Check Point Application Control vs CyberArk Endpoint Privilege Manager comparison

"It improved the performance outcome for all our verticals due to more automation in system security, which helped in the identification and blockage of malware-affected applications and widgets."

"The real-time monitoring and reporting functionalities provide visibility into application usage patterns and potential security incidents, enabling proactive responses to emerging threats."

"The most valuable feature of Check Point Application Control is VPN access and the ability to lock out sites we do not want users to have access. The reporting monitoring software in Check Point Application Control is fantastic. For example, log filtering is beneficial."

"This solution is stable and we have not had any issues."

"The tool's most valuable features are VPN access, website defense, and maintenance."

"The automatic updates of new applications and signatures guarantee protection at all times without the need to apply a change manually."

"The overall security of the environment has been greatly improved by the Check Point NGFWs. Before implementing the Check Point solutions, we relied on the Cisco ACLs and Zone-Based firewalls configured on the switches and routers, which in fact a simple stateful firewall, and currently appear to be not an efficient solution for protecting from the advanced threats."

"One of the greatest capacities and the benefits it gives us is the ability to control applications based on defining access or denial policies in specific applications, groups, or category profiles."

"The tool is an endpoint management system. It monitors everything a standard user does and helps elevate privileges when necessary for advanced users. It keeps an auditable trail of all activities. Practically, it stops and blocks potentially hazardous user behavior, whether intentional or unintentional. Certain companies must use endpoint management software because of national or international rules or ISO norms."

"The most valuable feature of the solution is its performance."

"CyberArk Endpoint Privilege Manager is entirely cloud-based, so no further upkeep is required."

"This is the number one product for privilege account security."

"I have always found that CyberArk is a very tight, foolproof product compared to most other products available."

"CyberArk Endpoint Privilege Manager (EPM) 's most valuable feature is its ability to manage user application privileges and protect against ransomware attacks by controlling access to specific files and applications."

"We did immediately begin to see results when using CyberArk."

"It doesn't affect operational efficiency. If you set everything correctly, the user doesn't notice that it is in the background."

"I recommend network upgrades in the next release to meet most company demands and daily changes."

"It's important that there is the option to validate the policies before applying them."

"Check Point licenses are somewhat expensive."

"They need to improve the graphical interface."

"SD-WAN functionality can be added."

"There are many aspects we do not like about the solution and there are a lot of alternatives available on the market. Some of the settings are buried deep within the solution making it a challenge to navigate. It would be helpful if it was more intuitive. Additionally, there can be some settings that are in multiple places, this leaves the user not knowing what settings are needed to be modified for the wanted result. I have lost confidence because I do not know if I change a setting or if it is going to have the desired result I intended it to do."

"It would be nice if there was a platform and small application owners could come and send their own applications' name and IP information from there."

"Usability needs to be improved."

"The turnaround time of the support team is an area of concern where improvements are required."

"They need much better integration with Azure AD."

"The price of the solution should improve."

"Performance could be better. We have a couple of problems with CyberArk right now. One of the problems is performance in our environment. Support also takes a long time to respond. If the user already has local admin rights, then I can't collect any events in the console from this device. There are also some options in CyberArk that are not working properly, and are not helpful in this case. I can't collect any information to create a proper policy for the device. I have to investigate everything manually, or even disable the local admin from the device. I can collect the events only after this, and it's very time consuming. In my case, it's a waste of resources."

"The installation process is pretty difficult."

"My recommendation for improvement is to add functionality for when users request access to an application. There's a pop-up UI, but it's not very customizable. I suggest creating a UI where we can write scripts or use SDKs to enhance it. This could automatically create tickets in a system like ServiceNow when users request an application. If a manager approves, we could automatically push policies to those users."

"CyberArk Endpoint Privilege Manager can be better by making its UI more consistent."

"The solution is very expensive."

"Check Point Application Control is expensive. The tool's licensing costs are yearly."

"The blade has its cost but you can take advantage of the license package to pay less for it."

"It's a bit expensive and it could be cheaper, but it's part of business politics."

"The price of Check Point Application Control is high. The support and ecosystem around the solution are expensive."

"I think application control has become a basic feature and it should be enabled automatically, without having to purchase a separate license for it."

"I feel that the price of the product is nominal. It must be around 10 to 15 USD per installation. I rate the product price an eight to nine out of ten, where one is high price, and ten is low price."

"Pricing depends on how many devices you use. Right now, on-premise, it costs us a little, but it's worth it. It seems like the cloud solution is much more expensive. We got this solution one year ago, and it's like we bought the solution, and now they are not going to support it on-premise anymore. We are in the implementation phase, and we missed this, and we already paid for the licenses. This is wasted time from my perspective, and CyberArk should be more customer-friendly."

"The tool's pricing is reasonable for customers."

"The professional services for one eight-hour day would be $1,800."

"The solution's pricing is reasonable compared to other vendors' products."

"I think that it was in the range of $200,000 that had to get approved."

"licensing for this solution is based on the number of APV (privileged users), and the number of sessions that you want to record."

"The solution requires an annual license to use it. There can be some extra costs in some cases."