

Check Point and OPNsense compete in the firewall solutions category. Check Point Cloud Firewall seems to have the upper hand, targeting enterprise-level security with extensive features, while OPNsense offers a cost-effective, user-friendly setup ideal for smaller deployments.
Features: Check Point Cloud Firewall provides advanced threat prevention, automated scaling, and centralized management, ensuring robust handling of complex cloud environments. OPNsense offers open-source flexibility, a user-friendly interface, and ease of configuration, appealing to DIY enthusiasts and smaller organizations.
Room for Improvement: Check Point Cloud Firewall can enhance API integration, support for multi-region deployments, and management of updates. OPNsense could improve documentation, performance under high data loads, and streamline setup processes.
Ease of Deployment and Customer Service: Check Point offers multi-cloud deployment capability and a network of trained engineers, focusing on enterprise-level security needs. OPNsense, primarily used on-premises, features a community-driven support model, appreciated for flexibility but offering less formal customer support than enterprise solutions.
Pricing and ROI: Check Point Cloud Firewall is positioned on the high end, reflecting its extensive features and security capabilities, supporting significant ROI in high-security settings. OPNsense stands out with its open-source nature, providing major cost savings and flexibility, ideal for budget-conscious users.
The value lies in maintaining operational integrity with zero downtime or incidents, facilitating secure, ongoing business operations.
Implementing CloudGuard has resulted in an excellent return on investment over one hundred percent ROI.
The unified policy is comprehensive and helps me to create firewall policies that are shared across all our facilities and plants.
The network attacks reduced by approximately 60% after using that, even without customizing the custom configuration yet.
For a very little investment, I was able to increase the security of my network.
They usually respond quite fast, and they are very knowledgeable about what they do.
We had an endless loop of emails trying to fix this, and the suggestion was to reinstall the gateway and do it from scratch, which was not an option at that point because it would leave that specific location without access.
Available twenty-four by seven.
Compared to some open-source projects with weak support, OPNsense stands out for having both a strong community and commercial backing options.
I mainly rely on community support since the solution is open source.
If you say you do not have one, it is finished. This is where the monopoly starts.
It is capable of managing the increased load and performs well as our needs expand.
I can deploy it everywhere I need it.
We have transitioned from 1,000 to 500 users without any issue.
OPNsense is an extremely scalable solution.
I use Zenarmor, pinning it to one core for packet inspection, and the CPU performance seems very good.
OPNsense's scalability is excellent; I just need to resize my hardware and upgrade the server, and voilà, I am good to go.
I have not observed any downtime.
For instance, when we are working on a release and do an upgrade, we start experiencing unexpected issues.
The solution is stable.
For home and small network use, OPNsense is also reliable, providing enterprise-grade security at no cost.
The only challenge faced was its inadequacy to manage large voice traffic effectively, even with dedicated hardware.
At the latest code level, I haven't experienced any crashes.
Scalability could be improved as well; needing to purchase a new license each time I want to add a new interface is not ideal.
Better documentation would be welcome.
The user interface could be more intuitive, and the initial setup and configuration can be complex, requiring a technical team.
I would like the APIs to be more mature and more developed and have more options to automate threat hunting.
Enhancing its performance for significant amounts of data traffic would make it closer to a perfect solution.
It would be beneficial if they could create some videos on how to set it up themselves.
The pricing and licensing are expensive, costing between seven thousand to eight thousand dollars.
Check Point is expensive, however, with the features and capabilities, I can justify the cost.
It is the highest in the market.
I consider the pricing of OPNsense to be high when compared with other market products.
OPNsense is free, the licensing and setup was easy.
One of the most valuable features is the automated threat prevention, which helps us detect and block potential cyberattacks in real-time, minimizing data breaches.
Centralized management is the feature I like best, resulting in reduced workload and more continuous policy.
Network Security provides us with unified security management across hybrid and cloud as well as on-prem.
The most valuable features include the basic firewall functionality and the GeoIP location services.
I can have a Wi-Fi VLAN and feel secure that the server network or the VM network that I have on a different VLAN are isolated, and they cannot talk to one another, which adds a great level of security.
It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost.
| Product | Mindshare (%) |
|---|---|
| OPNsense | 8.2% |
| Check Point Cloud Firewall (formerly CloudGuard Network Security) | 2.6% |
| Other | 89.2% |


| Company Size | Count |
|---|---|
| Small Business | 72 |
| Midsize Enterprise | 39 |
| Large Enterprise | 80 |
| Company Size | Count |
|---|---|
| Small Business | 32 |
| Midsize Enterprise | 6 |
| Large Enterprise | 8 |
Check Point Cloud Firewall delivers advanced threat prevention and administration ease with centralized management of hybrid clouds. It offers seamless cloud platform integration, maintaining consistent security policies and enhancing efficiency.
Check Point Cloud Firewall is designed for comprehensive cloud security, ensuring perimeter protection, traffic inspection, and threat prevention. It is often used for safeguarding workloads and applications in public cloud settings like AWS and Azure. The firewall effectively controls both east-west and north-south traffic and supports hybrid cloud setups. Utilizing features like VPN, IPS, and URL filtering, it secures environments across multiple platforms, helping manage compliance effectively while addressing latency, API integration, and onboarding challenges.
What are the key features?Check Point Cloud Firewall sees frequent use in sectors needing robust perimeter protection, such as finance and healthcare, where compliance is critical. Its capabilities suit businesses utilizing public cloud infrastructures, managing complex hybrid models, or requiring strong VPN services and traffic control.
OPNsense is an adaptable open-source firewall and routing platform appreciated for its flexibility, scalability, and user-friendly interface. It is equipped with robust security features and offers excellent reporting and visibility, essential for small businesses and home setups.
OPNsense stands out for its modular design, allowing cost-effective customization. This system supports VPNs and various firewall capabilities, making it suitable for securing networks from malicious traffic. Its frequent updates and extensive documentation, combined with a supportive online community, enhance user experience. However, there is room for improvement in integration with virtual servers and Azure. Scalability and hardware updates are important for large-scale environments, and users desire more reliable VPN solutions and enhanced threat intelligence tools.
What are OPNsense's most important features?OPNsense is implemented in industries requiring VPN and firewall functions, supporting site-to-site connections, protecting servers, and managing commercial network traffic. Companies apply it for security, UTM, SD-WAN, content filtering, intrusion detection, and prevention, utilizing its open-source nature and effectiveness as a next-generation firewall.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.