


Symantec Proxy and Check Point Web Gateway compete in the network security domain. Symantec seems to have the upper hand due to its extensive proxy capabilities and threat detection features, although Check Point Web Gateway offers strong usability and deployment flexibility.
Features: Symantec Proxy features robust caching, URL filtering, and a comprehensive URL database integration. Users value its stability, scalability, and ease of configuration. Check Point Web Gateway offers impactful URL filtering, application control, and advanced threat prevention with strong cloud-based deployment options.
Room for Improvement: Symantec Proxy requires better SSL inspection, improved documentation, and quicker support response times. Performance and licensing complexity are additional concerns. Check Point Web Gateway needs enhanced support effectiveness, a more intuitive graphical interface, and reduced administrative complexity. Both solutions could benefit from improved support and documentation.
Ease of Deployment and Customer Service: Symantec Proxy's on-premises deployment can be complex, and users report declining support efficiency post-Broadcom acquisition. Check Point Web Gateway offers easier cloud-based deployment, although its customer support experiences mixed reviews. Both products need better support services, but Check Point's diverse deployment options offer adaptability.
Pricing and ROI: Symantec Proxy is considered expensive, with pricing complexities noted after the Broadcom acquisition. Its scalable security is acknowledged, but cost remains a barrier. Check Point Web Gateway also faces cost perceptions, with variable pricing based on company size and deployment. Licensing and support add expenses, but it offers some competitive pricing advantages over Symantec.
With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures.
Deploying iboss leads to good return on investment, estimated around 70% to 80%.
I have seen some cost effectiveness from iboss; it has reduced certain support requirements, making it a more hands-off solution.
For supercritical businesses, there should be a return on investment due to the enhanced security features and resilience.
They are very fast, responsive, and knowledgeable.
The quality of the support is fantastic.
We had promising discussions about resolving these issues, but no real action followed.
Our organization has private engineers who are certified by Check Point.
Support services are lagging and not very responsive.
They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
I would rate it a nine out of ten for scalability.
If I start seeing sluggishness or anything like that, I just reach out to my rep, and they connect with their dev team, typically resolving it the same day.
The cloud solution can be scalable, but in most cases, it is not because it is bound to specific firewalls.
It's been pretty solid; I've never had an outage with them, and if I ever had, it's only been once out of the seven years.
We've experienced zero downtime.
Our biggest problem with their service was it did not recognize the device despite our ClearPass sending information to the iboss box.
Stability depends on the platform on which it is deployed and the number of users.
It is not as intuitive as the rest of the platform.
iboss's single pane of glass console gives centralized visibility into web traffic, user activity, security policies, and alerts from one dashboard.
We also had a problem with a transition when we upgraded from one appliance of theirs to another, but their engineer lost a good deal of our data.
Deployment issues on Linux have been noted, especially with agents on endpoints.
Check Point asks for the registered mail ID and number, which sometimes you can't quickly provide when under pressure because your client's network is down.
Support for operational technology (OT) is not as comprehensive in Check Point Web Gateway as it is in competing products.
The product needs improvement in support services, as they are lagging and not very responsive when we raise concerns or queries, especially in terms of significant impact.
AI features could potentially improve the proxy by helping build rules more efficiently, suggesting unused rules, and enhancing preference setting.
It offers the same features you would get from a vendor that charges 250,000 British pounds for a fraction of the price.
The following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs.
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern.
The pricing and discounts for Check Point Web Gateway are similar to Fortinet, making it cost-effective with fair pricing.
Fortinet is the cheaper product, while Palo Alto and Check Point Web Gateway are similarly priced.
Pricing is difficult to specify as Broadcom sells platforms that include multiple products, making it hard to determine the exact cost for the proxy component.
The solution's mental health function can detect if someone needs help.
It's given us a lot more visibility into our computer assets that may be infected with viruses and also shows us people who have unusually large uploads or might be engaging in high-risk activities, such as searches or going to sites not categorized by their web crawler.
iboss was the best solution for us because, no matter what domain you were in, everything is under a single pane of glass, which is exactly what we wanted.
It provides behavioral analysis and a Copilot feature implemented in the management console, allowing users to receive assistance in an automated format.
We are satisfied with the effectiveness of the multi-layered defense approach in Check Point Web Gateway.
We are using the real-time threat intelligence feature. It helps to manage web threats effectively with qualified alarms.
The most valuable features are content inspection, caching, SSL encryption, decryption, WAN optimization, and more.
