Try our new research platform with insights from 80,000+ expert users

Check Point NGFW vs Juniper SRX Series Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
316
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Check Point NGFW
Ranking in Firewalls
6th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
307
Ranking in other categories
Unified Threat Management (UTM) (1st)
Juniper SRX Series Firewall
Ranking in Firewalls
18th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
91
Ranking in other categories
Unified Threat Management (UTM) (5th)
 

Mindshare comparison

As of November 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 19.8%, up from 17.1% compared to the previous year. The mindshare of Check Point NGFW is 3.2%, down from 3.4% compared to the previous year. The mindshare of Juniper SRX Series Firewall is 1.5%, down from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Sep 25, 2024
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
Pratik-Savla - PeerSpot reviewer
Jul 22, 2024
Filters internet access and controls applications
Before choosing Check Point NGFW, we used Palo Alto Networks. We switched because of issues with Palo Alto. Their customer support wasn't very responsive. Some policies weren't working right, letting things through that should've been blocked. We compared different pricing options and features before deciding on Check Point NGFW. The main differences between Palo Alto and Check Point NGFW were mostly in how they worked for us. They both offer good next-gen firewalls, but we had some problems with Palo Alto. Sometimes it wouldn't notify us quickly when something got through. Its prevention wasn't always as strong as we wanted. We felt Palo Alto's traffic inspection was only partial, not checking everything thoroughly. Check Point NGFW seemed to offer better inspection. Check Point NGFW also had better threat intel and application control. With Palo Alto, we couldn't see all our applications, only some of them. This caused shadow IT problems. Cost was also a factor in our decision.
MURALI NIDAMANURI - PeerSpot reviewer
Mar 22, 2023
Highly scalable, user-friendly UI, and easy to maintain
We have used Juniper SRX Series Firewall in airports and multiple other industries The most valuable features of the Juniper SRX Series Firewall are the user-friendly UI, and accessing the solution is simple. The pricing strategy of the vendor could improve. I have been using Juniper SRX Series…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The UTM feature is quite good. FortiAP is easy to deploy because both Fortigate and FortiAP are under the same brand. Otherwise, you need to do more work on the configuration."
"I have found Fortinet FortiGate to be scalable."
"The solution provides good threat intelligence feeds."
"The SD-WAN is the most valuable feature."
"The base firewall features are quite valuable to us."
"It's great for capturing the traffic and troubleshooting it."
"The most valuable features of Fortinet FortiGate are the different types of profiling. It has been the most effective for me. The WAF and the antivirus profile are the most effective in network protection."
"The scalability of Fortinet FortiGate is good."
"The solution offers a good GUI."
"Its functionality is highly satisfactory."
"If there is a critical issue observed, the Check Point support team can create a custom package that we can deploy on the gateway to mitigate critical issues/bug fixes."
"The threat emulation blade and user identity awareness feature has helped us a lot in terms of perimeter security and have given us granular visibility of user access."
"The rules are very easy to deploy and can be optimized pretty quickly."
"We can build the new firewalls with minimum efforts."
"The scalability is very good."
"All policies can be deployed and managed in a very simple way."
"Juniper is a highly flexible platform, and you get more bang for your buck compared to a Cisco product."
"Technical support has been quite helpful."
"Using a Juniper CLI, you configure a "candidate configuration", then "commit" it to bring it live. If you do not like it or messed up something, you just "rollback" to the previous configuration. It can all be done in a matter of minutes. This is super handy once you get use to it."
"There are a lot of security features."
"Commit: You can update the whole configuration without affecting the production. The new configuration will be loaded once the command "Commit" is submitted. You can also do a Commit confirmed to automatically roll back to the previous config after X minutes."
"It has a very usable CLI."
"The EEE security controls allow us to make policy restrictions, so I can customize port numbers to allow or limit control."
"Once a customer starts to use Juniper products, they never switch to another brand."
 

Cons

"The debugging and troubleshooting has room for improvement."
"The firmware needs improvement because there are bugs when a new release comes through. Sometimes, the configuration changes, and it's a bit harder to see where the fail is. The first time that you have the firmware, it tends to have some issues, and it's better to wait a bit to update the equipment."
"The setup is pretty complex and not easy to implement."
"There are SD-WAN network monitoring, SD-WAN features, Industrial Databases, Internet of Things, Detection, etc., however, we do have not licenses for those features. We thought that if you bought a product, you should have all of the features it offers. Why should you need to make so many extra purchases to enable features? They should have one price for the entire offering."
"Fortinet FortiGate needs to improve to be on par with its competitors, such as Palo Alto and Sophos. They are the market leaders. Fortinet FortiGate needs to improve its capabilities. However, we are happy with Fortinet FortiGate."
"Technical support is good but the response time could be faster."
"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."
"Fortinet currently has many products bundled with FortiGate including the basic firewall and load balancer, and I think that that they need to have separate product portfolios for each of these specialized services."
"The virtual infrastructure of the central management requires a huge amount of resources to work properly and manage all the logs without problems."
"While the solution is good, we wish to have something that is a bit better, as the threats have evolved over time."
"Although Check Point provides annual updates to the Gaia platform, integration with other OEMs is difficult."
"Right now, with a larger user database and a high number of rules, it takes a bit of time for policy installation."
"The only thing that we've seen is instances where console and administrative interfaces get locked up or freeze, and we have to get the machine rebooted."
"The naming in the inline layers and ordered layers needs improvement. It makes things very complicated. I've seen quite a lot of people saying that. For audit policies, it is okay since it's very simple to see. However, this area is for very large organizations, which have too many policies, and they need to share all these policies. For small to medium-sized businesses, they don't need it. Even if somebody has 500 rules, if they try to use it, it can be very confusing."
"The area where Check Point can improve is the antivirus, as it only provides a small number of updates for it. Updates should be more frequent."
"One thing to improve is the VSX gateway. It is quite complex to work with VSX and they are quite easy to break if you aren't familiar with them."
"Does not offer protection for IoT devices"
"It could improve areas which need high performance."
"When I was going to upgrade the OS, the solution didn't accept certain USB devices."
"The solution is quite advanced. You need a lot of training to use it effectively."
"It's unexpected that market support is very limited now, and SRX firewall will become obsolete and reach end-of-life."
"There is room for improvement in scalability and performance. It's scalable and reliable, but when using next-generation firewall features, the performance decreases significantly for Juniper SRX."
"This solution needs to update for "Next Generation" needs."
"There is room for improvement in customer service and support."
 

