Try our new research platform with insights from 80,000+ expert users

Check Point IPS vs Cisco Secure IPS (NGIPS) comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Check Point IPS
Ranking in Intrusion Detection and Prevention Software (IDPS)
3rd
Average Rating
8.6
Number of Reviews
48
Ranking in other categories
No ranking in other categories
Cisco Secure IPS (NGIPS)
Ranking in Intrusion Detection and Prevention Software (IDPS)
6th
Average Rating
8.2
Number of Reviews
63
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2024, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Check Point IPS is 8.8%, down from 10.8% compared to the previous year. The mindshare of Cisco Secure IPS (NGIPS) is 4.3%, down from 4.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Greg Tate - PeerSpot reviewer
Jan 31, 2022
Great for detection and access with the capabilities of defining specific rules
We wanted a more robust solution for controlling access to our cloud environments (AWS and Azure). In addition, we wanted our control to be cloud-based.  Our thought was to find a solution to aid us in being proactive as well as reactive. We have multiple environments in multiple clouds with some…
JA
Oct 19, 2020
Auto-scaling, powerful software fingerprint identification, and good technical support
The only thing I think they may need to improve on a little bit is identifying software more correctly when you do network discovery. You need that to really handle finding anomalies properly. In the past, I've noticed that some applications are not identified correctly, based on the OS and the fingerprints that they're pulling from the host. In the future, we would like to see more involvement with the on-premises hybrid cloud. We want to see Cisco do more in the cloud space, and basically improving the connection between on-premises and the cloud. This including things such as automation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool's most valuable feature is its detection panel. Managing and updating policies within Check Point IPS is easy and without issues. It provides a secure network."
"IPS can protect our organization with any old vulnerabilities or if any vulnerability detected minutes ago IPS can protect us as per our configured policy."
"The autonomous threat prevention is very easy to use. The APIs and SmartConsole tool also work well."
"Real-time protection has blocked most threats that could affect system operations."
"The most valuable feature is that it protects us against hundreds of different attack vectors, like ransomware. The protection is always being triggered. People try to access websites that are categorized as malware, so when the users do a DNS request for the IP of those malware websites, the IPS Blade replaces the real IP of the website that is malware with a bogus IP. The user gets an IP that doesn't exist and when he tries to access, it won't work."
"Among its great features is the ability to detect outgoing malware or extraction of compromised data and stop it, thus safeguarding us by isolating the network, the equipment, or the identity of the affected users."
"The most valuable feature of the solution is called tunneling. Tunneling is one of the major security features that hackers cannot penetrate through."
"There's less admin burden to detect these threats as Check Point IPS will do it all for you and suggest the best preventive actions to protect the network."
"We like the Cisco product, the concept, and the tech intelligence."
"It has good intelligence. It does a great job at stopping threats."
"The solution is very powerful coupled with Firepower."
"We have found the product to be quite stable."
"Among all the different solutions I have worked with, such as Palo Alto many other firewalls. Cisco has the support, documentation, and design. The documentation is widely available and it can help you a lot with implementation. It makes the implementation much easier."
"The solution very effectively provides malware protection and signature-based anomaly detection."
"You can do zero-day prevention and detection. It's quite useful."
"NGIPS' best feature is the separate IPSec tunnels, which makes the user's data more secure if they want to access it privately."
 

Cons

"The service that we want to see in the future is a capacity to segment the IPS services by equipment."
"Enhancements are necessary for the proficiency of notifications in the event of a Social Security incident, whether through email or alternative channels such as SMS."
"The cost is high."
"When entering, it always takes a long time to load."
"The tool's pricing could be better."
"I would like the product to provide us with intelligence to understand what we really have in our environment."
"Sometimes we had false positives where packages that were legitimate for us were blocked and we had to unblock them through exceptions."
"Setting up Check Point IPS isn't easy, but it's not too complex, either. I rate it seven out of 10 for ease of setup. Generally, customers cannot do it themselves. They need an integrator."
"There are certain limitations that need to be addressed."
"My opinion is that this solution should improve the pricing."
"The file trajectory, the trace in contamination files, could be improved."
"Cisco NGIPS' performance could be better."
"If there was a software-based solution for scaling up then it would be much better."
"The SSL decrypt could be improved, but it's normal. All the devices in our platform need a lot of memory or CPU to do the SSL decrypt. This is an issue to improve in all platforms, not only in Cisco."
"The pricing is very expensive. They should make their equipment more affordable."
"We don't like its licensing model. It has separate licensing for all the features. For instance, to get URL filtering, you need to buy another license. Every feature set seems to require another license. Unless you purchase them all upfront, you find some surprises and realize that you can't do that because you need another license. Its logging isn't quite as good as it used to be in our previous solution. We used to have Cisco ASA, and we could view the logs a lot easier than NGIPS (also known as Firepower). We saw real-time logging, but we don't see that as much in Firepower."
 

Pricing and Cost Advice

"You can pay for Check Point IPS yearly, or you can go with a three-year license. There's no extra cost apart from the standard licensing fee."
"I think that the price of support is around $40,000 USD or $50,000 USD per year."
"Enabling IPS does not require any additional license purchase from OEM, as it comes by default with the NGFW bundle."
"Pricing for this solution is negotiable and I'm happy with our pricing."
"The module has a considerable cost but you can save by purchasing a package with several modules instead of making a single purchase."
"I give the price of the solution a five out of ten."
"The pricing for Check Point IPS is competitive and brings good value for the money."
"I rate the product price an eight on a scale of one to ten, where one means it is very cheap and ten means it is very expensive. The product is expensive."
"Licenses for this product are available for either one, or three year terms."
"I usually work with Fortinet and FortiGate which is a lower cost in comparison with Cisco NGIPS."
"The cost of the license depends on the level of support that you have with Cisco."
"There are licensing fees depending on the features that you are using."
"NGIPS is expensive."
"The price of Cisco NGIPS could be reduced. It is more expensive than other solutions."
"In our company, we know that the price of Cisco products is high, especially for its switches, routers and IOS. The price of Cisco products may be twice its original price if you plan to extend some of its features."
"This is an expensive product, with the biggest cost being the license that keeps the service going."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
801,634 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Financial Services Firm
9%
Government
8%
Manufacturing Company
8%
Computer Software Company
20%
University
12%
Financial Services Firm
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Check Point IPS?
The most valuable feature of the solution is called tunneling. Tunneling is one of the major security features that hackers cannot penetrate through.
What needs improvement with Check Point IPS?
To overcome the tool's shortcomings, the signature-based protection that the product offers needs to be more effective and regularly updated. Some of the configurations and management should be eas...
What do you like most about Cisco NGIPS?
The product's initial setup phase was easy.
What needs improvement with Cisco NGIPS?
There are certain limitations that need to be addressed.
 

Also Known As

Check Point Intrusion Prevention System
Sourcefire NGIPS, Firepower NGIPS
 

Overview

 

Sample Customers

Morton Salt, Medical Advocacy and Outreach, BH Telecom, Lightbeam Health Solutions, X by Orange, Cadence, Nihondentsu, Datastream Connexion, Good Sam, Omnyway, FIASA, Pacific Life, Banco del Pacifico, Control Southern, Xero, Centrify
American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
Find out what your peers are saying about Check Point IPS vs. Cisco Secure IPS (NGIPS) and other solutions. Updated: September 2024.
801,634 professionals have used our research since 2012.