Check Point CloudGuard CNAPP vs Check Point CloudGuard Network Security comparison

Check Point CloudGuard CNAPP vs. Check Point CloudGuard Network Security

Download the complete report

Helped 801,525 peers since 2012

Categories and Ranking

Check Point CloudGuard CNAPP

Ranking in Cloud and Data Center Security

8th

Average Rating

8.6

Number of Reviews

Ranking in other categories

Vulnerability Management (7th), Container Management (7th), Container Security (6th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (3rd)

Check Point CloudGuard Netw...

Ranking in Cloud and Data Center Security

6th

Average Rating

8.6

Number of Reviews

125

Ranking in other categories

Firewalls (8th), Managed Security Services (2nd), Software Defined WAN (SD-WAN) Solutions (3rd), WAN Edge (3rd), Unified Threat Management (UTM) (6th)

Featured Reviews

Samir-Paul

Sr. Security Consultant at a computer software company with 5,001-10,000 employees

Apr 26, 2024

Provides centralized visibility and helps identify any misconfigurations or compliance issues

The first improvement area is the impact analysis. The impact analysis that they perform can be improved. It is currently lacking. It should be more detailed. The second improvement area is that they should adopt more remediation on various resources. The third improvement area is that they should introduce Gen-AI capability on their platform so that remediation can be very easy. They have the threat hunting and detection part, but they need to adapt more on the Gen-AI side so that the remediation can happen automatically. People should be able to do remediation with a click. It would be a very good feature to have for remediation. These are three main improvement areas for them. I have already provided Check Point feedback about these through another channel. With respect to Cloud Workload Protection, they should introduce more granular security control in terms of policy. I feel they should work on it and develop it more. They need to provide more granular security control in terms of various attacks, such as the MITRE ATT&CK framework. They need to give a different policy for each technique and tactic such as ransomware, exploitation, etc. I also work with CrowdStrike, so I know about different types of granular controls. From the Cloud Workload Protection perspective, they need to improve the policy framework.

Read full review

reviewer2379471

Cyber Security Architect at a manufacturing company with 10,001+ employees

Mar 15, 2024

Streamlines processes, integrates well, and has reasonable pricing

CloudGuard Network Security helps to streamline bringing in the hardware and putting the effort upfront to do the automation. It takes all that effort away from a human. It streamlines the process and provides security on the cloud. CloudGuard Network Security provides us with unified security management across hybrid clouds as well as on-prem. It gives us one place to look. Security teams have common logging, and our SIEM integration is already built in. We have a gateway. It is logging for SIEM log servers, and they are being sent to our SIEM. No additional changes are required by anyone to know where to look. It is all integrated into our existing solution. We are pretty confident in our cloud network security using CloudGuard Network Security. I would rate our confidence level a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We like the ability to investigate, analyze, and generate reports."

"The system has deployed security tools to enhance effective investigations in the entire company networking system."

"It learns from behavior, attacks, management, detections, captures packets, real-time analysis, et cetera. It's generating knowledge from a variety of sources for an excellent analysis."

"The solution has intelligence that integrates with a range of threat intelligence feeds, including Check Point's ThreatCloud, to provide real-time intelligence on emerging threats."

"All of the features are very useful in today's market."

"Helps identify and correct misconfigurations in cloud environments, ensuring that infrastructure and applications are secure and optimized."

"I can take proactive actions based on an alert without having to interact with the platform directly."

"The most valuable feature is the CloudBots for auto-remediation of security findings."

More Check Point CloudGuard CNAPP pros

"The most valuable feature for us is the scale set, which allows us to scale horizontally, vertically and dynamically depending on the traffic load."

"The IPS, application and URL filtering, as well as Identity Awareness, are all very valuable features."

"The product gives analytic reports."

"The most valuable feature is threat prevention."

"The tool's most valuable features are the REST APIs that help to automate the deployment and maintenance process. It helps us to reduce time to 15-25 minutes compared to the manual process which used to take around two to three hours."

"I like the firewall and the virtual machine. I also like that it's compatible with Amazon Web Services and Azure."

"The visibility is most valuable. It allows us to see all of our devices from one place, and it gives us the ability to manage push updates and things like that from one place."

"The initial setup is pretty easy."

More Check Point CloudGuard Network Security pros

Cons

"For businesses with varied IT ecosystems, increasing the integration capabilities with additional third-party products and services would increase flexibility and user-friendliness."

"The security of Check Point CloudGuard Posture Management could improve. There are always new security issues coming out."

