Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Cisco Umbrella comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 30, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (16th), Continuous Threat Exposure Management (CTEM) (1st)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
72
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (9th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (6th), Compliance Management (6th)
Cisco Umbrella
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
121
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Domain Name System (DNS) Security (1st), Cisco Security Portfolio (2nd)
 

Mindshare comparison

Vulnerability Management
Domain Name System (DNS) Security
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
Emilio Montoya - PeerSpot reviewer
Ensures internet navigation safety and boosts productivity
The features of Cisco Umbrella I prefer most are DNS protection and traffic redirect. With Cisco Talos's threat intelligence, we reduce the impact of malware traffic in our network, and we currently see the behavior of equipment and choose the correct sites. Cisco Talos has helped us reduce the impact of malware traffic. We can see the behavior and choose the correct sites. We're currently testing secure access with Umbrella in order to secure access to core applications. It's a product that the user doesn't even know is there, even though it is protecting them. It's not hard on the equipment. And, for us, it centralizes everything, which improves productivity. With the Experience Insights feature of Cisco Secure Access, we've seen impacts on the management of user connectivity by allowing us to deliver safe connectivity. We are testing the Secure Access product with Cisco Umbrella to improve our connectivity with our users in order to secure access to the corporate applications. Cisco Umbrella is in the cloud, which is nice.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran is an excellent tool."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Dome9 wraps our FTP infrastructure with its network security configurations, and this also gives us the ability to monitor FTP activity."
"The valuable features of Checkpoint CloudGuard CNAPP include its automation capabilities."
"This platform has allowed us to collect data from multiple sources, centralizing everything under a single source."
"The most valuable features of CloudGuard CNAPP are its reporting capabilities for aggregating vulnerability information and scoring."
"It presents great visibility of the traffic flow of our cloud, providing information on what data and users are circulating and in the event of a threat, it immediately identifies them by providing detailed and granular information from our entire environment."
"Most of the features are pretty valuable, whether that's a description of the attacks or the attack graph showing the vulnerabilities. If a single tool does all this work, the value is centralizing all these functions on a single tool. These are the cloud-native applications we talk about — containers, Kubernetes, and cloud infrastructure — and all those things are the primary focus of the CNAPP solution."
"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."
"The solution offers an excellent price, benefit, and installation relationship."
"A single pane of glass saves time... This does have a lot of options available for us to see who's doing what, what trends, what errors. We can set up our alerting through it as well. It is definitely a great dashboard."
"It blocks malicious DNS queries daily which is very beneficial."
"We like Cisco Umbrella because of DNS security. It's one step ahead of whatever we are using for regular web filtering. In that way, it's more secure than other web filtering products."
"Cisco Umbrella scales incredibly with the growing needs of my organization."
"It has certainly saved us time. If we go and look at what's rejected on the requests from the hospital itself, it has saved about 5% or 6% time."
"The user interface is great. It's very easy to tailor to our client's environment and needs."
"I like the original functionality, which allows for providing secure DNS services."
"The documentation is good, and we have been able to resolve any issues ourselves."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Scalability, particularly in workload protection, is an area that needs improvement."
"They take time to respond or coordinate a meeting since they maintain a schedule that does not fit Latin America very well."
"There are opportunities for improvement that can be addressed through a roadmap."
"I would like CloudGuard's pricing to be cheaper, but I think that's impossible. The pricing is the only thing I think they can improve."
"The dashboard customization has room for improvement."
"The price of this solution should be reduced so that it is more affordable to scale."
"CloudGuard could be improved by including integration with vendors other than AWS, especially Azure, especially in permissions."
"I strongly advise that the multi-layered security system of Check Point often undergoes updates and new versions keep coming."
"This solution does not give us full, 360-degree protection."
"I'd like to see improvement in its overall integration with all the other platforms. There's some integration between Umbrella and Meraki, but an overall Cisco problem is that there are so many different tools, and finding easy, seamless ways of connecting everything together is always a challenge."
"I am unsure if Cisco Umbrella offers a Windows option for running the server."
"User interface could be a little smoother and more intuitive."
"It would be good to have more extensions to third-party products and a client for other device types."
"In my experience with Umbrella support, sometimes the response times take a bit more time than we would like... sometimes, if you go through email, it can take quite a while to get a response."
"The only thing I can think of is that I'd like to see a little more flexibility in policy creation. The way that policy is currently structured is like a "first hit succeeds" kind of policy. It would be nice if it were more hierarchical."
"It's somewhat pricey for us, however, it's an awesome solution."
 

Pricing and Cost Advice

Information not available
"The price is on the higher end."
"From a pricing perspective, they are pretty expensive."
"The tool's pricing is moderate. Its licensing costs are yearly."
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"It is difficult to contextualize the pricing because we are used to Indian pricing and licensing."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"The pricing is extremely competitive."
"The pricing is great and very competitive with the rest of the market."
"There is room for improvement when it comes to the cost."
"The price of Cisco Umbrella is a little higher than similar solutions, like Gateway."
"Cisco has a set price for a single license up to 100, but whenever we get over 100, we have to ask for a quote."
"The price could be lower."
"In the region I'm from, that of EMAR, Europe, the Middle East, Eastern Asia and Africa, our organizations do not have many liquid cash assets, so the price could be better."
"Its price for us is quite expensive because it's a subscription, and we just use it for the DNS log. So, for us, it's quite expensive."
"I am not sure, I don't have the numbers in front of me, but I think it's $1.00 or so per device/month."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
865,140 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Computer Software Company
10%
Manufacturing Company
7%
Healthcare Company
6%
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
8%
Educational Organization
6%
Computer Software Company
20%
Manufacturing Company
9%
Financial Services Firm
8%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-nat...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
OpenDNS
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management. Updated: August 2025.
865,140 professionals have used our research since 2012.