No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs ShieldX comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
591
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Check Point Cloud Firewall ...
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
166
Ranking in other categories
Firewalls (8th), Managed Security Services Providers (MSSP) (1st), Software Defined WAN (SD-WAN) Solutions (5th), Cloud and Data Center Security (6th), WAN Edge (3rd), Unified Threat Management (UTM) (4th)
ShieldX
Average Rating
9.2
Number of Reviews
4
Ranking in other categories
Microsegmentation Software (11th)
 

Mindshare comparison

Firewalls Mindshare Distribution
ProductMindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)2.1%
Fortinet FortiGate16.0%
OPNsense8.9%
Other73.0%
Firewalls
Microsegmentation Software Mindshare Distribution
ProductMindshare (%)
ShieldX1.7%
Illumio24.7%
Akamai Guardicore Segmentation21.3%
Other52.3%
Microsegmentation Software
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at a consultancy with 51-200 employees
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Tejas Jain - PeerSpot reviewer
Principle Cloud Architect at a tech services company with 11-50 employees
Cloud security has unified visibility and risk mitigation but still needs stronger features
Check Point Cloud Firewall (formerly CloudGuard Network Security) is definitely lagging behind its peers. I am not sure what the reason is. Compared to Palo Alto, they are not there in terms of capabilities and feature set. I do not think there are any obvious misses, but there is mostly lesser adoption in the industry. Regarding the negatives, sometimes we encounter challenges, especially if a feature may not be working, but that is typical of any vendor. There is no glaring gap; it is a solid product, but based on my experience, the adoption has not been on par with what its peers are doing. From time to time, we do face challenges with some features, especially if you need to configure a policy where you may need false positive fine-tuning. Sometimes, you have these anomaly detections, which are crucial from a zero-day attack perspective, but they can create a lot of false positives. When you have to tweak, you sometimes need to bring in technical assistance or professional services to achieve what you want. The documentation may not be quite sufficient. There were instances in the past, but I am not sure if they have ramped it up quite significantly recently.
MP
IT Director at park holidays uk
Proactively monitors, blocks, and reports what it has blocked; and self-updates meaning there is zero maintenance
The most valuable feature is the automatic scaling. With its microservices, it scales both up and down, depending on traffic and throughput. The traffic through our website depends on holiday bookings. It's very quiet in November through January, and then our traffic picks up quite rapidly and, at our peak, we will take in excess of a million pounds of business a day through our website. The UI was also one of the huge selling points. My web development manager was blown away with the detail and the granularity that you can get out of the UI. It is a very strong and informative UI, with the amount of data it provides. Uptime on the system has been 648 days and we do very little to it because it self-updates and alerts. It does everything that we need it to do, so the administration side of it is zero. One of the beauties about ShieldX is that it's such a good "fire-and-forget" product.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Fortinet FortiGate SWG is its stability."
"Fortinet FortiGate has a threat detection capacity compared to other vendors."
"It is simple to manage, and there are a lot of functionalities in the same box."
"The detection is great."
"The firewall engine is very good, very suitable for picking up Zero-day threats, and it has protected us from two or three instances, thanks to this engine."
"It is a safe product."
"The solution provides an easy way to filter information and Fortinet lab is a great place to discover new things."
"FortiGate is a scalable product and our customer has approximately 2,000 users."
"Customer Service: Excellent – the vendor always supports us and is very proactive."
"Check Point management is way easier."
"The product has allowed us to develop applications from the cloud - even with large environments and well-segmented security lines."
"The solution has improved our company because our Office 365 solution is secure, and most of our Microsoft solutions are now more secure than before when they had spyware and malware, and we no longer have these problems as before."
"We primarily secure our network using CloudGuard Network Security's next-generation firewall features, including anti-spam, IPS, and URL filtering. Our chosen package for the go-to-market strategy is NGTP. For customers seeking more features, we provide options to upgrade to the tool's advanced packages."
"Check Point CloudGuard Network Security has reduced our threat landscape to a great extent and is performing excellently when it comes to finding risks in external email attachments, which is the major benefit for us."
"Overall, it is an excellent solution, and I would rate it a ten out of ten."
"We consolidated from three management consoles and three clusters to only one, which is a big improvement."
"It has helped us tighten our security posture. Now, staff can only access things that they should be accessing."
"ShieldX makes it a lot easier and a lot simpler to define your policies and define your rules, and that greatly reduces the opportunity for user error."
"The most valuable feature is the automatic scaling. With its microservices, it scales both up and down, depending on traffic and throughput."
"Once you install it you can virtually forget about it; it's very low-maintenance and high-protection."
"For other security professions who are looking for something which is low in cost that does microsegmentation, they should look at ShieldX."
"Very often, when new challengers come in, what they do is they end up coming in at a lower cost with more functionality."
"...It takes the exact same policies that you would apply to your on-premise environment and enables you to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud."
"The Adaptive Intention Engine is fantastic. It allows us to develop security policies using the language of our internal customers. It's machine-learning applied to security workflows. That allows us to much more easily construct the policies that will protect those workflows."
 

