Check Point Quantum Force vs Cisco Secure Firewall comparison

Check Point Quantum Force vs. Cisco Secure Firewall

Download the complete report

Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Has strengthened perimeter security through AI-driven protection and unified management

Abnet Tsegaye Belay

Cybersecurity Engineer at a tech services company with 11-50 employees

I have noticed some limitations with Check Point Quantum Force. There is a limitation in integrating with existing infrastructure, such as orchestration and logging, specifically with VPNs. VPNs are hard and sophisticated to deploy on this firewall. However, it is improving currently. Some performance aspects need higher resources. If you do not give it higher resources, it will slow down your network. It is a trade-off - if you have higher resources, you will have good performance. The complexity of configuring a VPN needs to be improved because we need to go back and forth to configure VPNs. It has to be simpler to understand.

Unified policies streamline network management but complex licensing requires attention

Phil Shiflett

Senior Manager, Network Engineering at TTi Power Equipment

Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.

More Fortinet FortiGate pros

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"FortiGate has a very strong unified threat management system."

"I would rate the scalability of this product a nine out of ten because it is highly scalable. We have not had problems with customers in terms of scalability."

"The strengths of Fortinet FortiGate include network security, VPN, site-to-site tunnels, client VPN solutions, two-factor authentication for VPN clients, and SD-WAN for branch level. We have implemented these solutions for various customers."

"The customization potential is quite impressive."

"It is a very user-friendly solution. Moreover, Foritgate offers good performance."

"The user interface is relatively easy. The devices are easy to deploy and figure out when you have experience with other security appliances."

"FortiGate also makes GRE tunneling possible."

"Fortinet FortiGate is good for helping you secure and protect mission-critical data."

"The outcomes from Check Point Quantum Force firewall gave us the ability to be fit and secure from the cyber world."

"The most valuable features I find in Check Point Quantum Force are the security policy features, including all security features that are provided by firewall, IPS/IDS."

"In performance and threat prevention, it has benefited my cybersecurity strategy."

"The security features and layered security features are better compared to others."

"For our very specific use case, for remote access for VPN, ASAs are very good."

"The most valuable feature of this solution is its ability to integrate vertically."

"The stability is good. Very simple. Upgrades are great."

"It's a flexible solution."

"I enjoy the interface of Cisco products, especially the CLI version."

"The experience of deployment with Cisco Secure Firewall is very easy."

"I like the ASDM for the firewall because it is visual. With the command line, it is harder to visualize what is going on. A picture is worth a thousand words."

"The most valuable feature is the access control list (ACL)."

More Cisco Secure Firewall pros

Cons

"When considering the policy of the vendors, they do not offer much of a discount policy, making the licensing model an area that needs improvement."

"The cloud features can be improved."

"The configuration part was challenging, especially converting configurations from another OEM to FortiGate."

"The user interface needs a bit of upgrading."

"There can be more security in hybrid implementations. When a customer has a hybrid environment where some parts are in the cloud, we need a consistent security solution for such scenarios."

"I would suggest that Fortinet add sandboxing to their solution."

"We faced some technical issues on the Fortinet side."

"FortGate's IPS reporting could be made better by giving more details regarding the source and destination of network traffic when it comes to the overview section. This would allow me to more easily follow the flow of traffic based on IP addresses, without having to integrate the IPS with other products that perform more sophisticated traffic analysis."

More Fortinet FortiGate cons

"The complexity of configuring a VPN needs to be improved because we need to go back and forth to configure VPNs."

"Check Point Quantum Force does not have strong local support. We are based in India, and Check Point Quantum Force does not have extensive local support in our region."

"I see good competition which is less expensive."

"I have observed weaknesses in Check Point Quantum Force, particularly when configuring tunnels from any point product to a peer, which has very complex configuration requirements."

"I think the ASA layer is thin. It's always Layer 3 or Layer 4 source controller and doesn't control the Layer 7 traffic. It's important, and you'll need an additional firewall."

"ASDM can be improved."

"The GUI is useless for me and frustrates me to a very high degree, which led me to switch to the CLI for configuration."

"While this applies to all vendors, pricing can be always lower. In my opinion, Cisco is the most expensive. The pricing can be reduced."

