Azure Firewall vs Check Point CloudGuard Network Security comparison

Azure Firewall vs. Check Point CloudGuard Network Security

Download the complete report

Helped 831,020 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of Azure Firewall is 2.2%, down from 3.2% compared to the previous year. The mindshare of Check Point CloudGuard Network Security is 0.3%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Charan Kumar

Director, Technology at a computer software company with 5,001-10,000 employees

Easy to use and configure but could be more robust

The cost of the solution has increased. The robustness of the software could be better. It should be able to cover host-to-host traffic or HTTP traffic. Configurations can be better. The workloads need to still have free access. The encryption and decryption process is not that seamless. It's a little heavy compared to a FortiGate or other firewalls.

Read full review

PRASHANT GARJE

Manager - Enterprise Architecture and Cloud at Axis Bank

Cost-effective, supports automation, and provides good security

We have done a lot of automation with the firewall, but sometimes, there are some failures because of some bugs. The fixes for them are still not available. We have daily or weekly communication with the Check Point people giving support in the India region, but we have not seen much improvement or response to our requests for some additional features. We are moving to infra as a code, so we are expecting more advancements in this product. Just installing the patches is not going to help us. They need to focus on this area. I expect Check Point CloudGuard to come up with some AI/ML integration. A firewall is the first L3 security device available to you. It is the single point that manages or processes the traffic for an organization. There is a possibility that the device goes down or gets rebooted for any reason. The integration of artificial intelligence with the devices can help us to know in advance that there might be a surge in traffic. There might be a spike in the traffic, so we can have some additional firewalls integrated. This predictive analysis has to be there. This way, if required, a second, third, or fourth firewall can come into the picture. All the firewalls will process the traffic simultaneously. I am expecting such capability. This sort of feature is available with AWS. We are deploying all the firewalls on AWS, but it would be easy if, in the future, such a feature is available from the OEM or Check Point itself. It will be very helpful for the organization. We have had a couple of outages because of some misconfiguration. They were human errors but there were no prior indications that if we were making these sorts of changes, this would happen. People making the changes on the firewall were not aware of this, and that is the reason why the outage happened. In a financial organization, an outage of even five minutes can cost a lot.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is stable."

"The most valuable features of Fortinet FortiGate are the different types of profiling. It has been the most effective for me. The WAF and the antivirus profile are the most effective in network protection."

"You can purchase switches and you don't need to do anything with them. You just put in the firewall and the switches get all the policies and rules that you already have in the firewall. With Fortinet, you just connect the FortiSwitch to the Fortinet and that's it."

"The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."

"The email protection and VPN features are the most valuable."

"The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution."

"The solution is stable."

"I'm looking forward to FortiGate's dashboard features, insights, application oversight, and monitoring, which could help us significantly."

More Fortinet FortiGate pros

"The SIEM that Azure Firewall provides us is very robust."

"The solution is very stable. When comparing it to other environments, it's actually quite impressive."

"It is easy for me to protect certain ports or even the IP addresses, as well as do whitelisting, blacklisting, and the FQDN when we want virtual machines connected and to protect certain websites."

"Performance and stability are the key features of this product."

"I like its order management feature. It doesn't have the kind of threat intelligence that Palo Alto has, but the order management makes it much simpler to know the difference."

"The solution can autoscale."

"Azure Firewall integrates well with multiple platforms."

"The solution has FQDN integration."

More Azure Firewall pros

"The tool's most valuable features are the REST APIs that help to automate the deployment and maintenance process. It helps us to reduce time to 15-25 minutes compared to the manual process which used to take around two to three hours."

"The ease of administration with the cloud management extension and the cloud licensing model is valuable."

"All the features that we subscribe to from CloudGuard NGTP are valuable. All the threat prevention and access control features give us the network security that we expect."

"We find Check Point valuable because they are 100% focused on security. It totally closes the potential vulnerability channel. We can check our mail and our attachments and we can scan everything easily. We get an immediate report about the situation of the attachments. We can discover if the target's security attack was started from phishing, etc. We also enjoy using the additional features that protect our internal customer from targeted attacks."