Cons

"I would like to have logs, monitoring, and reporting for a month without extra fees."
"We would like to see a better training platform implemented."
"There are SD-WAN network monitoring, SD-WAN features, Industrial Databases, Internet of Things, Detection, etc., however, we do have not licenses for those features. We thought that if you bought a product, you should have all of the features it offers. Why should you need to make so many extra purchases to enable features? They should have one price for the entire offering."
"NGN, reporting and controls."
"The support costs and licensing are sometimes so expensive."
"I am looking to implement key authentication for admin access for the Fortinet product."
"Another issue is how deduplication services don't work reliably after enabling deduplication on Fortinet."
"It should be more stable. There should be full integration within Fortinet products themselves as well as with other third-party products. Especially when you're not dealing with SIEM and the correlation of the security box, we want Fortinet to be able to share that information with as many other products as it can."
"I would like to see more focus on east-west traffic inspection and AWS."
"I think the initial setup of Check Point CloudGuard Network Security can be simpler; onboarding could be more intuitive for new cloud teams, and it could also have more flexible custom reporting and better documentation examples."
"There is room for improvement, especially concerning the integration with the management center. It would be beneficial if tasks that currently require scripts could be performed directly from the GUI."
"It needs to cover additional kinds of infrastructure, like containers and serverless options. It's somewhat limited in that area."
"This application can be more integrated with web application firewalls. Better integrations would provide more granularity, which would be helpful for focusing on the application itself and preventing attacks."
"Integration could be easier, especially with Scale Set and related features."
"The product is quite quick, but when it comes to communication, there is some lack of communication regarding escalation and related matters."
"In case the device is inaccessible due to some issue such as CPU or memory, there is no separate port or hardware partition provided for troubleshooting purposes."
"We are having some issues with their LDAP and integrating it with the Active Directory."
"They need to be consistent in performance and capabilities over time, given the fact that this is new and I want to see where this goes in the next year or so."
"We are having some issues with their LDAP and integrating it with the Active Directory. We can't seem to set it up."
"With any kind of tool like ShieldX, where you're in the cloud instead of a traditional firewall, you're using CPU resources in those environments to provide the protection. So there's a cost associated with CPU resources. I'm pressing upon them to make the product much more efficient and use less CPUs to do the same thing."
"They need to be consistent in performance and capabilities over time, given the fact that this is new and I want to see where this goes in the next year or so. As the vendor continues to evolve and add future functionality, we want to make sure that we are still keeping up with the integrations, etc. Time will be the key factor here. The proper support for some of the latest technologies, Docker containers, etc. They need to keep up with threat landscape, so we will see how the security get layered. This is what we are going to be keeping an eye on."
"The one criticism I might have is there should be a bit more customer care, with regular review meetings on it or regular reports."
"With any kind of tool like ShieldX, where you're in the cloud instead of a traditional firewall, you're using CPU resources in those environments to provide the protection. So there's a cost associated with CPU resources."
"I would like better reports and in-depth reporting."
 

