

Palo Alto Networks Advanced Threat Prevention and Check Point IPS compete in the cybersecurity space focusing on threat prevention. Palo Alto Networks appears to have the upper hand with its advanced threat detection features and firewall integration.
Features: Palo Alto Networks offers next-generation firewall capabilities, advanced anti-malware protection, and its WildFire feature for sandboxing. Check Point IPS provides detailed protections exceeding 11,000 profiles, real-time threat updates, and robust ransomware protection.
Room for Improvement: Palo Alto Networks could improve email filtering, reduce false positives, and simplify setup. Users also mentioned resource consumption as an issue. Check Point IPS users noted performance impacts due to high CPU usage when features are enabled, and requested more intuitive documentation and better support.
Ease of Deployment and Customer Service: Both Palo Alto Networks and Check Point IPS offer deployment in on-premises, hybrid, and cloud environments for flexibility. Palo Alto Networks has mixed feedback on support with some reliance on third-party assistance, while Check Point generally has positive support feedback though premium services vary by region.
Pricing and ROI: Palo Alto Networks is often seen as expensive, especially for smaller organizations, but offers good scalability and ROI in larger setups. Check Point IPS also comes with high costs, with potential savings through bundled licenses. Users suggest thorough cost-benefit analysis to maximize investment returns.
I have seen a return on investment as it results in money saved and time saved because the security tool is very complete and modern.
I have seen a return on investment more in the risk saved since it catches a lot of stuff security-wise that is good to catch.
I have seen a return on investment since using Check Point IPS, as evidenced by fewer incidents.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
Our technical teams have personal relationships with our account executives and direct support people.
The customer support for Check Point IPS is excellent.
I have had an excellent experience with Check Point IPS's customer team, as their technical knowledge and troubleshooting skills are excellent.
I rate technical support from Palo Alto as eight out of ten.
I have proof of this rating - when I escalate a case, I receive a reply from TAC support after two days.
Overall, I find the technical support from Palo Alto Networks quite good, although getting a hold of the TAC can be challenging and sometimes requires long phone calls.
We have moved to a hyper-scale master environment, allowing us to scale by adding additional gateways to the clusters.
The scalability of Check Point IPS is on point.
The scalability of Check Point IPS is great because when I deploy gateways in the cloud, I create a cluster, which offers a very scalable option.
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
Check Point IPS provides a very stable and reliable environment.
Check Point IPS is very stable.
Check Point IPS is very stable with no problems regarding this solution.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
Automated attack path correlation in SmartEvent to improve situational awareness.
At least 60% of all the alarms generated by the IPS are false positives or something that's not important to look at, and this generates a significant workload for my team.
More granular policy customization for Check Point IPS would allow protection to be tailored more precisely to specific applications or services, which would reduce unnecessary overhead and improve accuracy.
Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations.
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
Comparisons with Fortinet show that Check Point IPS is relatively more expensive, but we found it cheaper to retain it rather than switch.
My experience with pricing, setup cost, and licensing for Check Point IPS is good; it's baked into the firewall licensing, so that's very good.
My experience with pricing, setup cost, and licensing for Check Point IPS is great, and I have no problem with the price.
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
The integration with Check Point ThreatCloud ensures the IPS engine is updated with the latest attack signatures.
The solution employs behavioral heuristic analysis to block zero-day attacks using AI-powered engines.
Whenever any zero-day attack is detected, it downloads that signature into the firewall and prevents that threat.
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
We are satisfied with the analytic capabilities of Palo Alto Networks Advanced Threat Prevention, especially the reporting features available in the Palo Alto portal in terms of their application visibility interface, which is very good for us to get visibility on all critical applications and the associated users, as well as the risks associated with every category of traffic.
| Product | Mindshare (%) |
|---|---|
| Check Point IPS | 3.4% |
| Palo Alto Networks Advanced Threat Prevention | 4.8% |
| Other | 91.8% |

| Company Size | Count |
|---|---|
| Small Business | 50 |
| Midsize Enterprise | 22 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 4 |
| Large Enterprise | 14 |
Check Point IPS provides robust real-time threat prevention by blocking threats before they can harm critical systems, integrating seamlessly with ThreatCloud for enhanced security management and efficiency while minimizing false positives.
Check Point IPS enhances network security through AI-powered behavioral analysis, centralized management, and customizable policies. It ensures strong protection against known and unknown threats, including zero-day attacks, and its integration with ThreatCloud allows for automatic updates, minimizing manual interventions. However, improvements in documentation, support responsiveness, and a more intuitive interface could enhance user experience. Pricing flexibility for cloud environments and quicker signature updates are needed along with better support for high traffic and enhanced visual analytics.
What Are the Key Features of Check Point IPS?Check Point IPS is widely deployed to protect networks from unauthorized access and security threats, ensuring communication channel integrity and preventing exploits. Used across sectors, it aids in compliance with security policies, supporting enterprises in maintaining secure operations.
Palo Alto Networks Advanced Threat Prevention provides comprehensive security with application control, real-time threat detection, and seamless integration with cloud services. Known for its high performance and ease of use, it addresses diverse security challenges for modern organizations.
Palo Alto Networks Advanced Threat Prevention integrates machine learning, behavioral analysis, anti-malware protection, and WildFire sandboxing to deliver proactive defense against threats. Its features include advanced firewall capabilities, comprehensive bandwidth management, and robust reporting. Integration with cloud-based URL filtering enhances organizational security efforts. While the tool offers significant protection, areas like pricing, ease of use, false positive management, and documentation clarity require improvement. Expanding AI capabilities and optimizing support will enhance threat prevention and user experience.
What are the most important features?Palo Alto Networks Advanced Threat Prevention is implemented across industries for server protection and LAN/WAN traffic security, providing solutions for network testing and application control. Organizations benefit from features like GlobalProtect VPN, anti-spyware, and vulnerability protections, ensuring security through efficient deployment both on-premises and in the cloud.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.