


Forcepoint Secure Web Gateway and Check Point Web Gateway compete in the web security category. Check Point seems to have the upper hand due to its streamlined cloud deployment and effective threat prevention mechanisms.
Features: Forcepoint Secure Web Gateway offers strong content filtering, SSL inspection, and integration with Data Loss Prevention (DLP) solutions and Cloud Access Security Broker (CASB). It provides advanced reporting and granular control over web browsing activities. Check Point Web Gateway emphasizes threat prevention, simplifies URL filtering, and gives application control. Its efficient deployment model and capability for network segmentation stand out.
Room for Improvement: Forcepoint needs to address issues with Active Directory authentication, documentation complexity, and improve support response times, as well as scalability and reporting features. Check Point requires better technical support, documentation clarity, and system stability. There's also feedback on pricing challenges and centralized management that needs addressing.
Ease of Deployment and Customer Service: Forcepoint Secure Web Gateway supports flexible deployment across cloud, on-premises, and hybrid environments, but is known to be challenging initially. Its technical support receives mixed reviews. Check Point Web Gateway offers varied deployment models with easier implementation and generally well-regarded customer service, though technical support consistency could improve.
Pricing and ROI: Forcepoint Secure Web Gateway is seen as expensive but provides market-level pricing and value due to its comprehensive feature set. Users find it cost-effective despite its high price. Check Point Web Gateway is also high-cost but justifies its pricing through robust security and ease of management. Both solutions require annual licensing, with Forcepoint known for competitive pricing against some competitors, while Check Point is perceived as premium-priced. ROI for both is favorable, stemming from Forcepoint's reduced hardware needs and cloud integration, and Check Point's strong security assurance.
With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures.
Deploying iboss leads to good return on investment, estimated around 70% to 80%.
I have seen some cost effectiveness from iboss; it has reduced certain support requirements, making it a more hands-off solution.
They are very fast, responsive, and knowledgeable.
The quality of the support is fantastic.
We had promising discussions about resolving these issues, but no real action followed.
Our organization has private engineers who are certified by Check Point.
There are instances where both the response time and technical support quality need improvement.
They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
I would rate it a nine out of ten for scalability.
If I start seeing sluggishness or anything like that, I just reach out to my rep, and they connect with their dev team, typically resolving it the same day.
The cloud solution can be scalable, but in most cases, it is not because it is bound to specific firewalls.
It's been pretty solid; I've never had an outage with them, and if I ever had, it's only been once out of the seven years.
We've experienced zero downtime.
Our biggest problem with their service was it did not recognize the device despite our ClearPass sending information to the iboss box.
It is not as intuitive as the rest of the platform.
iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard.
We also had a problem with a transition when we upgraded from one appliance of theirs to another, but their engineer lost a good deal of our data.
Deployment issues on Linux have been noted, especially with agents on endpoints.
Check Point asks for the registered mail ID and number, which sometimes you can't quickly provide when under pressure because your client's network is down.
Support for operational technology (OT) is not as comprehensive in Check Point Web Gateway as it is in competing products.
They need to enhance their CASB solutions since currently, the cloud index support is low compared to competitors.
The setup process is complex.
It offers the same features you would get from a vendor that charges 250,000 British pounds for a fraction of the price.
The following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs.
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern.
The pricing and discounts for Check Point Web Gateway are similar to Fortinet, making it cost-effective with fair pricing.
Fortinet is the cheaper product, while Palo Alto and Check Point Web Gateway are similarly priced.
It's really expensive.
The solution's mental health function can detect if someone needs help.
It's given us a lot more visibility into our computer assets that may be infected with viruses and also shows us people who have unusually large uploads or might be engaging in high-risk activities, such as searches or going to sites not categorized by their web crawler.
iboss was the best solution for us because, no matter what domain you were in, everything is under a single pane of glass, which is exactly what we wanted.
It provides behavioral analysis and a Copilot feature implemented in the management console, allowing users to receive assistance in an automated format.
We are satisfied with the effectiveness of the multi-layered defense approach in Check Point Web Gateway.
We are using the real-time threat intelligence feature. It helps to manage web threats effectively with qualified alarms.
As organizations move away from legacy applications and data centers, the SASE architecture and ZTNA-based operations become essential.
If you have the complete Forcepoint solution, it can integrate with other Forcepoint products, such as DLP solution and email gateway.
| Product | Mindshare (%) |
|---|---|
| iboss | 3.2% |
| Forcepoint Secure Web Gateway | 2.9% |
| Check Point Web Gateway | 1.6% |
| Other | 92.3% |

| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 8 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 4 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 23 |
| Midsize Enterprise | 6 |
| Large Enterprise | 29 |
iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.
Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.
The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.
What are the most important features of Iboss?
- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.
- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.
- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.
- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.
- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.
What benefits should users consider in reviews?
- Complete visibility over AI, data, and applications from one platform instead of separate point tools.
- Encrypted traffic is inspected by default so data decisions use content and context together.
- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.
- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.
- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.
Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.
Check Point Web Gateway is designed for network security with a focus on protecting against threats like malware and phishing. It offers cloud deployment, URL filtering, malware protection, and real-time threat intelligence.
Check Point Web Gateway ensures stable performance through a cloud-based infrastructure and offers a range of capabilities such as URL filtering, application control, and malware protection. It supports granular policies and real-time threat intelligence, playing a crucial role in enhancing web traffic filtering and compliance enforcement. The gateway provides intuitive security management features, including antivirus, DLP, encryption detection, and behavioral analysis. While it supports role-based access control and prevents access to malicious websites, there is room for improvement in response times and documentation. Users find challenges in interface appeal, deployment complexities, and authentication policy management. Cost and scalability concerns exist, with a need for enhanced mobile integration and endpoint accessibility.
What are the key features of Check Point Web Gateway?In industries such as banking and e-commerce, Check Point Web Gateway is used widely for securing network infrastructures against data breaches and ensuring compliance. Its multi-layer architecture supports seamless integration with site-to-site VPNs and user access management, enhancing overall security.
Forcepoint Secure Web Gateway ensures secure internet access with features like URL filtering and real-time analytics. It's known for robust security, scalability, and integration capabilities, making it ideal for managing web traffic and preventing data loss.
Forcepoint Secure Web Gateway is designed to provide comprehensive protection for web traffic while enabling organizations to maintain security and productivity. By integrating well with Forcepoint offerings like DLP and CASB, it offers added functionality. The gateway equips users with tools such as SSL inspection and Shadow IT visibility. Despite its complex setup and challenges with updates, the platform is recognized for its flexibility, performance reliability, and ability to deliver granular policy control. Customers in demanding environments benefit from its extensive IP-based protection and robust report customization capabilities.
What are the standout features?Government agencies and professional services deploy Forcepoint Secure Web Gateway in on-premises and hybrid cloud setups for enhanced web security. By monitoring and controlling user activity, these entities maintain productivity and protect sensitive data. The gateway effectively manages internal and external web traffic, ensuring cyber threats are minimized. Specific industry needs are addressed with robust security frameworks tailored to maintain data integrity and efficiency.
We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.