Pricing and Cost Advice

"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."
"Other firewalls are more expensive than Fortinet FortiGate, such as the Azure firewall."
"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."
"The pricing of the solution is very competitive."
"The initial setup is super straight forward and as far as the licensing goes for the small product that we have, the pricing was pretty competitive. It wasn't as simple and as cheap as a SonicWall but for the service we would get it was a good price."
"Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license."
"Fortinet is competitive price-wise."
"Its price is normal. If I compare it with other vendors, such as Palo Alto, it's normal. Palo Alto is expensive."
"The pricing of Check Point is fair when compared to others."
"The pricing is a bit high, but obviously it gives you advanced features. If you want to buy the best thing on the market, you have to pay extra money."
"Maybe the pricing is a bit high but you get the durability and the duration."
"The tool's price is reasonable in case you are not using it in a high-load environment."
"The prices are good for its features. The benefit of its license is we get timely security prevention updates. The price is good for the technology that we get."
"Palo Alto is somehow not as good as Check Point, budget-wise and performance-wise. Palo Alto is more costly than Check Point."
"I have done licensing and contracts for multiple firewalls. The license and contract configuration is completely fine, but if it is possible to make them cost a bit less, then this would be better."
"There are competitors that have more expensive solutions than Check Point NGFW, such as Palo Alto. There are times when Check Point NGFW can have good offerings with a three-year license. The presence of Palo Alto has been heavily invested in marketing."
"The product itself is costly and the price of migration is very high."
"It is best suited to an enterprise-level, as the mid-range companies may find that the cost is not affordable."
"In general, their price definitely couldn't be cheaper."
"The pricing is very inexpensive which is the main reason I bought the solution. One device costs around 50 EUR through the University's vendor who is modernizing our network."
"Small enterprises or telco have variant licenses, and this licensing should be improved."
"There was no additional licensing cost because there were no IPS services. It was just a firewall IP circuit router so they have the default licensing. We just need to renew the support yearly."
"This is an expensive product."
"Juniper SRX is reasonably priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
815,854 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
15%
Manufacturing Company
6%
Comms Service Provider
6%
Educational Organization
57%
Computer Software Company
7%
Financial Services Firm
4%
Government
4%
Educational Organization
50%
Computer Software Company
9%
Government
4%
Financial Services Firm
4%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
How does Check Point NGFW compare with Fortinet Fortigate?
I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such). -Ch...
Which would you recommend - Azure Firewall or Check Point NGFW?
Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall ...
What do you like most about Check Point NGFW?
Check Point NGFW provides essential security, featuring no-obligation access for secure connections, strong intrusion...
What do you like most about Juniper SRX?
Juniper SRX Series Firewall is a stable solution.
What is your experience regarding pricing and costs for Juniper SRX?
Customers always want cheaper solutions. Fortinet is a cheaper solution than Juniper.
What advice do you have for others considering Juniper SRX?
Overall, I would rate it an eight out of ten because of the complexity of configurations and the maintenance.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
Check Point NG Firewall, Check Point Next Generation Firewall
Juniper SRX
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Control Southern, Optimal Media
7-Eleven, AARNet Pty Ltd, Allegro Networks, alltours GmbH, Apollo Hotel Papendrecht, Armstrong Atlantic State University, Atlantech Online, Availity, Bajaj Capital, Baloise Insurance, BancABC, BAS Group, Black Lotus, Blue Box, Borealis, Carilion Clinic, Catholic Health System, CATV, Champlain College, Chinas Ministry of Railways, China University of Mining and Technology (CUMT), Cloud Dynamics, CloudSeeds, Cloudwatt, CODONiS, Colt Technology Services, Cork Internet Exchange, CSS Versicherung AG, CyrusOne, Danish Crown, Deloitte Belgium, Department of Energy, Divona Telecom, DQE Communications, DreamHost, European Government Agency, Expedient, Financial Market Information Services Provider, Fluidata, Fonality, Fox Sports, Global Financial Institution, Global Investment Bank, Global Investment Company, Energy Sciences Network (ESnet), Goethe University, HEAnet, High Performance Networks Inc., Hillenbrand
Find out what your peers are saying about Check Point NGFW vs. Juniper SRX Series Firewall and other solutions. Updated: October 2024.
815,854 professionals have used our research since 2012.