ArcSight Logger vs Check Point Security Management comparison

ArcSight Logger vs. Check Point Security Management

Download the complete report

Helped 842,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Logger

Ranking in Log Management

31st

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Check Point Security Manage...

Ranking in Log Management

9th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Advanced Threat Protection (ATP) (15th), Threat Intelligence Platforms (5th)

Mindshare comparison

As of March 2025, in the Log Management category, the mindshare of ArcSight Logger is 0.8%, down from 1.2% compared to the previous year. The mindshare of Check Point Security Management is 0.4%, down from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Log Management

Featured Reviews

Geraldo Freitas

Analista de TI - suporte a redes e segurança at Tribunal de Contas da União

Enhances our security incident investigation but not good for correlation

Investigation is good when you know what you want to search for in Logger. The most difficult part is parsing the logs and configuring the parsers. For investigation, it's good. For correlation, it's not good. We use Sentinel, and Sentinel has pre-built use cases that are much easier to configure. So, it enhances our security incident investigation. We have inbound integration, but configuring the parsers is sometimes very difficult. We only have two use cases where we have a correlation set up. We send the information to Check Point to block IP addresses when we see a lot of blocks from the same source. We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist. So, it offers the ease of integration.

Read full review

Ozan Durmus

Senior Information Security Specialist at AKBANK TAS

Good documentation and proxy support with a helpful community available for troubleshooting

It's useful that we can find unused objects. This helps us to get rid of unused objects in our database, Proxy support is valuable for us. We can apply centralized proxy settings to get additional databases when we need them. Revision history and detailed audit log is a good feature with this we can always feeling safe if somethings go wrong, I'm sure that I can go back the old one. Smart Event is a very good feature. It provides a graphical view of the traffics and provides history. The filter syntax is very good and helps control when we need it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's a robust, mature product and you can do some really complex operations and analytics."

"It's a brilliant log collection tool, and it can handle hundreds of thousands of servers in a single shot to ingest the data."

"We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist."

"It provides in-depth information on business activities once we log into the system."

"In our country we are a little bit private in terms of solutions, so we are just starting to use the basic data capture. Now some users can start to use additional features that come with Micro Focus ArcSight like user behavior analytics for investigating."

"The most valuable feature is the level of detail that you can see about certain events, even when they do not come up in the console."

"The ability to customize the solution in great detail is its most valuable features. We can customize the use cases and also have the ability to do scripting. We can personalize our dashboard as well. The scalability the solution offers is quite impressive."

"We check a lot of logs in ArcSight Logger because we're running a massive database platform."

More ArcSight Logger pros

"The solution is ideal for use and deployment in a large infrastructure environment."

"Having the possibility to use Smart Event to check for threats on a broader scale helps after a security incident and also makes it easier to check - instead of looking through different logs."

"Check Point Security Management Server offers a wide range of security features, including firewall, intrusion prevention, VPN, application control, and threat prevention capabilities."

"It's a great complete endpoint security solution that prevents the most imminent threats to the endpoint such as ransomware, phishing, or malware."

"The firewall's blades are the solution's most valuable feature."

"URL filtering is a very important feature."

"The firewall cleverly handles such attacks without compromising on performance."

"Being able to install a version of Check Point Security Management helps us avoid the expense of creating a server dedicated to that function, and we save on equipment and technical personnel in installing it, which in the end accelerates the administration and management of equipment to connect to it."

More Check Point Security Management pros

Cons

"We have had problems with archiving."

"I would like to see better scheduling in the next release of this solution."

"ArcSight has been sold two or three times, and the quality has decreased."

"The solution should make it possible to integrate network analysis features."

"The console in older versions is not user-friendly."

"Using the ArcSight Logger dashboard is not particularly intuitive or efficient, so it is important to be trained in its use."

"In the next release, I want to see more intelligence."

"The solution could be improved in maintenance settings."

More ArcSight Logger cons

"It sometimes blocks safe sites when I am researching, affecting the overall output and wasting time."