"The Cisco Secure Firewall could benefit from enhancements in its API, documentation, and automation tools."

"Even on a smaller scale, people are finding you need HA pairs, and there's no way that the ASA can do that, at least in the virtual version."

"The software was very buggy, to the point it had to be removed."

"We are Cisco partners, and when we recommend Cisco FirePower to customers, they always think that FirePower is bad. For a single installation of FirePower, if I have to write about 18 tickets to Cisco, it's a big problem. There was an issue was related to Azure. We had Active Directory in Azure. The clients had to connect to FirePower through Azure. We had a lot of group policies. After two group policies, we had to make groups in Azure, and they had to sign in and sign back. It was a triple-layer authentication, and there was a big problem, so we didn't use it."

More Cisco Secure Firewall cons

Pricing and Cost Advice

"It's expensive, but compared to the competition it's okay."

"The pricing or licensing of Fortinet FortiGate is quite effective as it offers different bundles that aggregate most required features, while also allowing clients the option to select specific components alone."

"The product is expensive."

"Its licenses cost the same for different subscription plans."

"The solution is offered as an annual license."

"Other firewalls are more expensive than Fortinet FortiGate, such as the Azure firewall."

"In terms of the market, it's not a cheap product, but it's cost-effective."

"I think price-wise, the solution is totally reasonable since it has many products to serve, starting from small homes to massive scale sites."

More Fortinet FortiGate pricing and cost advice

Information not available

"Cisco recently has become very expensive."

"Be sure of what features you are going to utilize to add/remove some from new bundles."

"Its price is moderate. It is not too expensive."

"With the bundling mode with Duo licensing, it's now better. It's better to have one simplified global licensing mode, and this is what Cisco has done with bundling. The next-generation firewalls include a set of features such as filtering, emails, and IPS. This combination offers the best way for customers to manage their operating expenses."

"Although I am not directly involved in dealing with the pricing aspect of the Cisco Secure Firewall, I know that the licensing has improved over the years."

"We used Check Point and the two are comparable. Cost was really what put us onto the ASAs... the price tag for Check Point was exorbitantly more than what it is for the ASA solution."

"The cost is a big factor for us. This is why we are using it only in our restricted area. They are very much higher than their competitors in the market."

"Everything with Cisco is expensive. My advice is that there are a lot better options out in the market now."

More Cisco Secure Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

884,873 professionals have used our research since 2012.

Comparison Review

it_user206346

Security Consultant at Webernetz.net - Network Security Consulting

Mar 11, 2015

Cisco ASA vs. Palo Alto Networks

Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

Top Industries

By visitors reading reviews

Computer Software Company

11%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

No data available

Computer Software Company

12%

Manufacturing Company

Comms Service Provider

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	360
Midsize Enterprise	135
Large Enterprise	190

No data available

By reviewers
Company Size	Count
Small Business	186
Midsize Enterprise	129
Large Enterprise	231

Questions from the Community

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is your experience regarding pricing and costs for Check Point Quantum Force?

In terms of pricing, setup cost, and licensing, many users and clients say that the pricing is high. The license stru...

What needs improvement with Check Point Quantum Force?

I would assess Check Point Quantum Force's real-time threat intelligence in guarding against ransomware as not effect...

What is your primary use case for Check Point Quantum Force?

I am dealing mostly with firewalls and I am working with Check Point Quantum Force. I have utilized the capability to...

Which is better - Fortinet FortiGate or Cisco ASA Firewall?

One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...

How does Cisco's ASA firewall compare with the Firepower NGFW?

It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...

Which is better - Meraki MX or Cisco ASA Firewall?

Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 19% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 4% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 4% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks NG Firewalls vs Check Point Quantum Force

Compared 23% of the time

Zscaler Cloud Firewall vs Check Point Quantum Force

Compared 23% of the time

Palo Alto Networks PA-Series vs Check Point Quantum Force

Compared 16% of the time

Fortinet FortiGate-VM vs Check Point Quantum Force

Compared 8% of the time

Palo Alto Networks VM-Series vs Check Point Quantum Force

Compared 5% of the time

More Check Point Quantum Force Competitors

Palo Alto Networks NG Firewalls vs Cisco Secure Firewall

Compared 11% of the time

Palo Alto Networks WildFire vs Cisco Secure Firewall

Compared 10% of the time

Check Point Quantum Force (NGFW) vs Cisco Secure Firewall

Compared 5% of the time

Netgate pfSense vs Cisco Secure Firewall

Compared 3% of the time

OPNsense vs Cisco Secure Firewall

Compared 2% of the time

More Cisco Secure Firewall Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Firewalls

Download Check Point Quantum Force product report

Cisco Secure Firewall

Download Cisco Secure Firewall product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall, Cisco Secure Firewall ASA Virtual - BYOL

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Check Point Quantum Force is an advanced cybersecurity platform providing robust protection for enterprise environments. Designed for flexibility and scalability, it effectively safeguards sensitive data and ensures secure network operations.

As a next-generation cybersecurity platform, Check Point Quantum Force integrates multiple security layers to address emerging threats. It offers powerful threat prevention tools, adaptive security policies, and real-time threat intelligence. The platform caters to dynamic business needs, supporting seamless integration across technology infrastructures.

What are some of the key features of Check Point Quantum Force?

Threat Prevention: Real-time analysis and mitigation of potential cyber threats.
Adaptive Security: Automated security policy adjustments based on activity insights.
Scalability: Supports growth with seamless cybersecurity infrastructure expansion.
Threat Intelligence: Continuous updates providing insights on recent threats.

What benefits or ROI should users evaluate in reviews?

Cost Efficiency: Affords long-term savings through minimized risk of data breaches.
Enhanced Security: Provides comprehensive protection against varied cybersecurity threats.
Operational Continuity: Ensures minimal disruption to business functions with proactive security measures.
Ease of Integration: Simplifies integration into existing IT systems without extensive overhauls.

Check Point Quantum Force is implemented in industries like finance, healthcare, and retail, offering tailored security solutions to meet sector-specific regulatory and operational demands. By leveraging its adaptable architecture, businesses in these industries effectively manage risk while ensuring customer data privacy and compliance with industry standards.

Check Point Software Technologies

Cisco Secure Firewall provides comprehensive network security with advanced features such as application visibility, URL filtering, and malware protection. It combines a user-friendly interface with robust VPN capabilities, making it a reliable choice for varying network environments and industry applications.

Cisco Secure Firewall offers exceptional protection with its integration into Cisco's broader ecosystem, ensuring enhanced threat detection and policy unification. Despite its complexity in command-line interfaces and management, Cisco Secure Firewall remains a potent tool for safeguarding data. It is widely adopted for edge security, VPN services, perimeter defense, and traffic segmentation, especially in hybrid settings. Essential sectors like banking and telecom benefit from its stable connectivity and centralized security management. Though there are challenges with costs and support for third-party APIs, the firewall's scalability and high availability provide comprehensive support for protecting network assets.

What are the key features of Cisco Secure Firewall?

Application Visibility: Offers in-depth visibility of application traffic to monitor and protect against threats.
Advanced Malware Protection: Protects against known and emerging malware threats with powerful detection capabilities.
URL Filtering: Manages and restricts access to websites, enhancing organizational data security.
VPN Capabilities: Ensures secure remote access and encrypted communication through strong VPN features.
Integration with Cisco Ecosystem: Enhances security measures with seamless integration with Cisco's suite of security tools.

What benefits and ROI should be expected from Cisco Secure Firewall?

Comprehensive Protection: Offers multi-layered security for diverse network environments, increasing overall data protection.
Performance Efficiency: High availability and scalability lead to improved network performance and resource management.
Management Simplification: Centralized security management streamlines policy deployment across networks.
Enhanced Threat Detection: Integration capabilities improve threat detection and mitigation for better security posture.

Cisco Secure Firewall is widely implemented across sectors like banking, education, ISPs, and telecoms. It fortifies data centers and network edge security, delivering strong protection for client access, hybrid environments, and intrusion prevention. In these industries, firewall solutions ensure secure connectivity and manage RTU traffic effectively, leveraging centralized management and integration with Cisco's security tools.

Cisco

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.

Check Point Quantum Force vs. Cisco Secure Firewall