The integration with FireGlass has been essential since both solutions are from Broadcom, enhancing compatibility.
| Product | Mindshare (%) |
|---|---|
| iboss | 3.2% |
| Symantec Proxy | 1.8% |
| Check Point Web Gateway | 1.6% |
| Other | 93.4% |


| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 8 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 4 |
| Large Enterprise | 9 |
| Company Size | Count |
|---|---|
| Small Business | 6 |
| Midsize Enterprise | 4 |
| Large Enterprise | 12 |
iboss is the Zero Trust SASE platform that gives organizations complete visibility and governance over their AI, data, and applications through one unified platform, one console, one policy engine, and one data lake.
Your endpoints may already stop malware. Your data and application activity can still be invisible. iboss decrypts and understands every connection, then turns that signal into answers security leaders can act on.
The platform leads with three capabilities in this order: AI Security and Visibility, Data Security and Visibility, and App Visibility and Control. Zero Trust Network Access, VPN replacement, and SD-WAN sit underneath as the access fabric that carries those three. Trusted by global enterprises and government agencies.
What are the most important features of Iboss?
- AI Security and Visibility: conversation capture, shadow-AI discovery, AI DLP, and agent governance across Claude, Co-Work, ChatGPT, Gemini, and Grok, and emerging services.
- Data Security and Visibility: full SSL/TLS decryption, deep content inspection, MIP label compliance, and one-click compliance reporting.
- App Visibility and Control: signatureless CASB, dual risk scoring, in-app controls, and SSPM for major SaaS.
- Containerized Zero Trust SASE: dedicated containers, isolated SSL keys, one console, one policy engine, one data lake.
- Access fabric: ZTNA, VPN replacement, and SD-WAN under the same platform.
What benefits should users consider in reviews?
- Complete visibility over AI, data, and applications from one platform instead of separate point tools.
- Encrypted traffic is inspected by default so data decisions use content and context together.
- Shadow SaaS and new web tools appear as they are used, with enforceable controls in one console.
- Native data sovereignty through dedicated containers, in-region inspection, and per-customer SSL key custody.
- Scale proven in published materials: 10M+ users, 100+ countries, 150B+ transactions, 2.5B+ threats blocked.
Economic buyers are CISOs, CIOs, and VPs of Security. Champions include security architects, network and infrastructure leaders, SecOps, and GRC. Primary segments: enterprise and business, financial services, government (including FedRAMP Gov Cloud), healthcare, manufacturing, legal and professional services, retail and hospitality, and MSP/MSSP partners. Education, including K-12, is one vertical among these.
Check Point Web Gateway is designed for network security with a focus on protecting against threats like malware and phishing. It offers cloud deployment, URL filtering, malware protection, and real-time threat intelligence.
Check Point Web Gateway ensures stable performance through a cloud-based infrastructure and offers a range of capabilities such as URL filtering, application control, and malware protection. It supports granular policies and real-time threat intelligence, playing a crucial role in enhancing web traffic filtering and compliance enforcement. The gateway provides intuitive security management features, including antivirus, DLP, encryption detection, and behavioral analysis. While it supports role-based access control and prevents access to malicious websites, there is room for improvement in response times and documentation. Users find challenges in interface appeal, deployment complexities, and authentication policy management. Cost and scalability concerns exist, with a need for enhanced mobile integration and endpoint accessibility.
What are the key features of Check Point Web Gateway?In industries such as banking and e-commerce, Check Point Web Gateway is used widely for securing network infrastructures against data breaches and ensuring compliance. Its multi-layer architecture supports seamless integration with site-to-site VPNs and user access management, enhancing overall security.
Symantec Proxy offers robust web security by providing features like content caching and URL filtering. It enhances security, optimizes performance, and simplifies policy management for enterprises, serving as a dynamic tool across cloud environments.
Symantec Proxy integrates with Broadcom's FireGlass, providing enhanced compatibility and seamless functionality. Known for a stable deployment and a precise URL database, it offers comprehensive threat detection and policy creation, utilizing the Global Intelligence Network. Users deploy it for web security, malware blocking, and traffic filtering. Symantec Proxy's reputation and site categorization bolster defense against malicious sites, although SSL inspection, dashboard integration, and technical support could benefit from improvements. The platform has shifted post-Broadcom acquisition, needing streamlined solutions. Current challenges include performance with O365 and complexities around pricing and licensing.
What features define Symantec Proxy?Enterprises leverage Symantec Proxy to secure web access and manage Internet usage across industries. Deployed across cloud providers like AWS, GCP, and Azure, it supports URL filtering, remote access, and bandwidth control by user privileges. Organizations also find value in its role within antivirus scanning, policy customization, and reporting.
We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.