"Moving into the cloud without having to change a lot of our internal processes and retrain staff is one of the biggest benefits of this solution."

"The versatility is the solution's most valuable feature."

"The tool's deployment is rapid. Its dashboard is also useful. It's easy to deploy both on-premises and in Azure. In an office with VMware running, deployment is a simple process. Similarly, in Azure, deployment is easy and scalable. Adding more CPUs is a straightforward task – just shut it down, modify the security, and restart. This ease of use translates into cost and resource savings, and faster deployment times."

"We primarily secure our network using CloudGuard Network Security's next-generation firewall features, including anti-spam, IPS, and URL filtering. Our chosen package for the go-to-market strategy is NGTP. For customers seeking more features, we provide options to upgrade to the tool's advanced packages."

More Check Point CloudGuard Network Security pros

Cons

"Palo Alto has a feature called WildFire Analysis that is unavailable in FortiGate. WildFire is better than a sandbox because it can address zero-day threats and vulnerabilities. It can immediately identify zero-day threats from the cloud."

"In the next release, I would like to see the interface simplified to be more user-friendly."

"Fortinet FortiGate needs to improve to be on par with its competitors, such as Palo Alto and Sophos. They are the market leaders. Fortinet FortiGate needs to improve its capabilities. However, we are happy with Fortinet FortiGate."

"Currently, FortiGate is providing SSL VPN. But they're missing some features that are available in Palo Alto's SSL VPN."

"Technical support needs to be improved."

"To the best of my knowledge, Fortinet does not have a CASB solution and Fortinet does not have a Zero trust solution."

"One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering."

"Web security solutions can be improved."

More Fortinet FortiGate cons

"The threat intelligence part could be better. I don't see why our customers have to get an additional solution with Azure Firewall. It would be great if they made it on par with Palo Alto."

"You have to have a defined IP range within your network to associate it with your network. The problem is you have to plan ahead of time if you expect to use the firewall in the future so that you don't have to reconfigure your subnets or that specific IP range. Other than that, I don't any issues. I use it for basic configuration for a single application, so I really don't try to leverage it for multiple applications where I might find some complexity or challenges."

"The reporting, logging, and monitoring features, as well as the flexibility of the policies, need to be improved."

"The solution doesn't offer the same capabilities of Fortinet. It should offer intrusion prevention and advance filtering. These are two very useful features offered on Fortinet that Azure lacks."

"Currently, it only supports IP addresses, so you have to be specific about the IPs that are in your environment."

"One thing that would help engineers adopt it better is the documentation."

"Azure Firewall is an expensive solution. On a scale from one to ten, where one is not affordable, I would rate the price as a three."

"Azure should be able to work better as a balancer also, instead of just being a firewall. It should have a wider mandate."

More Azure Firewall cons

"The initial setup was a bit complex."

"The only pain points we have had with it were when we did major version upgrades. Rather than being able to do incremental upgrades on those, we had to completely redeploy. I know that has changed recently, but we had some hiccups when we did the upgrades. This is the only issue we have had."

"CloudGuard Network Security's pricing is expensive. We have encountered issues with its licensing."

"The threat scanning system should categorize the level of threats to enhance reliable data interpretation."

"The user interface could be more intuitive."

"There is room for improvement in addressing bugs and support issues."

"Check Point CloudGuard is not a feature-centric product because Check Point concentrates on security."

"Zero touch removes any independence for configuring."

More Check Point CloudGuard Network Security cons

Pricing and Cost Advice

"It is quite affordable for our customers. There is a separate cost for IPS, antivirus, web filtering, and other features. They have a great choice of licenses. You can go for the license that you want, which is quite useful."

"Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."

"It is expensive. You need to pay for the subscription every year, which is very expensive. The subscription includes technical support and hardware exchange in case of failure."

"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."

"It's a very full-featured and it's priced well solution."

"We are on an annual license to use Fortinet FortiGate."

"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."

"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."

