No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Quantum Force (NGFW) vs WatchGuard XTM [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 23, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Check Point Quantum Force (...
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
347
Ranking in other categories
Firewalls (7th), Unified Threat Management (UTM) (2nd)
WatchGuard XTM [EOL]
Average Rating
8.0
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Mageshwaran S - PeerSpot reviewer
Solution Architect at airtel
Enables customers to manage security effortlessly with intuitive features and easy integration
In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.
DS
Network Security Engineer at Connecting Cyber Networks
Advanced threat prevention has protected our perimeter and simplifies daily security operations
Check Point Quantum Force (NGFW) can be improved in several areas. First, the interface could be a little more intuitive for new users. The Smart Console is powerful, but it has a steep learning curve when you start using it. Some simple functions for common tasks would help. Second, the initial setup and configuration take quite a bit of time and expertise. It would be helpful if there were more guides, wizards, or templates to speed that up. Third, the price model could be more transparent and flexible. The license cost can add up quickly, specifically when you want to add more advanced features. Finally, I would appreciate seeing better integration with some third-party security tools we use. Right now, we have to do a lot of manual work to make everything talk to each other. Overall, these are minor things. The core product is really solid and does what it is supposed to do very well. The documentation could be more comprehensive in some areas. When we run into issues, the documentation does not have clear answers, so we end up contacting support. Speaking of support, the response time could be faster sometimes. We have had cases where we need help with a certain security issue, and it takes longer than we would prefer to get a response. As for features, it would be nice to have more general reporting options so we can customize reports for different teams and stakeholders without having to do manual work afterward. One more thing, better mobile access to the dashboard would be helpful. Sometimes we need to check on security alerts when we are away from the office, and the mobile experience is not as smooth as it could be. Again, these are improvements that would make it even better, not issues with the core product itself.
Generalm4545 - PeerSpot reviewer
General Manager- IT & Automation - Serum at a pharma/biotech company with 1,001-5,000 employees
Protects from attack software and hacking but it doesn't provide the reports in a readable format
In my opinion, image clarity is very important, because I don't get the proper image product on reports. This means that functionality is not there. My engineer does not know how he can replace an order. We attach a log after any kind of keys using a utility instead. For the internet policies that we are implementing, the policy should be based on proper protocols. We use the default policies and there are a number of third-party protocols that appear here. Management with WatchGuard XTM means that out of policy is the problem from our side. In this way, we can not do effective services for people with this one. The policy definition with WatchGuard XTM is not proper for all use case requirements. I've got weekly business reports that I am expecting attachments with from WatchGuard XTM that display data for all kinds of consideration which should be required. Main User Functionality Level Order must adhere to using the admin functionality on the registry, or else our users publish their own name. Maybe these recommendations are irrelevant, but I say that the issue to improve most with WatchGuard XTM is the Main User Function.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We use a lot of function on the IPS and it works well for us."
"The solution is stable and reliable."
"Security, SD-WAN, and Streetscape are valuable features."
"The virtual firewall feature is the most valuable. We have around 1,500 firewalls. We did not buy individual hardware, and the virtual firewalls made sense because we don't have to keep on buying the hardware. FortiGate is easier to use as compared to Checkpoint devices. It is user friendly and has a good UI. You don't need much expertise to work on this firewall. You don't need to worry much about DCLA, commands, and things like that."
"We find the solution to be quite stable; it's very reliable, we don't have to worry about bugs or glitches on the system, and it doesn't crash or freeze."
"Has a very user-friendly interface and doesn't require any prior knowledge."
"The solution is scalable."
"It has a good UI and overall integration, including FortiGate Manager for controlling all firewalls from a single place."
"By far, it's the best security solution one can adopt for their organization."
"The scalability is very good."
"The edge security posture has greatly improved as we are now able to detect and prevent threats coming from the public internet and the firewall is able to block known threats using the inbuilt Intrusion Prevention blades."
"The stability of the solution has been excellent so far; there are no bugs or glitches and it doesn't crash or freeze, so it's reliable."
"Check Point's rule management helped us simplify access control. At one point, we had more than 1,000 access control policies, and it was challenging to manage them all. We cut it down to 300 policies using Check Point's management features, and we are still working on reducing this further to achieve the best way to manage policies. Its logging and monitoring enable us to trace and investigate suspicious traffic."
"Check Point NGFW has positively impacted my organization by improving security and reducing incidents."
"Check Point Next Generation Firewalls are key components in protecting our assets and information."
"One of the benefits that we have realized from using this product is that the user interface makes it easier to operate, compared to using the CLI."
"It's a solid firewall option with new and useful features typically being added with each new firmware release."
"WatchGuard XTM is fairly basic. We use it as the perimeter firewall. The main point is to protect from attack software and hacking."
"Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process."
"The multi-WAN feature allows us to configure multiple external interfaces."
"A WatchGuard creates new ways to secure your network."
"The product is easy to use and is the fastest way to learn about firewalls."
"Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular."
"We now have the capability to manage traffic better by putting non-business critical traffic into the small bucket, while business critical traffic gets higher priority."
 