"I guess it lacks in providing visibility of the many incidents."

"I would like the ability to have an overview, cross-site: One portal that does all firewalls. Also, the user interface is overly complicated."

"We'd like to see more and more integration possibilities between Checkpoint and other vendor security solutions such as Malwarebytes, SIEM solution providers, and standalone vulnerability scanners."

"Troubleshooting is quite complicated within multi-domain management. If an issue arises, the local administrator has to keep in mind that there are other domains that could be also affected."

"We sometimes have trouble with the performance of the solution. Maybe some performance tuning options could be added in a future release. There should be more visibility about which blade in your firewall is causing the latency."

"The reporting should be improved in future releases. It needs to be very explicit. This is very important."

"In the future, I would like the platform to be able to integrate or manage appliances or third-party equipment."

More Check Point Security Management cons

Pricing and Cost Advice

"I rate the product’s pricing a seven out of ten, where one is inexpensive, and ten is expensive."

"We have a lifetime license, so we don't pay a monthly fee."

"ArcSight Logger is very expensive compared to their competitors, but when we talk to the customer and explain what the features are and how we can scale, they understand. Still, ArcSight is more expensive than the competition."

"I would rate the product a seven out of ten since it's an enterprise product."

"ArcSight is an expensive solution."

"The pricing is quite harsh."

"It's not cheap at all as it's a big product and has been in the market for quite some time now."

"Pricing is reasonable compared to similar tools on the market. They offer perpetual licenses."

"The solution is expensive."

"The solution is expensive and there is an annual license."

"The pricing can be estimated around 3 or 4 out of 10 in terms of expense."

"If one will be very expensive, and ten means low price, I rate the tool's price as a three out of ten."

"Do the homework because Check Point is rather expensive."

"This product can be used for 25 security gateways on a basic license."

"Check Point is much cheaper than the competition ($4/server as compared to $17/server)."

"Price-wise, it is an expensive solution."

See which vendors are best for you

Use our free recommendation engine to learn which Log Management solutions are best for your needs.

See recommendations

842,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

20%

Computer Software Company

16%

Government

Educational Organization

Computer Software Company

14%

Financial Services Firm

10%

Government

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about ArcSight Logger?

We have a trigger. So, Logger automatically blocks these IP addresses. We could have Logger put them on a blacklist.

What is your experience regarding pricing and costs for ArcSight Logger?

The pricing isn't the problem. We have a lifetime license, so we don't pay a monthly fee.

What needs improvement with ArcSight Logger?

The solution has room for improvement. We're currently upgrading to the newer version, where they have something like Kafka, a hub for all solutions feeding information into Logger. However, I thin...

What do you like most about Check Point Security Management?

The most beneficial features for us are the alert classifications, which help us prioritize critical issues, and the detailed reports that provide insights into attack origins and purposes, such as...

What needs improvement with Check Point Security Management?

One case I saw was with the logs, which gave me the transfer and the vibration. There's a lot of logs, and I'm unsure about their validity, however, they take up a lot of space. We had to provision...

What is your primary use case for Check Point Security Management?

This is the Wi-Fi documentation. I work with the service, and we are partners with Check Point. One of our clients, Parliament, required an upgrade from physical to virtual implementation. This was...

Splunk Enterprise Security vs ArcSight Logger

Comparisons

Compared 40% of the time

IBM Security QRadar vs ArcSight Logger

Compared 36% of the time

Elastic Security vs ArcSight Logger

Compared 10% of the time

Wazuh vs ArcSight Logger

Compared 8% of the time

LogRhythm SIEM vs ArcSight Logger

Compared 4% of the time

More ArcSight Logger Competitors

Fortinet FortiAnalyzer vs Check Point Security Management

Compared 56% of the time

Wazuh vs Check Point Security Management

Compared 33% of the time

LogRhythm SIEM vs Check Point Security Management

Compared 12% of the time

More Check Point Security Management Competitors

Product Reports

ArcSight Logger

Download ArcSight Logger product report

Check Point Security Management

Download Check Point Security Management product report

Also Known As

Micro Focus Arcsight Logger, HPE Arcsight Logger

R80.10, R80, R77.30, R77, Check Point R80.10 Security Management, R80 Security Management

Overview

HPE ArcSight Data Platform (ADP) offers a future-ready data solution that enriches data in real time and supports open standards for better threat detection. Using security data connectors, ADP collects data and enriches it in real-time to give analysts organized information that can be acted upon instantly.