More Fortinet FortiGate pricing and cost advice

"It is expensive, especially with the premium functions. For one of the clients, it was very expensive. You have to use it more at an enterprise level, and there, it was not at an enterprise level. So, it was very costly, but security-wise, it was a very wise decision to use it that way."

"Azure Firewall comes with Azure native services. We did not buy any kind of license for it. Whether you have a free subscription or a pay-as-you-go model, you can deploy the Azure Firewall service... The amount that you use will determine how much you pay."

"Before choosing this solution, we evaluated others, and we found this to be the most cost-effective."

"I rate the product pricing a five out of ten."

"The pricing of Azure Firewall is pay-as-you-go. Fortinet also has a pay-as-you-go model, but Azure's pricing is higher and, with FortiGate, you also have the license."

"Azure Firewall is quite an expensive product."

"The solution is cheaper than other brands. My company has an enterprise contract and we finally got a good price with Azure."

"Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."

More Azure Firewall pricing and cost advice

"The product is expensive but also valuable."

"I like the flexibility because I am pretty sure you can use the same license on Azure or AWS. I forgot the name of the license, but there is a specific type you can use that lets you interchange them, and that is pretty good. I like that."

"My experience has been extremely positive. It was not a concern because I had an account team that fought for pricing for our company. They were not pushing me to professional services for certain help. I was instantly getting a CloudGuard architect to help us out."

"The product's licensing costs are yearly."

"The price of Check Point CloudGuard Network Security is very high compared to other solutions, such as Fortinet FortiMail. For the over 2,000 mailboxes we use with the solution it is very expensive."

"CloudGuard Network Security's pricing is fine."

"The product is too expensive."

"The tool's monthly costs have undergone a significant reduction, dropping from approximately 12,000 euros to around 4,000. This represents a cost reduction of over 60 percent. However, it's essential to note that while costs decreased in some areas, they increased in others due to shifts in our environment. As our overall environment has grown, currently connecting 50 accounts to the cloud, it's challenging to directly compare costs with the state of our setup three years ago."

More Check Point CloudGuard Network Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

831,020 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

22%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

10%

Government

Manufacturing Company

Computer Software Company

18%

Financial Services Firm

14%

Manufacturing Company

Energy/Utilities Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...

How does Azure Firewall compare with Palo Alto Networks VM Series?

Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the...

Which would you recommend - FortiGate VM or Azure Firewall?

Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigat...

What do you like most about Check Point CloudGuard Network Security?

The tool's most valuable feature is its management console.

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Pricing is high, over $25,000 USD annually. The package offered includes features we may not need, and more flexible ...

What needs improvement with Check Point CloudGuard Network Security?

The pricing is too high. We pay more than twenty-five thousand USD per year, which could be reduced. Moreover, Check ...

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 23% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Meraki MX vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Fortinet FortiGate-VM vs Azure Firewall

Compared 20% of the time

Palo Alto Networks NG Firewalls vs Azure Firewall

Compared 16% of the time

Microsoft Defender for Cloud vs Azure Firewall

Compared 8% of the time

Palo Alto Networks VM-Series vs Azure Firewall

Compared 6% of the time

Check Point NGFW vs Azure Firewall

Compared 5% of the time

More Azure Firewall Competitors

Cisco Secure Firewall vs Check Point CloudGuard Network Security

Compared 14% of the time

VMware NSX vs Check Point CloudGuard Network Security

Compared 9% of the time

Akamai Guardicore Segmentation vs Check Point CloudGuard Network Security

Compared 9% of the time

Fortinet FortiGate-VM vs Check Point CloudGuard Network Security

Compared 8% of the time

Google Cloud Armor vs Check Point CloudGuard Network Security

Compared 5% of the time

More Check Point CloudGuard Network Security Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Azure Firewall

Download Azure Firewall product report

Check Point CloudGuard Network Security

Download Check Point CloudGuard Network Security product report

Check Point CloudGuard Network Security report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security

Learn More

Fortinet

Microsoft

Check Point Software Technologies

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Azure Firewall is a user-friendly, intuitive, cloud-native firewall security solution that provides top-of-the-industry threat protection for all your Azure Virtual Network resources. Azure Firewall is constantly and thoroughly analyzing all traffic and data packets, making it a very valuable and secure fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. Azure Firewall allows users to create virtual IP addresses and provides for secure DDoS protection for the virtual machines on your network. It also provides fast and efficient east-west and north-south traffic security.

