Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure comparison

Check Point Harmony SASE (formerly Perimeter 81) vs. Menlo Secure

Download the complete report

Helped 866,088 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Nasseer Qureshi

Pre Sales Consultant at Redington Group

Delivers seamless and secure remote access while enhancing security posture

Check Point Harmony SASE (formerly Perimeter 81) offers strong features, but there are areas that could be improved. One area for improvement is integration with third-party identity providers. It works with standard SAML and SSO, but we would prefer deeper integrations with solutions such as Ping for more advanced identity-based policies. Additionally, a mobile-specific client or lightweight agent would be helpful for securing access from smartphones, especially in BYOD environments. We would appreciate more granular reporting and analytics, including better drill-down capabilities to investigate specific users or app activity. The logs are comprehensive, but filtering them can sometimes feel messy. The user interface on the management portal could be more intuitive, especially when managing multiple sites or remote offices. Some of the policy configuration steps are nested and could be streamlined.

Read full review

Olivier DALOY

Group Information Systems Security Director - CISO at Faurecia

Secures users wherever they are and enable us to inspect SSL traffic, but we encountered too many issues

The solution should have no impact but it does have a bit of impact on end-users. For example, we encountered some issues in the downloads that took longer than they did without using Menlo. That is clearly not transparent for users. We expected not to have any latency when downloading anything from the internet with Menlo compared to without Menlo. We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution. In other words, we hope to get the same level of protection, while reducing the number of visible bugs, issues, latencies, impacts on performance, et cetera, that we have today with Menlo. We already solved most of them, but we still have too many such instances of issues with Menlo, even though it is protecting us for sure. The weak point of the solution is that it has consumed far too much of my team's time, taking them away from operations and projects and design. It took far too much time to implement it and get rid of all of the live issues that we encountered when our users started using the solution. The good point is that I'm sure it is protecting us and it's probably protecting us more than any other solution, which is something I appreciate a lot as a CISO. But on the other hand, the number of issues reported by the users, and the amount of time that has been necessary for either my team or the infrastructure team to spend diagnosing, troubleshooting, and fixing the issues that we had with the solution was too much. And that doesn't include the need to still use our previous solution, Blue Coat, that we have kept active so that whatever is not compatible or doesn't work with Menlo, can be handled by that other solution. It is far too demanding in terms of effort and workload and even cost, at the end of the day. That is why we decided to transition to another solution. If we had known in the beginning that we would not be able to get rid of Blue Coat, we probably would not have chosen Menlo because we were planning to replace Blue Coat with something that was at least able to do the same and more. We discovered that it was able to do more but it was not able to replace it, which is an issue. It is not only a matter of cost but is also a matter of not being able to reduce the number of partners that you have to deal with. In addition, they could enhance the ability to troubleshoot. Whenever a connection going through Menlo fails for any reason, being able to troubleshoot what the configuration of Menlo should be to allow it through would help, as would knowing what level of additional risk we would be taking with that configuration.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is the policy routing and application control."

"Their web interface to manage it is excellent, even compared with other providers."

"The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes."

"The firewall is pretty good if you understand how to use it. It performs at a very high level, and we are loving it."

"Customers want to load balance more than eight lines or six internet lines. FortiGate is the only solution that can accomplish this."

"The best feature of Fortinet FortiGate is SD-WAN."

"Fortinet FortiGate is pretty robust. The updates and firmware releases are pretty timely. They have a good product revision and review system, so they are constantly reviewing their configuration and the different mechanisms that are used on Fortinet FortiGate."

"Fortinet FortiGate has positively impacted our organization by allowing us to scale fast."

More Fortinet FortiGate pros

"The integration that this solution has with the different routers or perimeter equipment is exceptional."

"Their split tunneling feature has been very valuable to our company since implementing the Perimeter 81 solution."

"Customer service is excellent."

"HTTPS decryption is a valuable service and not always found in cloud-based secure web gateways."

"Its software solution also ensures connectivity and protects against NSF filtering."

"What I like about Harmony Connect is that every packet through the network is screened and filtered so that only clean packets can enter the PC. This is useful for a variety of security reasons because you no longer need to worry about things like DDoS attacks."

