Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard Network Security vs Check Point Harmony SASE (formerly Perimeter 81) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 24, 2024
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Check Point CloudGuard Netw...
Ranking in Firewalls
8th
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
127
Ranking in other categories
Managed Security Services Providers (MSSP) (2nd), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (6th), WAN Edge (3rd), Unified Threat Management (UTM) (6th)
Check Point Harmony SASE (f...
Ranking in Firewalls
13th
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
57
Ranking in other categories
Secure Web Gateways (SWG) (5th), Anti-Malware Tools (8th), Enterprise Infrastructure VPN (7th), ZTNA as a Service (4th), ZTNA (3rd), Secure Access Service Edge (SASE) (6th)
 

Mindshare comparison

As of December 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.5%, up from 17.3% compared to the previous year. The mindshare of Check Point CloudGuard Network Security is 0.3%, down from 0.3% compared to the previous year. The mindshare of Check Point Harmony SASE (formerly Perimeter 81) is 0.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
PRASHANT GARJE - PeerSpot reviewer
Cost-effective, supports automation, and provides good security
We have done a lot of automation with the firewall, but sometimes, there are some failures because of some bugs. The fixes for them are still not available. We have daily or weekly communication with the Check Point people giving support in the India region, but we have not seen much improvement or response to our requests for some additional features. We are moving to infra as a code, so we are expecting more advancements in this product. Just installing the patches is not going to help us. They need to focus on this area. I expect Check Point CloudGuard to come up with some AI/ML integration. A firewall is the first L3 security device available to you. It is the single point that manages or processes the traffic for an organization. There is a possibility that the device goes down or gets rebooted for any reason. The integration of artificial intelligence with the devices can help us to know in advance that there might be a surge in traffic. There might be a spike in the traffic, so we can have some additional firewalls integrated. This predictive analysis has to be there. This way, if required, a second, third, or fourth firewall can come into the picture. All the firewalls will process the traffic simultaneously. I am expecting such capability. This sort of feature is available with AWS. We are deploying all the firewalls on AWS, but it would be easy if, in the future, such a feature is available from the OEM or Check Point itself. It will be very helpful for the organization. We have had a couple of outages because of some misconfiguration. They were human errors but there were no prior indications that if we were making these sorts of changes, this would happen. People making the changes on the firewall were not aware of this, and that is the reason why the outage happened. In a financial organization, an outage of even five minutes can cost a lot.
Daniel Goldfeld - PeerSpot reviewer
Great SAML and SCIM support with the ability to deploy site-2-site tunnels with specific IP restrictions
The platform still lacks relevant dashboards and the ability to customize them based on our needs. We would love to also see real-time usage and traffic data as well as be able to build reports. Adding better QoS and traffic shaping to the product will be a nice add-on as it'll allow our admins to prioritize some traffic over others and identify users that are heavy traffic users in the platform. We need the ability to connect the agent prior to computer login. The ability to allow a silent connection (i.e. the agent is completely invisible to the user) could be cool for bigger organizations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The security fabric is excellent."
"We can use our devices to check all of the perimeters. It secures email websites."
"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"We use a lot of function on the IPS and it works well for us."
"LinkGreat firewall capabilities"
"Anti-Spam web content filterinG."
"The next-gen features, the unified threat management capabilities are something that just about everybody is interested in at this point."
"Fortinet FortiGate is a stable solution."
"A unique architecture makes this product stand out from other solutions."
"The tool's most valuable features for us are threat prevention, HTTPS inspection, and the Anti-Bot blade. Threat prevention helps to protect our assets from threats. HTTPS inspection ensures secure communication, and the Anti-Bot blade is particularly helpful in detecting C2 servers, enhancing our ability to identify malicious activities and protect our network."
"The solution's most valuable feature is scalability. We can increase the number of CPUs, memory, and firewall throughput easily. Using CloudGuard Network Security for managing cloud firewall rules is considered easier than using the normal security groups provided by Azure or AWS."
"We find all the features valuable, particularly the firewall, application control, URL filtering, and HTTPS detection."
"I like how straightforward it is and simple it is to implement in the cloud."
"It really is a pretty complete solution."
"The most valuable feature for me is that you have just one license. You can test and implement everything you need with one license. You do not need to pay for separate module licenses when you want IPS or other features."
"The central management feature is a big plus, allowing us to manage both local and cloud gateways from one platform."
"The tool is easy to use and set up."
"The product has a reasonably high pricing."
"What I like about Harmony Connect is that every packet through the network is screened and filtered so that only clean packets can enter the PC. This is useful for a variety of security reasons because you no longer need to worry about things like DDoS attacks."
"The reports give a simple overview of the traffic pattern within the organization."
"Using the preboot VPN option, we can reset a user who is working remotely that has forgotten their Windows login credentials."
"It's improved the security of every single OS in the organization as well as the visibility and security capabilities."
"Review of exported and imported packages and protection and content filtering have been useful."
"The monitoring and granular policies are very helpful."
 

