Check Point Harmony SASE (formerly Perimeter 81) vs Netgate pfSense comparison

Check Point Harmony SASE (formerly Perimeter 81) vs. Netgate pfSense

Download the complete report

Helped 831,020 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of Check Point Harmony SASE (formerly Perimeter 81) is 0.1%, up from 0.1% compared to the previous year. The mindshare of Netgate pfSense is 17.6%, down from 23.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

reviewer8099174

IT Help Support - Coop at DistillerSR

Secure access with an intuitive design and straightforward controls

In terms of improvement, Perimeter 81 could enhance its reporting and analytics capabilities to provide more detailed insights into network activity. Additionally, expanding integration options with a broader range of third-party tools would be beneficial for seamless compatibility with various existing systems. As for additional features in the next release, it would be great to see advanced threat detection and response capabilities integrated into the platform. This would further enhance security by proactively identifying and mitigating potential threats. Additionally, improved mobile device management features and more comprehensive user behavior analytics would be valuable additions to meet evolving cybersecurity needs.

Read full review

Vincent Hamm

CIO and President at Aim High! Inc.

I appreciate the depth of what the solution can do and the simplicity of the initial setup

We do a lot of managed services and are currently trying to get people off of L2TP VPN. Apparently, we can download a mobile config file from a configured NetGate device, and we're primarily Apple. We've experimented with it on a device that's not a production device, and we can't seem to get the phase one IPSec set correctly so that the Apple config will accept it. We've tried looking at the documentation but haven't found anything. While it's not the highest priority, it is rather frustrating. We'd like to do this, and the feature is right there, but we can't get it configured. We certainly don't want to try it on a production machine because it will break the current VPN. I would like to download the Apple mobile config so that I can tell it to configure my VPN connection to do that. We have some cross-platform things. So there's also a Windows VPN. You can download a script or a PowerShell, put it on a Windows machine, and it can connect to the VPN. It would be nice if I could say I want Mac only, Windows only, or both. I wish it could configure the IPSec phase one and phase two, or at least give me solid instructions on how to configure that. It doesn't supply out-of-the-box visibility to drive decisions. You get 75 log lines, so if you're trying to troubleshoot something, you have to look at one log and then another. It integrates with SysLog systems, but our customers are not at the level where they want to pay for some third-party SysLog system. Usually, we can get things taken care of fairly quickly. I would like to have the ability to control all my devices from one place. With Ubiquiti, you can get a controller that allows you to control all of your Wi-Fi devices, switches, and routers. From one area, you can switch to that customer and see what's happening in their environment. That's not part of pfSense. I understand why it's not because pfSense is open source and community supported. That's something that someone in the community needs to pick up and run with. It's not something the pfSense can easily implement. If they could, that'd be great.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Good anti-malware and web filtering features."

"The user interface (UI) is very, very good."

"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."

"Offers good security and filtering."

"The most important feature, normally for small business customers, is link load balancing."

"The IPsec tunnels are very easily created, and quite interoperable with devices from other vendors."

"The solution is very, very easy to use."

"The Fortinet FortiGate local partners were good. I did not have direct contact with Fortinet support."

More Fortinet FortiGate pros

"The product's initial setup phase is very simple."

"Perimeter 81 is very pretty."

"The product has a reasonably high pricing."

"It helps to quickly get access to the pages I need."

"Using the preboot VPN option, we can reset a user who is working remotely that has forgotten their Windows login credentials."

"Our operators can work from home without any problems."

"Scaling Perimeter 81 was easy to do."

"Now that we use Harmony Connect, the files are inspected and we are sure that no malicious content is inside the company."

More Check Point Harmony SASE (formerly Perimeter 81) pros

"I like the dynamic DNS update and firewall feature"

"The most valuable feature, for instance, is the ease of migrating configurations between different Netgate devices housed in the same box."