"Check Point Harmony SASE (formerly Perimeter 81) has positively impacted my organization by securing our systems."

"Check Point provides high-quality technical support. The support was pretty quick."

More Check Point Harmony SASE (formerly Perimeter 81) pros

"This security technology addresses risk and enables people to conduct business without that risk, which is where the ROI is realized."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"Accessing the internet with a proxy from anywhere is the most valuable feature. It ensures that users are only able to browse legitimate websites. If they happen to go to a legitimate website with a malicious payload, the isolation feature will take care of that."

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

Cons

"The user interface of the Fortinet FortiGate management console could be more intuitive and user-friendly, and the log analysis and reporting features could be enhanced to provide more flexibility and customizable insights."

"They could simplify their deployment process, especially when customers have existing devices."

"The stability could be a bit better."

"I believe one area that could be improved in Fortinet FortiGate is posturing, specifically for remote VPN users, as there are OS-based limitations I encountered with only Windows; adding domain restrictions for VPN access would make it more competitive and useful."

"This product could be improved with Active directory integration and better handling in IPsec and GRE Tunnels."

"The renewal price and the availability could be improved."

"We would like to see a better training platform implemented."

"To improve Fortinet FortiGate, I think they need to improve the software and make updates more quickly, rather than taking a long time to update the software or firmware."

More Fortinet FortiGate cons

"An improvement could be made in terms of achieving better coverage in such complicated regions as the Asia Pacific, China, and Russia."

"In the future, maybe P81 can improve the network traffic balancing and redundancy."

"I would suggest adding more networking and security features that allow more customization within their platform."

"The user interface on the management portal could be more intuitive, especially when managing multiple sites or remote offices."

"One of our challenges is ensuring the security of our cloud-based operations."

"What would be useful would be a notification/warning that a session is due to timeout after exceeding the default connection limit."

"When it comes to Check Point Quantum SASE, though the OEM provides security, it is not 100 percent full-fledged to meet the requirements from the customers' end."

"If Harmony SASE supported bidirectional traffic and the UDP protocol, it would be better."

More Check Point Harmony SASE (formerly Perimeter 81) cons

"Currently, I don't have a good way to see which of my rules are being used in the access control lists. I have numerous entries, but are they all still needed? A report that would show me my list of who is allowed and whether we're actually using it would be useful because I can then go clean up my list. It would be easier to manage. We would eliminate the vulnerability of unused services."

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"The user monitoring could still be improved."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

Pricing and Cost Advice

"The price is really low. It's cheap in comparison to the cost of Cisco or CheckPoint, for example."

"In terms of the market, it's not a cheap product, but it's cost-effective."

"Pricing for this product is comparatively lower than other products. It's an affordable solution, but when expanding the number of users, they'll ask you to replace the model, so that's an added cost."

"Price-wise, it's at a good price point for our market."

"This is not a cheap solution but it isn't expensive, either. It's a good solution for the right price."

"Our licensing costs are on a yearly basis."

"It has a competitive price."

"Its price is reasonable. They have a clear pricing policy. It is not complicated by the number of VPN users at a time. We know what the price is. The yearly subscription for the security license is rather high, but it is all included for whatever number of users you have and the kind of functions you need."

More Fortinet FortiGate pricing and cost advice

"Annual licenses cost $30 to $40 each."

"The product is neither cheap nor expensive."

"The solution's pricing model may not be suitable for smaller companies, as they might find it expensive. Larger companies tend to receive more value due to many users."

"I consider the product to be a medium-priced solution. There are no additional costs attached to the tool."

"Regarding pricing, I can say that the more the number of users, the less they have to pay."

"The pricing of Check Point is relatively high when compared to other competitors like Palo Alto and Fortinet. While Palo Alto may be on the higher side in terms of cost, Check Point's pricing is similar to that of Fortinet. In some cases, Check Point offers better value for the features it provides. We initially considered other options but ultimately decided to purchase hardware that came with three years of iOS. This approach eliminated the need for any additional costs associated with Check Point. I would rate it 10 out of 10."