"The setup can be better. With every other Check Point product, the setup is scripted. You just approve versions, and then you are off. The setup for this solution is still very much manual. I would like to see that transition to more of a scripted setup."

"Check Point tools need to improve the latency in the portal since they take a long time to load."

"I would like an interface more adapted to cell phones or tablets."

"Currently, this solution is somewhat expensive."

"Integration could be improved."

"The reporting has a lot of opportunities to continuously improve so that we can continue to show value."

More Check Point CloudGuard CNAPP cons

"The solution lacks the capability to scale effectively."

"I would like to see a step-by-step initial installation of the firewall. That would be really helpful. Like in Oracle appliances, when you start it asks you, what's your current IP address? An initial setup should be a step by step and intuitive process. You click on "begin," it asks you some simple questions. You fill in the blanks - your current IP address, what you want to do, you want to set up a site to site VPN, for example, that kind of thing. That would be the smartest thing to have."

"CloudGuard Network Security's pricing is expensive. We have encountered issues with its licensing."

"The convergence time between cluster members is still not perfect. It's far away from what we get in traditional appliances. If a company wants to move mission-critical applications for an environment to the cloud, it somehow has to accept that it could have downtime of up to 40 seconds, until cluster members switch virtual IP addresses between themselves and start accepting the traffic. That is a little bit too high in my opinion. It's not fully Check Point's fault, because it's a hybrid mechanism with AWS. The blame is 50/50."

"The product needs to improve technical support."

"While Check Point does offer some VWAN offerings, they appear to be more static and less tailored to cloud-native environments compared to Palo Alto's dynamic and flexible approach."

"The solution needs to improve the interruptions that happen during gateway upgrades."

"There are some usability issues we'd like to see improved."

More Check Point CloudGuard Network Security cons

Pricing and Cost Advice

"The solution’s pricing is a little bit high."

"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."

"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."

"In the beginning, the price of Dome9 was cheap, whereas now it is not."

"Right now, we have licenses on 500 machines, and they are not cheap."

"Everything in this field is very expensive."

"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."

"The license fee is high."

More Check Point CloudGuard CNAPP pricing and cost advice

"I do not know the exact price, but it is fairly priced. It is neither cheap nor costly."

"I know that we have an enterprise agreement with Check Point. That gives us some benefits, but I do not have more information about that."

"The tool's monthly costs have undergone a significant reduction, dropping from approximately 12,000 euros to around 4,000. This represents a cost reduction of over 60 percent. However, it's essential to note that while costs decreased in some areas, they increased in others due to shifts in our environment. As our overall environment has grown, currently connecting 50 accounts to the cloud, it's challenging to directly compare costs with the state of our setup three years ago."

"The cost is on the higher side, as it is based on workload, hence we need to decide which VPC or workload needs to be part of CloudGuard."

"The pricing and licensing have been good. We just had to do a license increase for our portion of it. We had that done within a couple of days. Given the fact that it's purely a software-based license, it ends up being even quicker than doing it for an on-prem firewall."

"The product is too expensive."

"The price of Check Point CloudGuard Network Security is very high compared to other solutions, such as Fortinet FortiMail. For the over 2,000 mailboxes we use with the solution it is very expensive."

"We pay approximately ‎€150,000 ($166,000 USD) per year."

More Check Point CloudGuard Network Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Cloud and Data Center Security solutions are best for your needs.

See recommendations

801,525 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

18%

Computer Software Company

14%

Manufacturing Company

Security Firm

Computer Software Company

16%

Financial Services Firm

13%

Manufacturing Company

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Check Point CloudGuard Posture Management?

The visibility in our cloud environment is the most valuable feature.

What is your experience regarding pricing and costs for Check Point CloudGuard Posture Management?

The price is on the higher end.

What needs improvement with Check Point CloudGuard Posture Management?

We have concerns regarding the pricing and would appreciate seeing some improvements.

What do you like most about Check Point CloudGuard Network Security?

The tool's most valuable feature is its management console.

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

The pricing and licensing are fine. There's not much more variation in the price for us. We have a bundle solution.

What needs improvement with Check Point CloudGuard Network Security?

We've had issues with the technical support. Their customer services need to be much better. They are unable to respond within a defined timeline, even within the requisite SLA. We need more immedi...