Pricing and Cost Advice

"Price-wise, it's at a good price point for our market."
"The price for the device and software is high. However, the solution is of good quality and has a lot of features."
"It is a good product from a price perspective versus functionality."
"The price could be lower."
"I'll rate FortiGate's pricing a five out of ten since it is moderately priced."
"FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions."
"It was pretty affordable. We did go a little bit above MSRP, but the service pack that was included was quite worth the additional costs. It is competitively priced compared to other major players in the market. It is significantly cheaper than Check Point, which is a primary competitor. Additionally, its pricing is comparable to that of Cisco's ASA and a few other vendors."
"There is a licensing fee; it is on a yearly basis."
"It is expensive."
"I like the flexibility because I am pretty sure you can use the same license on Azure or AWS. I forgot the name of the license, but there is a specific type you can use that lets you interchange them, and that is pretty good. I like that."
"I do not have too much to compare to, but if I compare it with Azure Firewall, Scale Set is quite good. It has quite a good price."
"The cost is on the higher side, as it is based on workload, hence we need to decide which VPC or workload needs to be part of CloudGuard."
"Although I am not in sales and cannot comment extensively on pricing, it is known that Check Point’s licensing can be complex. However, it is a similar experience to other gateways and not particularly unique for cloud protection."
"Pricing of CloudGuard is pretty fair when you have a single account. It's comparable with other cloud providers. But for our use case, it got really pricey when we had to deploy multiple CloudGuards on multiple accounts in different regions, because you can't have CloudGuard protecting multiple regions. That's the big thing."
"You get charged only for what resources you choose and how much traffic actually passes through the firewall, which in turn saves a lot of money."
"The solution's licensing is based on the number of users of the VMs. We follow a pay-as-you-go model. Its pricing is competitive."
"Security policies are now applied as applications are going up. Because it's automated, we don't have the three to four week delay. The insertion of applications in the cloud for us dropped from an average of three to four weeks to a couple of days."
"For a three-year deal we paid £55,000 plus tax... But, and this is a big "but," this was over two years ago. ShieldX had only just hit the market. We were the first company in Europe to buy ShieldX."
"ShieldX ensures that we can have the separation needed for our environment to avoid drastically increasing the cost on the licensing side. From this perspective, it's been very positive and helpful."
"ShieldX also enables us to migrate to cloud environments faster. That is an important part of it for sure because it takes the exact same policies that we would apply to our on-premise environment and enables us to simply apply them to the cloud. It becomes one policy for both on-prem and for the cloud."
"We are actually expecting our costs to drop in the coming year, but it is just a matter of the licensing expiring. That is going to happen in the next six months or so. Then, we will start to see a decrease in overall spend."
"For other security professions who are looking for something which is low in cost that does microsegmentation, they should look at ShieldX. It might not be the big name out there, but it does everything that you are looking for in microsegmentation at a very low price."
"We are very happy with the pricing and licensing. It's about getting a site-wide license. One of the challenges that we've had with our previous vendor had been the cost of licensing."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
896,202 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Outsourcing Company
10%
Computer Software Company
9%
Financial Services Firm
9%
Manufacturing Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business367
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business71
Midsize Enterprise41
Large Enterprise79
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
We have encountered a few subscription-based licensing models for the virtual gateway and security enablement. We hav...
What needs improvement with Check Point CloudGuard Network Security?
I find troubleshooting a bit challenging with Check Point Cloud Firewall (formerly CloudGuard Network Security); one ...
What is your primary use case for Check Point CloudGuard Network Security?
My usual use cases for Check Point Cloud Firewall (formerly CloudGuard Network Security) involve onboarding as an ene...
Ask a question
Earn 20 points
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
APEIRO, ShieldX APEIRO
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Physicians Choice Laboratory Services, Helvetica Insurance
Iowa State University
Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. ShieldX and other solutions. Updated: November 2024.
896,202 professionals have used our research since 2012.