try and genuinely want to help us.
I would rate support 10 out of 10.
People working really hard, listening to every issue and request, and replying within hours.
I am totally satisfied with their response time and support quality.
If there is a solution in the market, the people supporting it should be technical enough to resolve issues at their first level or second level, or at least at the third level.
At a high level, they deliver the intended information, but I still need their representatives, particularly sales engineers, to provide detailed explanations, as the documentation may not cover every area that all audiences might be looking for.
They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
I would rate it a nine out of ten for scalability.
If I start seeing sluggishness or anything like that, I just reach out to my rep, and they connect with their dev team, typically resolving it the same day.
The cloud-native model ensures we are not tied to any specific location or hardware, which has been a great game changer in terms of agility.
I would rate it nine out of ten for scalability.
Check Point Harmony SASE's scalability is good; it can handle growth easily, allowing me to easily add another region and gateway to have more people join in.
FortiSASE is a very scalable solution because it licenses every user individually.
If the customer is within the Fortinet ecosystem, they are generally good for scalability.
FortiSASE's scalability is very good; you can add licenses as your user count grows.
It's been pretty solid; I've never had an outage with them, and if I ever had, it's only been once out of the seven years.
Our biggest problem with their service was it did not recognize the device despite our ClearPass sending information to the iboss box.
I give them full marks for presales and support during the pilot phase, as well as support when we actually went live.
There are some lags and glitches with connectivity, so I would rate the stability as between seven or eight out of ten.
After the last improvement, I can say it is much more stable now.
Check Point Harmony SASE is stable most of the time, but there are still some issues that are hard to troubleshoot.
They maintain high availability using numerous data centers globally.
FortiSASE is not stable yet and is in the learning stage.
iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard.
Better onboarding documents would make the first week easier for new users.
Enhanced policy management, providing smart alerts with root cause context, and improving support with better troubleshooting documents are crucial areas.
A local data center in Turkey would enhance the product, as currently, our Internet traffic goes to another country, which is problematic for us.
One area for improvement is integration with third-party identity providers.
The product is lacking features that other competitors have, making it quite challenging to migrate customers to this solution because it feels very much unfinished.
FortiSASE implementation is too complex where other products take two to three months or maximum four months to implement, FortiSASE took more than double that time.
If third-party vendors could be integrated and supported, enabling two-way communication, it would greatly enhance the solution compared to competitors such as Netskope and Zscaler.
While connectivity from outside to inside is okay, inside to outside is not.
The following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs.
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern.
during that time, the Blue Coat proxies we were using were costly, as Blue Coat was acquired by Symantec, and then Symantec was acquired by Broadcom, which increased costs.
Cost efficiency is a consideration, as SASE products are not the cheapest security products.
The cost is a bit expensive for most users.
It is a bit expensive.
FortiSASE is an expensive product and the cost is indeed high.
The pricing for FortiCASB is competitive and not expensive.
When combining everything for a full SASE solution, I notice the pricing becomes quite high.
It's given us a lot more visibility into our computer assets that may be infected with viruses and also shows us people who have unusually large uploads or might be engaging in high-risk activities, such as searches or going to sites not categorized by their web crawler.
iboss was the best solution for us because, no matter what domain you were in, everything is under a single pane of glass, which is exactly what we wanted.
Because of the points of presence, there is no downtime for us. I can move users to different points of presence, so I experience minimal to zero downtime.
The firewall management is the most valuable feature for me.
The Zero Trust Network Access (ZTNA) feature is a major highlight as it gives users seamless and secure access to internal resources without requiring a full-blown VPN, which improves both security and user experience.
The Zero Trust and segmentation have helped my team and our customers significantly because we are able to protect every scope and allow the work-from-home users to access internal resources while passing through a threat prevention gateway, ensuring that everything is safe.
The important aspects are twofold. One is authorization, and the second is access control.
FortiCASB is user-friendly and integrates well with other Forti-products, providing enhanced management capabilities.
In FortiSASE, these features are bundled, and since they are tightly integrated with the firewall, SD-WAN works without additional payment.
| Product | Mindshare (%) |
|---|---|
| FortiSASE | 5.0% |
| iboss | 3.2% |
| Check Point Harmony SASE (formerly Perimeter 81) | 5.1% |
| Other | 86.7% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 8 |
| Large Enterprise | 16 |
| Company Size | Count |
|---|---|
| Small Business | 53 |
| Midsize Enterprise | 19 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 3 |
| Large Enterprise | 7 |
iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.
Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.
The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.
What are the most important features of Iboss?
- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.
- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.
- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.
- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.
- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.
What benefits should users consider in reviews?
- Complete visibility over AI, data, and applications from one platform instead of separate point tools.
- Encrypted traffic is inspected by default so data decisions use content and context together.
- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.
- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.
- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.
Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.
Check Point Harmony SASE, formerly known as Perimeter 81, offers advanced security through Zero Trust Network Access and centralized management that supports seamless remote operations and hybrid infrastructures.
Check Point Harmony SASE provides organizations with a robust platform for securing remote operations and hybrid infrastructure. It integrates cloud and on-premise networks, featuring centralized management for efficient policy control and real-time threat monitoring. With integration capabilities like Citrix SD-WAN, remote branch implementations become straightforward. Network access is secured by advanced anti-phishing and URL filtering. A user-friendly interface combined with strong customer support enhances management while promoting productivity.
What are the key features of Check Point Harmony SASE?For industries managing remote operations, Check Point Harmony SASE is instrumental in securing connectivity across cloud and on-premise networks. By unifying access control, it allows employees worldwide to securely connect to corporate resources, be it from home, public locations, or through various Wi-Fi connections.
FortiSASE offers AI-based threat detection and centralized management, ensuring robust security through features like Secure Web Gateway and SD-WAN. It's appreciated for ease of deployment, scalability, and support for global workforces, with potential for cost-saving cloud management.
FortiSASE integrates tightly with the Fortinet ecosystem, providing comprehensive cybersecurity features such as a firewall-as-a-service and deep packet inspection. It facilitates Zero Trust Network Architecture, replacing traditional VPNs for secure remote access. The platform enhances IT management capabilities by supporting micro-segmentation and protecting endpoint devices. Despite excellence in these areas, FortiSASE faces challenges in application segmentation security, agent reliability, and data classification. Criticisms include underwhelming GUI design, licensing complexity, and mobile device support. Improvements in agent installation, cloud management, and automation are priorities for expanding efficacy.
What are FortiSASE's key features?Enterprises deploying FortiSASE in specific industries benefit from its ability to integrate cloud security, safeguard branch operations, and reduce latency to corporate data centers. Its robust features support industries needing secure connectivity for remote users and micro-segmentation to protect sensitive data and resources. Users find it helpful in managing access to corporate applications and reducing reliance on traditional VPNs, streamlining operational efficiencies and enhancing security postures.
We monitor all Secure Access Service Edge (SASE) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.