OpenText

Check Point Security Management is an advanced security management platform for enterprises. The platform integrates all aspects of security. A single platform manages the entire infrastructure, from data centers to private/public cloud deployments.

Check Point Security Management is a reliable and easy-to-use security platform. It integrates all aspects of your security environment to strengthen the security posture without impairing productivity. The system has a layered policy model. This means the security policy can be separated into layers for network segmentation. Different administrators can manage different policies. The policy layer automates the tasks.

The platform is extensible, scalable, and integrates easily with orchestration systems and change management.

Basic Components of the Infrastructure

Smart Console: The Check Point Graphical User Interface for connecting and managing Security Management Servers. The smart console provides an integrated solution via the following features:

Security policy management
System health monitoring
Multi-domain management

The smart console offers several advantages. Changes in security policies and logs can be done with a click. You can navigate from an item within a log to the policy. There are also built-in multi-language support and accessibility features.

1. Security Management Server: The server manages security gateways with set security policies and monitors security events on the network.

The automation server is an integrated part of the management server. The API server is active by default on servers with 4 GB of RAM or more and on standalone servers with 8 or more GB of RAM.

The automation server communicates with the management server the same way as the Smart Console. This architecture allows the same validation errors and warnings to be presented when using an automation session.

The same audit logs generated using the Smart Console are also generated using an automation session. If you have a multi-domain environment, there is only one automation server that monitors all the IP addresses of the multi-domain management server.

2. Security Gateway is placed at the edge of the network. It monitors and filters traffic and enforces security policies.

Logging, Event management, and Monitoring

With Check Point Security Management, logging, reporting, event management, and monitoring are integrated. The platform features widgets and chart templates that optimize visibility. One of the best features is the one-click exploration. This simplifies going from a general overview to specific event details.

Benefits of Check Point Security Management

The platform keeps pace with dynamic network changes
Helps align security with business goals
Helps with threat prevention.
Reduces operational costs

The unified console also means a single policy for users, data, applications, and networks. The granularity control helps accelerate administration processes. This feature, together with automation, is key to achieving reduced operational overhead. Security teams can automate tasks and even create self-service security web portals with the Check Point Security Management platform.

Threat management is fully integrated, with reporting, logging, and monitoring all in one dashboard. This provides full visibility into the security of the network.

Security Management Suite

The Security Management Suite consists of the following modules:

Policy Management: Includes central management of different security policies across multiple domains and browser-based security management.
Operations Management: Includes compliance, provisioning, workflow automation, and user directory centralization.
Threat Management: Includes centralizing security event correlation for enforcement points. Centrally monitors Check Point devices.

Reviews from Real Users

A Network Security Engineer/Architect at a tech services company says, "The features we like and find the most valuable are the ways we can manage the policy, create objects, and drag and drop objects in our daily operation. It makes our daily operation on the firewall management much easier than going, for example, to one firewall, then going to the other."

"The management API is the best new feature for me. It allows us to further automate our customers' automated server ordering," says a System Engineer Network & Security at OTTO GmbH & Co KG.

A Senior Infrastructure Services Specialist at St.George Bank Limited adds that "The solution is ideal for use and deployment in a large infrastructure environment."

Check Point Software Technologies

Sample Customers

China Merchants Bank, Bank AlJazira, Banca Intesa

Hedgetec, Geiger

ArcSight Logger vs. Check Point Security Management