

Check Point Application Control and Idira Endpoint Privilege Manager compete in the domain of application and privilege management. Idira Endpoint Privilege Manager stands out due to its advanced privilege management features, offering significant security and operational controls.
Features: Check Point Application Control provides granular application management, controlling user access and bandwidth prioritization while integrating with Identity Awareness. It also offers extensive logging and reporting. Idira Endpoint Privilege Manager focuses on user and session management, credential protection, and a dynamic security environment, effectively managing application privileges and preventing ransomware attacks.
Room for Improvement: Idira Endpoint Privilege Manager struggles with performance issues and complexity in its initial setup. It also requires improvements in support response times and greater policy configuration automation. Check Point Application Control is costly, faces challenges with policy management, and needs more accurate application categorization along with better SSL inspection performance.
Ease of Deployment and Customer Service: Idira Endpoint Privilege Manager offers flexible deployment across on-premises and cloud but is known for complex setups and inconsistent tech support. Check Point Application Control, mainly on-premises, extends into hybrid and cloud configurations but involves high setup and operational costs, with support consistently rated yet encountering delays initially.
Pricing and ROI: Idira Endpoint Privilege Manager is expensive, with cost considerations rooted in the number of accounts and sessions, displaying good ROI through enhanced security controls. Check Point Application Control, also expensive, uses a subscription model that may seem costly for smaller organizations but justifies the expense with robust security features.
Before granular application control, IT support saw 5 to 7 tickets per week related to blocked apps or network slowdown. After implementing rule-based access and bandwidth prioritization, that dropped to 1-2 tickets per month, saving 6 to 8 hours per month for our team.
I have seen a return on investment, noting that after using Check Point Application Control blade, we minimized our bandwidth usage by half and also observed improved productivity, so we get what we invested in.
Unproductive applications are not being accessed in our network, which is indirectly saving our employees' precious work hours.
Deploying CyberArk Endpoint Privilege Manager has secured the infrastructure, which saves money, time, and resources.
I consider CyberArk Endpoint Privilege Manager's return on investment to be good since it effectively accomplishes the goals expected from privilege access management solutions.
When I create a case, I receive responses and solutions quickly.
Service-wise, they are excellent, providing guidance to resolve any technical issues.
The customer support for Check Point Application Control includes very good integration, security, and technical support, and they will help.
They respond immediately to our inquiries, resolve issues promptly, and provide valuable guidance, especially in critical situations.
We engage them when needed and receive prompt responses that typically resolve our issues.
Earlier, we received support for normal tickets within a day, but now it takes one or two days to resolve issues.
Scalability-wise, Check Point Application Control is excellent and can grow with our organization's needs.
It has handled growth or changes in my organization well over the past three years, so Check Point Application Control is scalable.
Check Point Application Control's scalability is totally dependent on the throughput of the security gateway of Check Point.
We can set permissions per team or department, allowing some teams to elevate specific applications while others have different permissions.
CyberArk Endpoint Privilege Manager is quite scalable.
The available reports and other security tools assist in scaling it according to my organization's needs.
Check Point Application Control is a stable solution.
More than three years have passed without any instability.
Check Point Application Control is very stable; I haven't encountered any special issues.
It is a robust solution that has effectively supported our environment without major issues.
Since implementing it, we have not experienced any outages or stability issues.
CyberArk Endpoint Privilege Manager offers multiple options for creating and stopping policies.
Check Point can do a deep dive to understand how they can improve the performance while we enable the application control feature on all the policies.
If an unusual app suddenly spikes bandwidth or starts behaving suspiciously, the system should automatically suggest a policy adjustment instead of waiting for the admin to dig into logs.
Simpler policy management for large organizations is needed, as the policy interface can feel complex in environments with hundreds of rules and multiple user groups.
CyberArk Endpoint Privilege Manager could be improved by simplifying the administration process, specifically when setting up policies and applications.
Currently, no user-based policy option is available inside the EPM console.
Some features provided in the self-hosted version of EPM are not supported in the software as a service version, like connection to some analysis applied by Palo Alto.
That's why it's costly.
My experience with pricing, setup cost, and licensing was that the cost was high.
It is not on the higher side, so the experience has been fair.
CyberArk Endpoint Privilege Manager is slightly expensive, but costs can be negotiated to become more competitive.
CyberArk Endpoint Privilege Manager is costly compared to other solutions.
I've received feedback that the pricing is high, however, for me, the value it brings is worth the cost.
The next-gen application visibility and cloud sync features are valuable for us because they allow us to provide granular controls over the traffic that is flowing in and out.
The best features of Check Point Application Control are granular application and web control, user and group awareness, identity awareness, integration, SSL/TLS inspection, detailed visibility and reporting, and bandwidth management.
Bandwidth and QoS prioritization and the ability to not only block but also prioritize business-critical applications, for example, Office 365 or VoIP, are also standout features.
CyberArk Endpoint Privilege Manager effectively reduces malicious content in applications by allowing us to identify and block dangerous applications.
It allows them to granularly manage controls to prevent some malicious activities on the endpoint machine.
CyberArk Endpoint Privilege Manager enhances computer security by providing minimal access, effectively preventing ransomware attacks.
| Product | Mindshare (%) |
|---|---|
| Check Point Application Control | 5.6% |
| CyberArk Endpoint Privilege Manager | 9.0% |
| Other | 85.4% |

| Company Size | Count |
|---|---|
| Small Business | 36 |
| Midsize Enterprise | 22 |
| Large Enterprise | 20 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 9 |
| Large Enterprise | 19 |
Check Point Application Control enhances security and productivity by filtering applications through a vast database and granular policies. It optimizes bandwidth and improves compliance, offering real-time visibility and automatic updates.
Check Point Application Control provides organizations with a powerful tool for managing application access and usage efficiently. Its integration with Active Directory facilitates the creation of user group-based policies, enhancing security measures. By employing real-time visibility and automatic updates, it ensures that only authorized applications are operational, optimizing bandwidth and boosting overall productivity. Its deployment is straightforward, which aids in customizing access controls to meet specific requirements.
What are the key features?Check Point Application Control is widely used in industries to bolster security by implementing granular application and traffic control. It prevents unauthorized application access and efficiently manages bandwidth while helping maintain compliance. Companies leverage it to mitigate risks by blocking high-risk applications and monitoring usage to align with regulatory standards, thus enhancing productivity across teams.
CyberArk Endpoint Privilege Manager enhances security by controlling access, removing admin rights, and managing privileges. It supports diverse environments with simple integration, focusing on credential detection, threat protection, and compliance.
CyberArk Endpoint Privilege Manager secures enterprise passwords, monitors session connections, and enhances cybersecurity by controlling privileged access. It blocks unauthorized applications, monitors user activities, and secures credentials across platforms. Key areas include Just-In-Time Access, privilege separation, and local administrator password rotation. While robust, challenges exist with performance, complexity, and setup. Integration with Linux and Unix needs improvement, requiring advanced reporting tools and easier policy management. Pricing concerns and maintenance issues with Windows servers persist, as well as database issues in the on-prem version.
What are the key features of CyberArk Endpoint Privilege Manager?
What benefits should organizations expect from CyberArk Endpoint Privilege Manager?
Organizations deploying CyberArk Endpoint Privilege Manager in industries such as finance, healthcare, and technology benefit from secure credential management across Unix, AWS, and GCP. By implementing privilege separation and monitoring user activities, they achieve effective risk mitigation and compliance across multiple platforms.
We monitor all Application Control reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.