"The plugins or add-ons are most valuable. Sometimes, they are free of charge, and sometimes, you have to pay for them, but you can purchase or download very valuable plugins or add-ons to perform internal testing of your network and simulate a denial-of-service attack or whichever attack you want to simulate. You can also remote and monitor your network and see where the gap is. Did you forget a printer port? Most attacks at the moment are happening through printers, and they can tell you immediately that you forgot to close the port of the printer. There are more than one million printers that are in danger, and everybody knows that hackers are using them to enter the network. So, you can download plugins to protect your network."

"Improved service performance and availability through redundancy."

"The interface and the integrated services are very useful."

"As a first-time NetGate pfSense user, I've been impressed by several features: easy integration for blocking traffic by country, straightforward creation and management of firewall rules, and the ability to extend functionality through plugins."

"The most valuable features of pfSense are security, user-friendliness, and helpful online management."

"We've found the stability to be very good overall."

More Netgate pfSense pros

Cons

"Maybe they could make some features more accessible, such as a way to translate directions between two networks that share the same subnets."

"At first glance, the interface for the device is very confusing."

"The solution can have more features in a single box that can be multi-applied to integrate everything."

"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."

"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."

"Fortinet already improved FortiGate, but in the current market, many brands of security devices have improved together. Fortinet still needs to catch up with market standards. Fortinet is lacking in features in comparison to competitors."

"We had some issues in the beginning while setting it up, but after doing the firmware update, it is working fine."

"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."

More Fortinet FortiGate cons

"The main problem with Harmony Connect is that, because it's in a new category of offerings by Check Point, there's very little marketing of the product so far, and this means that many potential users don't even know this kind of solution is available. There are also few testimonials or case studies talking about people who have used the product and fell in love with it, for example."

"There is a hefty cost"

"An improvement could be made in terms of achieving better coverage in such complicated regions as the Asia Pacific, China, and Russia."

"The tool could be more user-friendly."

"Support is one of the points of improvement."

"The product needs to work on the integration of alerts with different SIEM or security solutions."

"In the future, maybe P81 can improve the network traffic balancing and redundancy."

"They could improve on the available public documentation."

More Check Point Harmony SASE (formerly Perimeter 81) cons

"Netgate pfSense needs to improve the configuration for a VPN."

"I would like to see multiple DNS servers running on individual interfaces."

"If you look at the pfBlocker's rules and feeds you can block, it's a little cumbersome to identify the logs and see what isn't allowed through and why."

"It is not centrally managed, where you log into the website and can see all your services there. We would like to be able to see is all the configurations from a central interface on all our pfSenses."

"The solution could be more user-friendly, and the graphical interface needs some work so that someone without an IT background can use the application. I would like the ability to manage the on-premise appliance from the cloud. When I'm not in the office, it would be great to connect to the pfSense server and administer the network remotely."

"There are some bias issues and some intrusions in our network that have to be addressed. So, we're thinking of changing this firewall to something like a professional hardware-enabled firewall."

"The portal is still not well-tuned. There are still issues regarding implementation and its effectiveness. But besides that, everything else is great, from the purchase to implementation, setup, etc. Only the portal needs a lot of work."

"It's just not listed as FIPS compliant for where we're at now in government, which is an issue."

More Netgate pfSense cons

Pricing and Cost Advice

"The price of FortiGate is reasonable as I plan to buy new switches. The initial gadgets are already booted, and the pricing seems normal on the market. As for additional costs, I haven't subscribed to many extra features, so I'm only using what I need. Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us."

"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."

"Pricing is good. They offer a lot of things, the most important is the support. Every time you upgrade your license, you also get insurance for the equipment. If you have any problem with equipment, they send in new equipment."

"We have the full version of Fortinet FortiGate and we are on a three-year contract with a commitment of five years."

"Compared to Palo Alto, which we have used in the past, pricing and licensing are okay."

"The license is too expensive to renew. The license renewal process is also complex."

