Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Palo Alto Networks CN-Series comparison

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Palo Alto Networks CN-Series

Download the complete report

Helped 902,495 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 2.4%, up from 0.5% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.4%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Check Point Cloud Firewall (formerly CloudGuard Network Security)	2.4%
Palo Alto Networks CN-Series	0.4%
Other	82.1%

Firewalls

Featured Reviews

Joseph Koomson

IP Network Security Specialist at MTN Ghana

Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.

Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.

Read full review

Viral Shaa

IT Security Analyst at Eos Energy Enterprises, Inc.

Cloud security has unified hybrid policies and now protects critical energy workloads continuously

I would say Check Point Cloud Firewall (formerly CloudGuard Network Security) is valuable due to its hybrid cloud security features. It offers granular policy management across the on-premises and cloud environments, giving administrators consistent control for configuration drift. We need to change the policy and the inbound and outbound traffic settings, indicating what traffic must be blocked or allowed, and this capability with Check Point provides significant input into our security strategy. Check Point Cloud Firewall (formerly CloudGuard Network Security) provides unified security management across both hybrid clouds and on-premises environments. Unified security management affects my security operations positively, as we maintain critical systems on the cloud that require strong security and air gap networks. This cloud-native routing and policy installation helps close gaps in protecting critical applications and environments from exposure to the public cloud. From an administrator's perspective, Check Point Cloud Firewall (formerly CloudGuard Network Security) enhances our organization with clearer and more intuitive logging, making decisions easier to understand without deep investigation. In the CloudGuard UI, I can see which threats have triggered alerts, and this information is available on the unified dashboard that provides details of the threat analysis upon alert. As a small team, we log into the console to check specific alerts for high or low network usage or machine shutdowns. If needed, I tune the configuration policy, and the visualizing tools with reporting functionality simplify tracking changes made on the firewall, including the relevant source IP or device names. We ingest logs into our SIEM for detailed oversight, which allows us to monitor any administrative changes. Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk. We clearly understand our threat landscape and the associated risks. Onboarding the CloudGuard solution directly into our cloud environment has significantly lowered the risks throughout the network and it is easy to launch. When we assess our security posture with third-party assessments, we gain granular visibility into our network pre- and post-CloudGuard installation, showing how we have addressed significant risks and secured vulnerabilities.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The price of Fortinet FortiGate is reasonable for an SME."

"FortiGate's ability to perform as expected and fulfil our needs has been the most compelling feature for network security."

"It is a very user-friendly solution. Moreover, Foritgate offers good performance."

"FortiGate firewalls pay for themselves."

"Fortinet firewalls are a great new generation firewall."

"The payment function for applications is good."

"Fortinet FortiGate provides superior protection compared to other firewalls, with high processing capabilities."

"The solution offers very easy usability, the product can scale well, the solution is extremely reliable, the pricing and licensing models are pretty good, and the user interface, both the web and CLI versions, are very good."

More Fortinet FortiGate pros

"SSL/TLS traffic inspection features are used for advanced threat prevention against secure SSL traffic."

"The clients who are using it have nothing bad to say about its capabilities."

"The IPS, application and URL filtering, as well as Identity Awareness, are all very valuable features."

"We find all the features valuable, particularly the firewall, application control, URL filtering, and HTTPS detection."

"The solution provides me with unified security management across all environments."

"The solution provides a centralized management console for easy administration and monitoring of security policies and events, making it easy for the security team."

"It plays a vital role in protecting both our customer-facing and internal company infrastructure."

"Identity awareness, URL filtering, IDS, DLP, Content Filtering, VPN, and Application Control are all excellent."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

Cons

"With the reports, you can see it, and you can get good feelings so upper management can go, "Oh, wow. That looks pretty." However, it's very basic."

"I haven't had a single issue since using Fortinet."

"The IPS monitoring can be improved."

"The support is very poor with FortiGate IPS and they need to look into fixing it. The senior support agent does not honor their commitments when ordering products."

"One issue that I have had is that sometimes I need to monitor the traffic, so I need to filter it according to the user and which user is using it the most. I experience a bottleneck most of the time, particularly at the peak time when the number of contracts and users are at maximum."

"More advanced AI capabilities would be beneficial in future updates."

"I could not configure sFlow from the FortiGate graphical user interface. I realized that the sFlow configuration is available only from the CLI, and discovered that sFlow is not supported on virtual interfaces, such as VDOM links, IPsec, or GRE."

"At the moment, the main concern is the pricing and the type of licensing. Fortinet offers different types of licensing, and my idea is that the best approach is to have only one, two, or a maximum of three types of licensing."

More Fortinet FortiGate cons

"Check Point Virtual Systems is a complete solution, but pricing can be better."

"The migration to TerraForm is a little more complicated, but we made it work."

"Check Point CloudGuard Network Security can make deployment and configuration less complex."

"The pricing could always be reduced."

"Improvement is needed in the deployment models. Currently, I have deployed VMs and installed CloudGuard as if they were gateways. Having some as-a-service models would be great."