Azure Firewall is a managed, cloud-based network security service built to protect your Azure Virtual Network resources. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

Azure Firewall has two significant offerings, Standard and Premium.

Azure Firewall Standard works directly with Microsoft Cyber Security and supplies excellent L3-L7 filtering and threat awareness. The proactive real-time threat awareness will quickly alert you and immediately deny all traffic to and from any known problematic or suspicious domains or IP addresses. Microsoft Cyber Security is updated continually to protect against all new and known potential threats at all times. To learn more about Azure Firewall Standard, click here.

Azure Firewall Premium provides everything the standard version does, and additionally adds extra levels of data encryption, network intrusion detection, extended URL filtering, and Web category filters. To learn more about the added features of Azure Firewall Premium, click here.

Key Benefits and Features of Azure Firewall:

High availability - You do not need load balancers with Azure Firewall; it's already built in and ready to go.
Self-scalability - Azure Firewall is intuitive and will auto-scale as needed based on traffic flow to be ready for peak traffic times.
Threat awareness - Using Microsoft Cyber Security to filter traffic, Azure Firewall will deny any known problematic threats to keep your network safe.
Additional IP addresses - You can securely add up to 250 public IP addresses with Azure Firewall
Improved web category filtering - You can set up specific protocols to allow or deny categories within websites that are deemed inappropriate for use within your network. You have the ability to organize categories based on a defined set of descriptions.

What our real users have to say:

Many PeerSpot users found Azure Firewall to be very user-friendly and easy to use. They liked that it offers seamless integration to the cloud and were especially pleased with the threat filtering options.

Regarding integration and threat intelligence, our users wrote:

“The most valuable feature is the integration into the overall cloud platform.”

“The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats.”

“I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system.”

Check Point CloudGuard Network Security is designed to secure cloud assets, offering robust firewall capabilities and protection for both internal and external traffic across AWS, Azure, and on-premises environments.

Enterprises rely on Check Point CloudGuard Network Security for comprehensive network protection, threat prevention, and compliance enforcement. Supporting virtual machines and hybrid environments, it delivers advanced security measures including intrusion prevention and application control. Key functions include firewall security, network segmentation, and cloud environment protection, ensuring businesses maintain a secure and compliant IT infrastructure.

What are the most valuable features of Check Point CloudGuard Network Security?

Flexible Architecture: Adaptable to diverse cloud and on-premises environments.
UTM Capabilities: Unified Threat Management delivering multi-layered security.
Advanced Threat Prevention: Includes IPS, application control, and anti-malware.
Auto-scaling: Automatically adjusts capacity based on traffic and demand.
Comprehensive Threat Prevention: Protects against known and unknown threats.
Ease of Use: Streamlined deployment and management processes.
Integration with Cloud Platforms: Seamlessly works with AWS, Azure, and other clouds.
Centralized Management: Single-pane-of-glass visibility and control.
User Identity Awareness: Enhances security policies based on user identities.
Zero-touch Deployment: Simplifies initial setup and deployment.

What benefits and ROI can users expect from Check Point CloudGuard Network Security?

Email Protection: Shields email communications from threats.
Anti-malware: Guards against malicious software.
Single-pane-of-glass Visibility: Provides a unified view for better security management.
Scalability: Grows with the business needs.
Seamless Cloud Transition: Eases the move from on-premises to cloud environments.

In industries such as financial services, healthcare, retail, and education, Check Point CloudGuard Network Security is implemented to safeguard sensitive data, ensure compliance, and protect critical infrastructure. Companies in these sectors benefit from its advanced threat prevention and flexible deployment options, meeting their stringent security requirements while enabling secure digital transformation.

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Physicians Choice Laboratory Services, Helvetica Insurance

Azure Firewall vs. Check Point CloudGuard Network Security