"Its pricing is fine. It is on a yearly basis. Other than the licensing fee, there is no extra fee."

"I think that the pricing is fair."

More Fortinet FortiGate pricing and cost advice

"The solution's pricing model may not be suitable for smaller companies, as they might find it expensive. Larger companies tend to receive more value due to many users."

"I would rate Harmony Connect's pricing at six out of ten. It wasn't particularly expensive, but it wasn't super cheap either."

"The cost of the solution's licenses depends on the particular use cases."

"The pricing is good, especially when you compare it to other firewall or UTM solutions from FortiGate or SonicWall, where you would have to invest about four hundred thousand rupees for 100 users over a three-year period."

"The solution is priced appropriately considering its uses. For an essential license, a user pays only 30 USD per month. For an enterprise version, the prices can be negotiated with the company."

"Annual licenses cost $30 to $40 each."

"The pricing of Check Point is relatively high when compared to other competitors like Palo Alto and Fortinet. While Palo Alto may be on the higher side in terms of cost, Check Point's pricing is similar to that of Fortinet. In some cases, Check Point offers better value for the features it provides. We initially considered other options but ultimately decided to purchase hardware that came with three years of iOS. This approach eliminated the need for any additional costs associated with Check Point. I would rate it 10 out of 10."

"The product's pricing model accommodates diverse needs and deployment sizes."

More Check Point Harmony SASE (formerly Perimeter 81) pricing and cost advice

"I am using the community version of the solution which is free."

"It is very suitable in terms of the price. If a client cannot acquire a Netgate appliance, I provide a custom-made appliance, and I install the Community edition of pfSense. It is a very good and affordable solution for enterprises. Some of the clients pay monthly but usually, it is annually."

"It's not too expensive considering all of the features on offer. It's about $1700 a year."

"There are a few features not included, and when you have to use those features, you have to pay for them."

"I would recommend it for a small business or a startup as a starting point. It's also good for companies that are on a tight budget."

"The pricing is lower than some of its competitors."

"It is an open source firewall."

"pfSense's pricing or licensing model is very affordable."

More Netgate pfSense pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

831,020 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

22%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

20%

Manufacturing Company

Financial Services Firm

Government

Computer Software Company

15%

Comms Service Provider

10%

Government

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What do you like most about Perimeter 81?

Even after restarting, it tries to quickly reestablish connection which is very helpful.

What is your experience regarding pricing and costs for Perimeter 81?

It's essential to consider the organization's specific requirements and budget. Here are some general recommendations...

What needs improvement with Perimeter 81?

In terms of improvement, Perimeter 81 could enhance its reporting and analytics capabilities to provide more detailed...

Help me find the best open source router

You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...

How do I choose between Fortinet FortiGate and pfSense?

Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...

What is the difference between PfSense and OPNsense?

Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 23% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Meraki MX vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Zscaler Zero Trust Exchange Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 16% of the time

Prisma Access by Palo Alto Networks vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 14% of the time

Cato SASE Cloud Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 7% of the time

Netskope vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 6% of the time

Cisco Umbrella vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 6% of the time

More Check Point Harmony SASE (formerly Perimeter 81) Competitors

OPNsense vs Netgate pfSense

Compared 44% of the time

Sophos XG vs Netgate pfSense

Compared 8% of the time

KerioControl vs Netgate pfSense

Compared 4% of the time

Sophos UTM vs Netgate pfSense

Compared 2% of the time

Cisco Secure Firewall vs Netgate pfSense

Compared 2% of the time

More Netgate pfSense Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Check Point Harmony SASE (formerly Perimeter 81)

Download Check Point Harmony SASE (formerly Perimeter 81) product report

Check Point Harmony SASE (formerly Perimeter 81) report

Download Netgate pfSense product report

Netgate pfSense

December 2024

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Check Point Quantum SASE

No data available

Learn More

Fortinet

Check Point Software Technologies

Video not available

Netgate

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Perimeter 81 is a cloud-based network security and software-defined perimeter (SDP) solution designed to provide secure access to resources in the cloud, data centers, and on-premises environments. It offers a unified platform for organizations to manage and secure their network infrastructure, regardless of the location or type of resources.