"Better documentation would be welcome."

"From the policy optimization point of view, they can do better. This is not just for CloudGuard. CloudGuard is one little piece managed by Check Point. They can also integrate a third-party policy management solution to improve that. For example, Tufin is focused on policy optimization and management."

"The user interface could be more intuitive."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) cons

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

"I'd like to see more IOPs features."

Pricing and Cost Advice

"Fortinet FortiGate has different licensing models, depending on what you're going to do. Services included would depend on the license model. Licenses can be renewed annually."

"The pricing is perfect."

"The tool's pricing is neither cheap nor expensive. Overall, I find it to be competitive in the market."

"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."

"Their licensing costs are annual. The UTM feature license along with their support is called FortiCare. We include that as a part of the annual maintenance cost. Palo Alto or Juniper also have an annual subscription charge for UTM. Price, of course, can always be more competitive, but it is not the most expensive product. The price-performance ratio is quite high for FortiGate."

"The price of FortiGate support is too expensive."

"Pricing for this product is comparatively lower than other products. It's an affordable solution, but when expanding the number of users, they'll ask you to replace the model, so that's an added cost."

"You need to pay a license for this solution. Our licensing is now done in our subsidiary."

More Fortinet FortiGate pricing and cost advice

"Generally, it has been fine for me. I can find my way around the price list, and it is pretty simple."

"We are using our BYOL. We are using our existing Check Point discounts to work with licensing. Overall, it is very competitive. Its pricing is reasonable to me."

"The product's licensing costs are yearly."

"I do not know the exact price, but it is fairly priced. It is neither cheap nor costly."

"There is flexibility in the different licensing models that are offered."

"We got discounts on pricing."

"It is expensive."

"The licensing model has since transitioned to a cluster-based variant."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

902,495 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

Manufacturing Company

Financial Services Firm

Construction Company

17%

Financial Services Firm

10%

Outsourcing Company

Computer Software Company

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	369
Midsize Enterprise	139
Large Enterprise	195

By reviewers
Company Size	Count
Small Business	72
Midsize Enterprise	40
Large Enterprise	79

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is comparatively conservative in terms of pricing; ...

What needs improvement with Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is definitely lagging behind its peers. I am not su...

What is your primary use case for Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is a cloud-native application protection platform a...

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Azure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 6% of the time

Cisco Secure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 5% of the time

Palo Alto Networks VM-Series vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 4% of the time

Prisma Cloud by Palo Alto Networks vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 4% of the time

More Check Point Cloud Firewall (formerly CloudGuard Network Security) Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 25% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks CN-Series

Compared 22% of the time

Cisco Secure Firewall vs Palo Alto Networks CN-Series

Compared 10% of the time

Azure Firewall vs Palo Alto Networks CN-Series

Compared 10% of the time

Zscaler Cloud Firewall vs Palo Alto Networks CN-Series

Compared 4% of the time

More Palo Alto Networks CN-Series Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Check Point Cloud Firewall (formerly CloudGuard Network Security)

Download Check Point Cloud Firewall (formerly CloudGuard Network Security) product report

Check Point Cloud Firewall (formerly CloudGuard Network Security) report

Download Palo Alto Networks CN-Series product report

Firewalls

May 2026

Also Known As

Fortinet FortiGate Next-Generation Firewall

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Check Point Cloud Firewall delivers advanced threat prevention and administration ease with centralized management of hybrid clouds. It offers seamless cloud platform integration, maintaining consistent security policies and enhancing efficiency.

Check Point Cloud Firewall is designed for comprehensive cloud security, ensuring perimeter protection, traffic inspection, and threat prevention. It is often used for safeguarding workloads and applications in public cloud settings like AWS and Azure. The firewall effectively controls both east-west and north-south traffic and supports hybrid cloud setups. Utilizing features like VPN, IPS, and URL filtering, it secures environments across multiple platforms, helping manage compliance effectively while addressing latency, API integration, and onboarding challenges.

What are the key features?

Advanced Threat Prevention: Defends against cyber threats across hybrid clouds.
Auto-Scaling: Automatically adjusts resources to meet demand.
Unified Security Management: Centralizes management for consistent security.
REST API Automation: Enables seamless integration with existing workflows.
Robust VPN Capabilities: Ensures secure data transmission across networks.

What benefits to expect in reviews?

Ease of Administration: Simplified management processes across environments.
Operational Efficiency: Enhances productivity by reducing risk and complexity.
Consistent Security Policies: Maintains a uniform security posture between clouds.
User-Friendly Interface: Streamlines user interactions and task completion.

Check Point Cloud Firewall sees frequent use in sectors needing robust perimeter protection, such as finance and healthcare, where compliance is critical. Its capabilities suit businesses utilizing public cloud infrastructures, managing complex hybrid models, or requiring strong VPN services and traffic control.

Check Point Software Technologies

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Physicians Choice Laboratory Services, Helvetica Insurance

Information Not Available

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Palo Alto Networks CN-Series