


Check Point Quantum Force and Palo Alto Networks PA-Series are leading products in the next-generation firewall market. The Check Point Quantum Force appears to have an upper hand with its centralized management and modular security architecture, while Palo Alto Networks PA-Series is favored for its intuitive management console and superior threat intelligence capabilities.
Features: Check Point Quantum Force offers centralized management, advanced threat prevention, and robust IPS and IDS capabilities which provide versatile protection across applications and networks. In contrast, Palo Alto Networks PA-Series focuses on application-based policy enforcement and integrates with WildFire for superior threat intelligence and protocol anomaly detection. Its integration with other security tools ensures comprehensive protection.
Room for Improvement: Check Point Quantum Force could benefit from improved cloud support, simplified VPN configuration, and a more intuitive policy management interface. Pricing and licensing complexities are also areas for refinement. On the other hand, Palo Alto Networks PA-Series faces challenges with high cost and technical support. Streamlining the licensing model and enhancing AI capabilities could further improve this solution.
Ease of Deployment and Customer Service: Check Point Quantum Force provides flexible deployment options including on-premises, hybrid, and public cloud environments with varying customer support responsiveness. Palo Alto Networks PA-Series, known for its comprehensive support, focuses more on on-premises and public cloud solutions. The support quality can vary depending on the support tier and issue complexity, benefiting greatly from its robust partner networks.
Pricing and ROI: The pricing of Check Point Quantum Force is perceived as high, yet justified by its comprehensive features that reduce downtime and improve incident handling efficiency, leading to a strong ROI. Similarly, Palo Alto Networks PA-Series is considered expensive, but its high-performance capabilities and security effectiveness deliver substantial ROI by minimizing security incidents and optimizing operational efficiency.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
This is a time-saving measure because we don't need to deploy a cluster or a firewall each time; we just create a virtual system on the management server using the same appliance.
Incident response time has reduced significantly, and downtime due to network issues has been minimized, leading to an improved return on investment.
The fact that we've not had any breach toward the data center side is plenty enough.
The return on investment with this product is a hard question because security tends to be a cost center rather than a profit center.
Palo Alto Networks PA-Series will be more reliable and will save money, time, and multiple resources.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
The support team we engaged was knowledgeable and well-versed with the application.
We have escalated issues to Check Point technical support multiple times and have received timely and very good responses.
Even challenging issues like those with VPNs have been resolved efficiently with their help.
They're constantly following up after a case has been opened to ensure that it has been resolved properly.
Cisco TAC support comes within five to ten minutes on the call.
Initially, it took one or two hours to get a Palo Alto engineer, which is quite slow.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
If specified correctly, even the smaller boxes offer high session and bandwidth rates, making the solution highly scalable, even up to telco-level requirements.
It is easy to scale up by adding capacity through clustering or upgrading the license, and it effectively handles spikes in remote user connections or increased east-west traffic without noticeable bottlenecks.
Scalability must be carefully planned for, considering future growth and user base increases.
If you talk about virtual firewall, it is easy to autoscale.
The solution can handle more than ten thousand users in my organization.
There are no restrictions in scalability.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
While the solution is generally stable, there are complications, such as requiring SmartConsole for deployment and upgrades, which can be time-consuming.
I have worked with Check Point products for 15 years and haven't found any stability or performance issues.
The use of Check Point firewalls has helped improve our security posture without any downtime.
I am giving stability a rating of 10 out of 10 because since implementation, we have not observed any issues with Palo Alto Networks PA-Series related to version, vulnerabilities, or anything else.
If the data plane hangs or gets stuck, then we can troubleshoot using the management plane.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
It would be better for customers to get immediate replacements even with a standard subscription.
AI-driven features would be highly valuable—particularly those that enable bulk operations and efficient handling of large numbers of objects or object groups.
One thing that would help in improving Check Point Quantum Force (NGFW) is having more flexible dashboards that I can tailor without relying on templates.
Other products, like FortiGate, are perceived as more intuitive because they are easier to configure from the start.
You can buy cheaper products, but I believe in the value they're giving us.
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
For the next release of the Palo Alto Networks PA-Series firewall, I would like to see logs monitoring included.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
In comparison to Fortinet and other products, the pricing may be considered high.
licensing is very pricey
Compared to other solutions, the pricing of Check Point NGFW is high.
The firewall is expensive for every company, but the cost is worth it to ensure maximum security.
The price of Palo Alto Networks PA-Series is expensive.
Overall, the pricing is good, but if they included GlobalProtect, it would be more valuable.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
The firewall and VPN features are the most valuable in protecting our customers' networks.
The firewall's default behavior of blocking all traffic, including a cleanup rule that blocks everything from external to internal sources, is highly valuable for protecting our network.
The most valuable features in my experience include perimeter firewalling, cloud and mobile security, application control, URL filtering, DLP, threat prevention, intrusion protection, and safeguarding against malware, botnets, and zero-day attacks.
Since implementing it, we have noticed a lot less getting through that maybe other antivirus within firewalls had failed to catch.
Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have.
Palo Alto Networks PA-Series has multiple security features, including antivirus, IPS, and behavior-based analysis.
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiGate | 18.3% |
| Check Point Quantum Force (NGFW) | 3.1% |
| Palo Alto Networks PA-Series | 1.2% |
| Other | 77.4% |



| Company Size | Count |
|---|---|
| Small Business | 361 |
| Midsize Enterprise | 135 |
| Large Enterprise | 190 |
| Company Size | Count |
|---|---|
| Small Business | 161 |
| Midsize Enterprise | 95 |
| Large Enterprise | 198 |
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 5 |
| Large Enterprise | 16 |
Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.
Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.
What are Fortinet FortiGate's key features?Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.
Check Point Quantum Force NGFW provides centralized management with scalable security for network perimeters. As a reliable firewall, it ensures advanced threat prevention and offers seamless integration, making it suitable for various network environments.
Offering comprehensive security, Check Point Quantum Force NGFW helps control ingress and egress traffic, secures data center firewalls, and integrates seamlessly with cloud and on-premises setups. Users appreciate its application control, deep packet inspection, and identity awareness features for enhanced protection against cyber threats. Despite pricing issues and interface complexity, its IPsec VPN and robust logging provide valuable insights into network activities.
What are the key features of Check Point Quantum Force NGFW?Check Point Quantum Force NGFW is deployed across industries for securing network boundaries, supporting critical data center operations, and enabling secure VPN connections. In finance, it helps meet stringent compliance standards, while in healthcare, it's crucial for protecting sensitive patient data through robust security protocols.
Palo Alto Networks PA-Series is essential for firewall implementation, perimeter defense, securing infrastructure boundaries, web filtering, VPN, and threat prevention. Organizations deploy it for secure cloud connections, internet security, and managing network devices.
Companies trust Palo Alto Networks PA-Series to protect corporate networks from external threats, control traffic between networks, and meet regulatory compliance. Integrating well with applications, it offers centralized management and advanced security features such as IDS, IPS, and GlobalProtect. It ensures stable performance, application-based policy enforcement, and decryption of SSL traffic while providing efficient resource usage and comprehensive logging.
What are the key features?Palo Alto Networks PA-Series is implemented across industries like healthcare, finance, retail, and manufacturing. In healthcare, it ensures patient data protection and compliance with HIPAA. Financial institutions utilize it to secure transactions and meet regulatory standards. Retailers benefit from protecting customer information and securing online payments. Manufacturing companies deploy it to safeguard intellectual property and control plant floor operations.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.