Perimeter 81 Benefits:

Easy to use
Flexible access policies
Strong encryption and authentication protocols
Scalable
Compatible with various devices and platforms

Perimeter 81 Features:

Secure Network Access: Perimeter 81 provides secure access to internal resources and cloud-based applications through its client applications and gateways.
Software-Defined Perimeter (SDP): SDP is a security framework that focuses on dynamically creating secure connections between users and resources on a need-to-know basis.
Zero Trust Network Access (ZTNA): Perimeter 81 follows the Zero Trust security model, which assumes that no user or device can be inherently trusted.
Multi-Cloud and Hybrid Cloud Support: Perimeter 81 is designed to secure access to resources across multi-cloud and hybrid cloud environments.
User and Device Management: The solution offers centralized user and device management capabilities, allowing administrators to define access policies, manage user roles, and enforce multi-factor authentication (MFA) for enhanced security.
Network Segmentation: Perimeter 81 enables organizations to segment their network resources, creating isolated environments based on logical groupings.
Centralized Management and Analytics: Perimeter 81 provides a centralized management console where administrators can configure and monitor their network security settings.

Reviews from Real Users

PeerSpot user, Frontend Developer at Limelight Networks, states that "We use some VPN solutions, and Perimeter 81 has the best user experience for desktop or mobile".

Daniel Goldfeld, Vice President of Customer Success at Mine - The All-in-One Privacy Suite, says that Perimeter 81 has "Great SAML and SCIM support with the ability to deploy site-2-site tunnels with specific IP restrictions".

Another PeerSpot user, Accounts Payable Specialist at Simera, writes that "The feature that I have found to be most valuable is the reputation that the company has regarding privacy. Nowadays, this is critical, especially when you do all of your work online."

Netgate pfSense is widely leveraged by organizations for its comprehensive capabilities in firewalls, VPN servers, and bandwidth management. It suits LAN, WAN, and DMZ networks, offering secure, scalable, and efficient networking solutions.

Netgate pfSense stands out in diverse environments with its enterprise-grade features and cost-effective operations compared to competitors like Cisco. Deployed as an edge device, it optimizes routing, ad-blocking, content filtering, and traffic shaping. Users benefit from its versatile configurations, robust firewall protection, VPN functionality, and ISP load balancing. The open-source nature allows for extensive customization, integrating plugins like Snort and pfBlockerNG, and compatibility with third-party tools enhances its utility. The intuitive GUI combined with detailed logging and centralized management fortifies network security.

What features define Netgate pfSense?

Firewall: Provides robust network security through advanced filtering and stateful packet inspections.
VPN: Ensures secure remote access with high-performing VPN capabilities.
Load Balancing: Efficiently distributes traffic across multiple ISPs, ensuring uptime and performance.
Customization: Supports various plugins for enhanced functionality, tailor-made to specific needs.
Scalability: Adapts easily to varying network demands, providing high availability and flexibility.

What benefits should be considered for ROI?

Cost-Effectiveness: Delivers premium features at a fraction of the cost of traditional network appliances.
Flexibility: Offers a customizable solution that integrates well with existing infrastructure.
Community Support: Backed by a strong user community offering insights and troubleshooting resources.
Security: Supports VLAN segmentation, enhancing protection and management of network traffic.

Organizations in industries such as finance, healthcare, and education find Netgate pfSense integral due to its advanced security features and cost benefits. Its scalable architecture and strong VPN support are crucial for industries requiring stringent data protection and reliable remote access. The adaptability of pfSense makes it suitable for dynamic environments seeking comprehensive, secure networking solutions.

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith

Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring

Check Point Harmony SASE (formerly Perimeter 81) vs. Netgate pfSense