Cons

"Fortinet's support team consists of a huge networking team, because of which there is a delay in response at times."
"One of the features that I would like to have is endpoint protection, this should be integrated."
"We have experienced a number of failures when trying to upgrade firmware and the process takes a long time. We only experienced this when doing major upgrades between versions."
"I would like to see improvements made to the dashboard and UI, as well as to the reporting."
"I would like the deployment and integration of this product to be easier. We should be able to deploy the features more easily and have different types of access. It should be easier to integrate. Currently, we need to develop APIs to use this interface."
"After four years it has started to fail. The firewall engine is not so strong as of now, in my opinion."
"In terms of pricing, the solution is a bit expensive, but I think it was a better option than Checkpoint, which is why I replaced it."
"The room for improvement is about the global delivery time period. Usually I need to wait for almost one month to deliver it overseas. So if you can shorten the deliver time it'd be great."
"If you want to make a rule for a specific connection, like assigning some users to one ISP and other users to another ISP, you have to use another device, like a third-party firewall intervention."
"Currently, upgrades are quite cumbersome."
"The pricing is quite high as compared to other industry firewalls (such as Cisco or Fortinet)."
"There is no email security."
"To enhance the user experience, Check Point should consider adopting an incremental upgrade approach, similar to competitors like Palo Alto or Fortinet, as it would help minimize downtime and streamline the upgrade process, making it more efficient and user-friendly."
"It took so many weeks to migrate our old firewall to Check Point after we did internal and external assessments on earlier setups and enabled multiple security features."
"It depends whether the problem is known to Check Point. If they are aware there is a problem, quite often it will then depend on which tech you finally land on if it's easier or harder to get to the root cause. The last issue was in India so that was pretty bad. It's easier if you get directly through to Tel Aviv or Ottawa, but you can't choose. Once they know what the issue is, it's pretty good. It pretty much depends on the engineer that you get. There are pretty good engineers and there are many engineers who are at just the starter level at Check Point who are not really into the stuff. Sometimes it's hard, sometimes it's easy, depending on the problem and the tech engineer you get."
"One feature that could be improved is the internet object in the application control/URL filtering blade."
"While the wireless capability is great for roaming and seamless hand-off, there have been intermittent issues with connection dropping on Apple devices."
"I’m not in favor having to setup security proxy settings instead of just turning them on like you do with the SonicWALL enhanced OS."
"Tech support is sometimes a little bit slow."
"Using the SSL VPN remote feature is great, but we additionally needed two-factor authentication, and employed a third-party product."
"VPN tunnel lost packet."
"Sometimes we have had issues with the stability of the product."
"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."
"The technical support is very bad. The price is very high, the response time is very long, and technical support does not provide a general solution."
 

Pricing and Cost Advice

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."
"It is very cost-effective. You get features similar to other firewalls, such as Palo Alto, but at a lower price."
"The price is really low. It's cheap in comparison to the cost of Cisco or CheckPoint, for example."
"Fortinet FortiGate is cost-efficient. Palo Alto is expensive, but Fortinet FortiGate is not."
"The price is okay."
"The price of Fortinet FortiGate is reasonable for an SME."
"Go for long term pricing negotiated at the time of purchase."
"There is an annual license to use this solution. The prices have been increasing over the years."
"It falls in a moderate price range, not as inexpensive as some alternatives but not as costly as Palo Alto."
"It is not a cheap solution, which is why we are looking for another one."
"I don't think the product's pricing is a good value. I feel it's very overpriced. I feel a lot of the features for a next gen firewall are there. But I feel it's overpriced, because of the stability issues. As far as support goes, I really can't speak to direct Check Point support, but the third-party was pretty terrible... As far as the licensing goes, it's pretty complex. If anybody was to purchase the Check Point product, definitely make sure they have an account rep come on site, and explain it line by line, what each thing is. It's not straightforward. It's very convoluted. There's no way you could just figure it out by looking at it."
"The price is on the higher side."
"It may be considered relatively expensive, but the investment is justified when compared to other competitors."
"The price of Check Point is lower than Palo Alto but higher than Cisco ASA."
"Before you buy, check which features you need, and if possible, I recommend signing up for at least a three-year license."
"The pricing and licensing are expensive. If you compare it with Fortinet, then it is cheaper on a yearly basis. However, Check Point is the most expensive firewall right now in terms of licenses and its appliance. My recommendation is if you want a long-term investment, then you should use an open server. If you use an open server, then the latency is really low. If you pay for a full appliance, it's more expensive."
"Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative.​"
"It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use."
"Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network."
"The licensing and renewal is very expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
7%
Outsourcing Company
13%
Financial Services Firm
11%
Computer Software Company
10%
Construction Company
9%
Construction Company
15%
Financial Services Firm
12%
Marketing Services Firm
12%
Performing Arts
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business370
Midsize Enterprise138
Large Enterprise195
By reviewers
Company SizeCount
Small Business163
Midsize Enterprise94
Large Enterprise199
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise7
Large Enterprise3
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
How does Check Point NGFW compare with Fortinet Fortigate?
I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such). -Ch...
Which would you recommend - Azure Firewall or Check Point NGFW?
Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall ...
What is your experience regarding pricing and costs for Check Point NGFW?
Our experience with pricing for Check Point Quantum Force (NGFW) has been mixed. The initial setup costs were fairly ...
Ask a question
Earn 20 points
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Check Point NG Firewall, Check Point Next Generation Firewall
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Control Southern, Optimal Media
AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense
Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: May 2026.
900,747 professionals have used our research since 2012.