Cons

"They should offer special pricing to premium partners and customers."
"The price of FortiGate should be reduced because there are some other leading products that are cheaper."
"The solution is very expensive."
"Fortinet FortiGate could improve by having more capabilities for troubleshooting VPN connections. For example, I do get some feedback about the current status, but I could use some history and logging of important events. The information is logged in our Syslog server, but I could use that information from the device. If they could provide a GUI to have some more insight on what's going with my VPN would be useful."
"The Wi-Fi controller needs a lot of improvement."
"The reporting in Fortinet FortiGate could improve. Customers are having to purchase additional reporting components. When I have used the Sophos solution it is a complete solution, in Fortinet FortiGate you have to use additional tools to have the features needed."
"It is stable, but its stability can be improved."
"The feature which gives us a lot of pain is ASIC architecture."
"New features have been introduced recently, but they have not yet been integrated into CloudGuard Vsec."
"We miss full blade support for all blades that are compatible with the cluster. Especially notable is the lack of support for Identity Awareness in active standby environments for customers. In our setup, transitioning to Connective clusters would be preferable for maintaining connections during failover situations."
"This application can be more integrated with web application firewalls. Better integrations would provide more granularity, which would be helpful for focusing on the application itself and preventing attacks. It would be good to include the cross-domain search. If you have multiple firewalls that are managed on the same platform and you want to check who is using some particular objects or where a specific ID is being used, it should provide an option for this kind of search instead of having to check one by one on each firewall."
"It's meeting our needs at this time. If I could make it better, it would be by making it more standalone. That would be beneficial to us. I say that because our current platform for virtualization is VMware. The issue isn't any fault of Check Point, it's more how the virtualization platform partners allow for that partnership and integration. There has to be close ties and partnerships between the vendors to ensure interoperability and sup-portability. There is only so far that Check Point, or any security vendor technology can go without the partnership and enablement of the virtualization platform vendor as it relies on "Service Insertion" to maintain optimal performance."
"People don't know about the tool's features. There's a lack of skill. Users require more knowledge on how to integrate it into the cloud environment and orchestrate routing. So, it's not necessarily a CloudGuard Network Security or Check Point issue but more about integration, knowledge, and understanding."
"Check Point CloudGuard Network Security should give productive reports as per business requirements. It needs to improve support since the time-limit extended beyond a day. It should include more seamless API integrations."
"At the cost level, the solution is somewhat expensive."
"While Check Point does offer some VWAN offerings, they appear to be more static and less tailored to cloud-native environments compared to Palo Alto's dynamic and flexible approach."
"The product needs to work on the integration of alerts with different SIEM or security solutions."
"I don't know if it is technically feasible, however, if the Desktop App could be used as a Web App or a Chrome Extension it would be very nice."
"Automation and scalability are areas where the solution lacks and needs to improve."
"When it comes to Check Point Quantum SASE, though the OEM provides security, it is not 100 percent full-fledged to meet the requirements from the customers' end."
"The suspend feature needs more control."
"An improvement could be made in terms of achieving better coverage in such complicated regions as the Asia Pacific, China, and Russia."
"The Point locations need to improve the latency and speed."
"The access to the portal should be faster. It shouldn't crash a lot."
 