Prisma Cloud by Palo Alto Networks vs Check Point CloudGuard CNAPP

Comparisons

Compared 27% of the time

Wiz vs Check Point CloudGuard CNAPP

Compared 19% of the time

Microsoft Defender for Cloud vs Check Point CloudGuard CNAPP

Compared 11% of the time

AWS GuardDuty vs Check Point CloudGuard CNAPP

Compared 11% of the time

Orca Security vs Check Point CloudGuard CNAPP

Compared 3% of the time

More Check Point CloudGuard CNAPP Competitors

VMware NSX vs Check Point CloudGuard Network Security

Compared 15% of the time

Fortinet FortiGate vs Check Point CloudGuard Network Security

Compared 14% of the time

Azure Firewall vs Check Point CloudGuard Network Security

Compared 12% of the time

Cisco Secure Firewall vs Check Point CloudGuard Network Security

Compared 11% of the time

Akamai Guardicore Segmentation vs Check Point CloudGuard Network Security

Compared 11% of the time

More Check Point CloudGuard Network Security Competitors

Product Reports

Check Point CloudGuard CNAPP

Download Check Point CloudGuard CNAPP product report

Check Point CloudGuard Network Security

Download Check Point CloudGuard Network Security product report

Check Point CloudGuard Network Security report

Also Known As

Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security

Learn More

Check Point Software Technologies

Overview

CloudGuard CNAPP provides prevention-first cloud security from code-to-cloud.

More Context Means Actionable Security, Smarter Prevention

CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle.

Unified & Modular Platform
A single platform unifying SAST, CSPM, DSPM, CIEM, CWPP, WAF, and Cloud Detection and Response.
Continuous Cloud Security
Automatic enforcement of security requirements and internal policies from development to runtime.
Real-time Detection & Protection
Real-time incidents and vulnerability detection with a single-click or automated remediation.

What are the most important features?

Discovery: Identifies all assets in the cloud environment for better management.
IAM Role Control: Manages identities and access permissions securely.
Compliance Reporting: Provides automated compliance checks and detailed reports.
Centralized Dashboard: Offers a consolidated view of security posture.
Threat Intel Integration: Enhances threat detection with integrated intelligence.
Traffic Visibility: Monitors and analyzes cloud traffic in real-time.
Automated Remediation: Implements fixes automatically when issues are detected.
Asset Management: Manages cloud assets efficiently across environments.
Proactive Threat Detection: Identifies threats before they impact operations.
CloudBots for Auto-Remediation: Automates response to security incidents.

What benefits or ROI should users consider?

Enhanced Security Posture: Strong protection across multiple cloud platforms.
Real-Time Alerts: Immediate awareness and response to potential threats.
Automated Compliance: Reduces manual effort with automated checks and reporting.
Centralized Management: Streamlined management of cloud security and compliance.
Cost Efficiency: Saves time and resources via automation and integrated tools.

Check Point CloudGuard Network Security is designed to secure cloud assets, offering robust firewall capabilities and protection for both internal and external traffic across AWS, Azure, and on-premises environments.

Enterprises rely on Check Point CloudGuard Network Security for comprehensive network protection, threat prevention, and compliance enforcement. Supporting virtual machines and hybrid environments, it delivers advanced security measures including intrusion prevention and application control. Key functions include firewall security, network segmentation, and cloud environment protection, ensuring businesses maintain a secure and compliant IT infrastructure.

What are the most valuable features of Check Point CloudGuard Network Security?

Flexible Architecture: Adaptable to diverse cloud and on-premises environments.
UTM Capabilities: Unified Threat Management delivering multi-layered security.
Advanced Threat Prevention: Includes IPS, application control, and anti-malware.
Auto-scaling: Automatically adjusts capacity based on traffic and demand.
Comprehensive Threat Prevention: Protects against known and unknown threats.
Ease of Use: Streamlined deployment and management processes.
Integration with Cloud Platforms: Seamlessly works with AWS, Azure, and other clouds.
Centralized Management: Single-pane-of-glass visibility and control.
User Identity Awareness: Enhances security policies based on user identities.
Zero-touch Deployment: Simplifies initial setup and deployment.

What benefits and ROI can users expect from Check Point CloudGuard Network Security?

Email Protection: Shields email communications from threats.
Anti-malware: Guards against malicious software.
Single-pane-of-glass Visibility: Provides a unified view for better security management.
Scalability: Grows with the business needs.
Seamless Cloud Transition: Eases the move from on-premises to cloud environments.

In industries such as financial services, healthcare, retail, and education, Check Point CloudGuard Network Security is implemented to safeguard sensitive data, ensure compliance, and protect critical infrastructure. Companies in these sectors benefit from its advanced threat prevention and flexible deployment options, meeting their stringent security requirements while enabling secure digital transformation.

Sample Customers

Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners

Physicians Choice Laboratory Services, Helvetica Insurance

Check Point CloudGuard CNAPP vs. Check Point CloudGuard Network Security