Check Point SandBlast Network vs Symantec Advanced Threat Protection comparison

Check Point SandBlast Network vs. Symantec Advanced Threat Protection

Download the complete report

Helped 868,787 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Check Point SandBlast Network

Ranking in Advanced Threat Protection (ATP)

7th

Average Rating

8.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

No ranking in other categories

Symantec Advanced Threat Pr...

Ranking in Advanced Threat Protection (ATP)

19th

Average Rating

7.8

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2025, in the Advanced Threat Protection (ATP) category, the mindshare of Check Point SandBlast Network is 4.0%, down from 6.0% compared to the previous year. The mindshare of Symantec Advanced Threat Protection is 2.0%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Market Share Distribution
Product	Market Share (%)
Check Point SandBlast Network	4.0%
Symantec Advanced Threat Protection	2.0%
Other	94.0%

Advanced Threat Protection (ATP)

Featured Reviews

Abnet Tsegaye Belay

Cybersecurity Engineer at a tech services company with 11-50 employees

Has prevented zero-day attacks by analyzing and disarming suspicious files before delivery

Check Point SandBlast Network offers wide protocol coverage. It inspects emails through SMTP, POP3, and IMAP, web downloads through HTTP and HTTPS, and file transfers. Original files are analyzed in the sandbox while users get clean copies instantly to their inbox. It detects zero-day exploits in suspicious and normal files, and includes forensic and reporting features that provide detailed incident analysis, malware behavior reports, and indicators of compromise. The wide protocol coverage is particularly valuable because suspicious activities happen across different protocols. With Check Point SandBlast Network supporting multiple protocols, there is strong protection for our networks. Since implementing Check Point SandBlast Network, we have gained enhancement in our email and web security. It protects our files, complies with different standards, and reduces lateral movement in our networks.

Read full review

TapabrataSamanta

Lead Architect at Zones

Reliable platform with effective integration capabilities

Our primary use case for the product is to provide advanced threat protection to our clients, primarily in the banking and financial sectors Symantec ATP has been beneficial in ensuring robust security for our clients. Its effectiveness in detecting and mitigating threats has improved customer…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of its characteristics that we liked the most was its analysis and emulation of activities in the emails since it manages to review them and inspect them if they have an infected attachment."

"It enables my IT system to apply threat detection intelligence and diffuse the endpoint and potential threat attacks and phishing attacks onto the system in the most proactive and secure manner."

"The most efficient and protective characteristics of Check Point's SandBlast solution are that we can see a lot of this protection at the network and mail levels."

"The Check Point SandBlast Network gives us incredibly good features."

"The zero-day protection is its most valuable feature."

"You do not need to risk your network by using the in-line sandbox."

"The sandbox is able to scan files without adding a delay or compromising productivity."

"Preventing zero-day threats and extracting potential threats from incoming files with Threat Extraction is the most valuable feature for us."

More Check Point SandBlast Network pros

"You don't have to buy a separate email security platform. You can enable that using their endpoint, and I like that. You don't have to have two agents running on the same box."

"The great advantage in using this product is it creates multiple services."

"Real-time threat analysis is quick and takes action on threats immediately."

"The incident management on the solution is very good. You get a lot of detailed information about an incident. You also get a lot of documentation in connection with the CVI or integration."

"What I like most about Symantec Advanced Threat Protection is its notification capability."

"Technical support is very responsive. You just have to open a ticket. They respond in a timely manner. Their response is good. I'm satisfied."

"The product integrates well with our systems, and we have not encountered any problems."

"All of the solution's features are quite valuable for us. We especially like the threat protection it provides."

More Symantec Advanced Threat Protection pros

Cons

"Using it in the beginning was difficult because I had never used anything similar. In terms of navigating the UI, it was all not too bad, but there is definitely a learning curve."

"EDR and EPM solutions like Carbon Black or CyberArk have integrations with the cloud version of Sandblast, however, there must be on-premise Sandblast options also."

"We have noticed a slight performance hit when the Threat Emulation and Extraction features were enabled, but the protection trade-off is worth it for us."

"The response times were slower, and getting support personnel on the call was more difficult."

"I am very leery right now about the stability. We've had three outages in the last month because of Check Point, not because of something that the customer has done, but because of changes on the Check Point side."

"Check Point SandBlast Network can improve the integration with third-party vendors, such as EDR or CRM products. For example, IBM Curator."

"I think Check Point provides standard time which ideally most other vendors take to identify behaviors of a file by sending them into a sandbox environment for inspection."

"The Threat Emulation software blade significantly affects the performance of the NGFWs, we have a significant increase in the CPU and memory consumption."

More Check Point SandBlast Network cons

"One area for improvement could be the pricing model."

"An improvement could be made on the reporting because then it would be easier to collect information and submit it for compliance."

"Scalability could be better."

"It should be able to collect information if the agent is disabled."

"The administration interface needs a lot of improvement. It should be UI based, and simple. They need to improve it. It's pretty much not that friendly compared to what we were using as Bitdefender before. It's okay but is improving, actually."