Pricing and Cost Advice

"Fortinet FortiGate as a less expensive solution than Palo Alto."
"No comment."
"As far as I'm aware, in our case, it's just a yearly pricing arrangement with no additional licensing costs."
"Other firewalls are more expensive than Fortinet FortiGate, such as the Azure firewall."
"The pricing is very reasonable."
"For our organization, the licensing costs are approximately $7,000 per year."
"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."
"The licensing costs are very low."
"CloudGuard Network Security's pricing is fine."
"The pricing is highly competitive and advantageous, offering great value."
"It's not very expensive. It isn't very cheap either. Its price is okay. It depends on how much money you have. It might be expensive for some companies. Its licensing is on a yearly basis."
"My experience has been extremely positive. It was not a concern because I had an account team that fought for pricing for our company. They were not pushing me to professional services for certain help. I was instantly getting a CloudGuard architect to help us out."
"We have a pretty good partnership with Check Point. We have a global subscription and agreement. They give us a pretty good corporate discount."
"I know that we have an enterprise agreement with Check Point. That gives us some benefits, but I do not have more information about that."
"It is fairly priced, but it can be a little expensive from time to time."
"There is flexibility in the different licensing models that are offered."
"The product's pricing model accommodates diverse needs and deployment sizes."
"The pricing is good, especially when you compare it to other firewall or UTM solutions from FortiGate or SonicWall, where you would have to invest about four hundred thousand rupees for 100 users over a three-year period."
"The product is neither cheap nor expensive."
"The solution is priced appropriately considering its uses. For an essential license, a user pays only 30 USD per month. For an enterprise version, the prices can be negotiated with the company."
"The cost of the solution's licenses depends on the particular use cases."
"Perimeter 81 charges separately for gateways and VPN connectivity, but compared to Azure, it seemed more reasonable."
"I consider the product to be a medium-priced solution. There are no additional costs attached to the tool."
"The pricing of Check Point is relatively high when compared to other competitors like Palo Alto and Fortinet. While Palo Alto may be on the higher side in terms of cost, Check Point's pricing is similar to that of Fortinet. In some cases, Check Point offers better value for the features it provides. We initially considered other options but ultimately decided to purchase hardware that came with three years of iOS. This approach eliminated the need for any additional costs associated with Check Point. I would rate it 10 out of 10."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
824,095 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
18%
Financial Services Firm
14%
Manufacturing Company
7%
Energy/Utilities Company
6%
Computer Software Company
20%
Financial Services Firm
6%
Manufacturing Company
6%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Check Point CloudGuard Network Security?
The tool's most valuable feature is its management console.
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Pricing is high, over $25,000 USD annually. The package offered includes features we may not need, and more flexible ...
What needs improvement with Check Point CloudGuard Network Security?
The pricing is too high. We pay more than twenty-five thousand USD per year, which could be reduced. Moreover, Check ...
What do you like most about Perimeter 81?
Even after restarting, it tries to quickly reestablish connection which is very helpful.
What is your experience regarding pricing and costs for Perimeter 81?
It's essential to consider the organization's specific requirements and budget. Here are some general recommendations...
What needs improvement with Perimeter 81?
In terms of improvement, Perimeter 81 could enhance its reporting and analytics capabilities to provide more detailed...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
Check Point Quantum SASE
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Physicians Choice Laboratory Services, Helvetica Insurance
Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith
Find out what your peers are saying about Check Point CloudGuard Network Security vs. Check Point Harmony SASE (formerly Perimeter 81) and other solutions. Updated: December 2024.
824,095 professionals have used our research since 2012.