"The pricing is good, especially when you compare it to other firewall or UTM solutions from FortiGate or SonicWall, where you would have to invest about four hundred thousand rupees for 100 users over a three-year period."

"The cost of the solution's licenses depends on the particular use cases."

More Check Point Harmony SASE (formerly Perimeter 81) pricing and cost advice

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

See which vendors are best for you

Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.

See recommendations

866,088 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

15%

Financial Services Firm

Manufacturing Company

Comms Service Provider

Computer Software Company

18%

Financial Services Firm

11%

Manufacturing Company

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	263
Midsize Enterprise	101
Large Enterprise	144

By reviewers
Company Size	Count
Small Business	52
Midsize Enterprise	18
Large Enterprise	15

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What do you like most about Perimeter 81?

Even after restarting, it tries to quickly reestablish connection which is very helpful.

What is your experience regarding pricing and costs for Perimeter 81?

It's essential to consider the organization's specific requirements and budget. Here are some general recommendations...

What needs improvement with Perimeter 81?

In terms of improvement, Perimeter 81 could enhance its reporting and analytics capabilities to provide more detailed...

Sophos XG vs Fortinet FortiGate

Ask a question

Earn 20 points

Comparisons

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 12% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 11% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Zscaler Zero Trust Exchange Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 10% of the time

Prisma Access by Palo Alto Networks vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 9% of the time

Netskope vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 8% of the time

Cisco Umbrella vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 7% of the time

Cato SASE Cloud Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 6% of the time

More Check Point Harmony SASE (formerly Perimeter 81) Competitors

Prisma Access by Palo Alto Networks vs Menlo Secure

Compared 18% of the time

Cisco Umbrella vs Menlo Secure

Compared 17% of the time

Prisma Access Browser vs Menlo Secure

Compared 13% of the time

Symantec Endpoint Security vs Menlo Secure

Compared 10% of the time

Cloudflare One vs Menlo Secure

Compared 9% of the time

More Menlo Secure Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Check Point Harmony SASE (formerly Perimeter 81)

Download Check Point Harmony SASE (formerly Perimeter 81) product report

Check Point Harmony SASE (formerly Perimeter 81) report

Menlo Secure

Download Menlo Secure product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Check Point Quantum SASE

Menlo Security Web Security, Menlo Web Security

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Check Point Harmony SASE, formerly Perimeter 81, offers robust security features like split tunneling, MFA, and Zero Trust Network Access focused on secure remote access and optimized connectivity for remote teams.

Check Point Harmony SASE delivers advanced security through a user-friendly interface, efficient VPN connections, and a centralized management console. It enhances security with real-time threat intelligence from ThreatCloud and traffic management via built-in optimization. Firewall as a Service and Secure Web Gateway safeguard against unauthorized access and phishing. While users seek enhanced networking customizations and better integration with identity providers, there's an emphasis on improving reporting, real-time analytics, and policy management. Requests also include a Chrome extension, traffic balancing, and simplified configuration to address some resource-intensive aspects.

What are the key features of Check Point Harmony SASE?

Split Tunneling: Manages internet traffic more efficiently by routing only necessary data through the VPN.
MFA: Provides an additional layer of security through multi-factor authentication.
Zero Trust Network Access: Ensures secure connections by validating every user and device.
ThreatCloud: Enhances protection with real-time threat intelligence.
Firewall as a Service: Protects against unauthorized access and threats.
Secure Web Gateway: Prevents phishing attacks and unauthorized internet access.

How can organizations benefit from using Check Point Harmony SASE?

Improved Security: Real-time threat intelligence and robust authentication minimize risks.
Centralized Management: Simplifies control over network security and policies.
Optimized Connectivity: Efficient traffic routing enhances user experience.
Flexible Integration: Seamlessly integrates with existing IT infrastructure, enhancing strategic security deployment.

Check Point Harmony SASE is used across industries for secure remote access and connectivity, protecting sensitive data, and managing access to corporate resources. It is ideal for those with hybrid cloud models and requires comprehensive security measures combined with existing IT infrastructures to meet specific industry demands.

Check Point Software Technologies

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith

Information Not Available

Check Point Harmony SASE (formerly Perimeter 81) vs. Menlo Secure