"The support for new OSs and older OSs could be a little tighter. They need to be more upfront about what protection services they're going to provide on new OSs. I haven't seen the Windows 11 version out yet. It is either already released in Beta, or the Beta will be released soon. There could be a little bit more advanced updates on what they're doing to help protect Windows 11 environments. They can let us know in advance so that we know it is going to be protected. We can't roll out the new OS without putting end-point protection on it. So, they should tell us what is their support model for that, and what are they doing to protect Windows 11. They're not telling me, and that's a criticism. The same issue is applicable to all the other antivirus tools. It is not just Symantec; all of them have this problem."

"The security features need to be improved."

"There are limits with respect to blocking files by hash value or blocking IP addresses, and these limits should be removed."

More Symantec Advanced Threat Protection cons

Pricing and Cost Advice

"We would like to try the Threat Extraction blade, but you need to buy a license. Check Point is expensive. I would like to buy things, but I would need the funding."

"We have seen ROI."

"I think the overall cost for introducing Check Point with SandBlast was reasonable and competitive in the market."

"Choosing the correct set of licenses is essential because, without the additional software blade licenses, the Check Point gateways are just a stateful firewall."

"The product's cost is high."

"The cost is not significantly high and it can be negotiated during any purchase of NGFW."

"The cost of Check Point SandBlast Network is annually, and there is only a standard license."

"The pricing is quite effective, not excessively high. On a scale of one to ten, where ten is the highest price, I rate the pricing a nine."

"The pricing of this solution is inexpensive and affordable."

"The price is quite expensive."

"Symantec Advanced Threat Protection's pricing is comparable."

"Pricing is good. It is nice to have a great product at a fair price."

"Symantec Endpoint Protection has an average price."

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

868,787 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Financial Services Firm

10%

Energy/Utilities Company

Manufacturing Company

University

11%

Manufacturing Company

11%

Financial Services Firm

10%

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	27
Midsize Enterprise	8
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	3
Large Enterprise	13

Questions from the Community

What do you like most about Check Point SandBlast Network?

The solution can detect and prevent attacks that may be encrypted.

What is your experience regarding pricing and costs for Check Point SandBlast Network?

I'm not in charge of costing regarding Check Point SandBlast Network, so I cannot comment on the pricing, setup cost, and licensing.

What needs improvement with Check Point SandBlast Network?

Check Point SandBlast Network could be improved as sometimes the cost can be limiting even if the feature is very nice, and the UI can be optimized. The customer support for Check Point SandBlast N...

What do you like most about Symantec Advanced Threat Protection?

Symantec Endpoint Protection provides end-to-end protection. Along with antivirus protection, it has a lot of key areas, including intrusive prevention, firewall features, and application and devic...

What is your experience regarding pricing and costs for Symantec Advanced Threat Protection?

The price is quite expensive because a different entity has taken over the company.

What needs improvement with Symantec Advanced Threat Protection?

One area for improvement could be the pricing model. Future releases could further enhance integration capabilities with other platforms and simplify the licensing model to compete more with Micros...

Palo Alto Networks WildFire vs Check Point SandBlast Network

Comparisons

Compared 52% of the time

Fortinet FortiSandbox vs Check Point SandBlast Network

Compared 39% of the time

Trellix Network Detection and Response vs Check Point SandBlast Network

Compared 9% of the time

More Check Point SandBlast Network Competitors

Palo Alto Networks WildFire vs Symantec Advanced Threat Protection

Compared 40% of the time

CyberArk Privileged Access Manager vs Symantec Advanced Threat Protection

Compared 22% of the time

Trellix Network Detection and Response vs Symantec Advanced Threat Protection

Compared 22% of the time

Cisco Secure Network Analytics vs Symantec Advanced Threat Protection

Compared 17% of the time

More Symantec Advanced Threat Protection Competitors

Product Reports

Check Point SandBlast Network

Download Check Point SandBlast Network product report

Symantec Advanced Threat Protection

Download Symantec Advanced Threat Protection product report

Symantec Advanced Threat Protection report

Overview

Check Point’s evasion-resistant technology maximizes zero-day protection without compromising business productivity. For the first time, businesses can reduce the risk of unknown attacks by implementing a prevent-first approach. Learn More about Check Point Sandblast

Check Point Software Technologies

Symantec Advanced Threat Protection is a single unified solution that uncovers, prioritizes, and remediates advanced attacks. The product fuses intelligence from endpoint, network, and email control points, as well as Symantec’s massive global sensor network, to stop threats that evade individual security products. It leverages your existing Symantec Endpoint Protection and Symantec Email Security.cloud investments, so it does not require the deployment of any new agents. You can deploy a new installation of Symantec Advanced Threat Protection and start to discover suspicious activity in under an hour. Using the proven technology in Symantec Insight reputation based detection, Symantec SONAR behavioral analysis with the new Symantec Cynic sandbox and file analysis platform, Symantec Advanced Threat Protection provides better detection and prioritization than other vendors, allowing security analysts to “zero in” on just those specific security events of importance.

Broadcom

Sample Customers

Edenred, State Transport Leasing Company (STLC), Edel AG, Laurenty, Conseil Départemental du Val de Marne, Koch Media

ECI

Check Point SandBlast Network vs. Symantec Advanced Threat Protection