Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Fortinet FortiManager comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Vulnerability Management (27th), Continuous Threat Exposure Management (CTEM) (3rd)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
71
Ranking in other categories
Vulnerability Management (9th), Cloud and Data Center Security (9th), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (6th)
Fortinet FortiManager
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
66
Ranking in other categories
Network Management Applications (4th)
 

Mindshare comparison

Vulnerability Management
Network Management Applications
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Bart Coddens - PeerSpot reviewer
Evolved cloud security with active monitoring but needs interface consistency
The user interface needs work. Sometimes, it is a transition from the old tool to the new CNAPP Two that I currently have, and remnants of the old environment can still be detected. I require consistency in the user interface to ensure everything is streamlined into the same look and feel. More work is needed in fine-tuning the threat data towards your CSPM and activity logs, aligning them with business intelligence, which requires a cohesive console interface. My assessment of CloudGuard CDRs in intrusion detection and threat hunting capabilities is that it still needs some work. All the threat data that comes in, you need to fine tune it a bit.
HamedWasel - PeerSpot reviewer
Easy to set up with good integration capabilities but we've had troubles when moving devices
We've faced an issue when we need to move devices. Templates need to be recreated instead of having the policies, et cetera, cut and pasted over. Everything should just move over when we need to move devices instead of recreating everything from scratch. For the IPSEC tunnels, Fortimanager doesn't have all of the features that are available on Fortigate.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran is an excellent tool."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"I love the work involved in maintaining and scaling security services and configurations across multiple public clouds using this solution, versus using native native cloud security controls. It is so much better. The different cloud platforms all have their own way that they handle a lot of the stuff that Dome9 handles. Even within their platform, they are in a lot of disparate places, e.g., in AWS, there are five different tools. You have to jump between them to get the same information that you can just pull in automatically on Dome9, which is just one platform. We are using multiple platforms, so that makes it even more complicated and time consuming if you had to just rely on them to get all of your information. Whereas, it's all just summarized and put together on the Dome9 end."
"It provides complete visibility of workload hosted on different cloud platforms including AWS and Azure, along with multiple tenants."
"The two most valuable features for us are the central firewall administrator and the real-time cloud compliance monitoring."
"We can monitor each activity from our mobile devices, so there is complete visibility of our cloud traffic flows, with threat intelligence provided by Check Point."
"Dome9 continues to be a major piece of our cloud security architecture and has given our senior leadership team a high degree of confidence in our ability to protect our cloud environment."
"Dome9 has improved our organization; we have a centralized view of all of our assets, our visible assets our ECs, our inventories. And then all the policies are centralized, and it is easier to manage because everything is one component console."
"The system has deployed security tools to enhance effective investigations in the entire company networking system."
"The feature that I find most valuable is the blocking feature."
"It is stable."
"FortiManager's best feature is the integration of administrator users."
"The main benefit of Fortinet FortiManager is the ability to control all the devices from a central location, view their statuses, and manage their configurations and updates from a single management console."
"The SD-WAN deployment environment, and the SD-WAN templates are particularly useful. Managing the solution is very intuitive. The initial setup of the solution was very straightforward."
"The features are good."
"The centralized management of policies and certificates, coupled with the capability to handle multi-site deployments effectively, provides streamlined operations."
"Stability is good within the product."
"You can configure it at your ease."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I don't have any notes for improvements."
"I would like to see tighter integration with other compliance tools, like Chef Compliance, in addition to Inspector."
"I would like an interface more adapted to cell phones or tablets."
"The dashboard customization has room for improvement."
"I strongly advise that the multi-layered security system of Check Point often undergoes updates and new versions keep coming."
"Check Point must provide a multi-cloud facility where AWS, Azure, and GCP can seamlessly work together and display posture in an integrated manner."
"The accuracy of its remediation is a 7.5 out of 10. Before, I would have given it a ten but now, to handle remediation for fully qualified domain names, it's not working as it did in the past. We're finding some difficulties there."
"The tool should incorporate more use cases like improving security scores. It should also improve documentation."
"The interface could be improved. It is split up into different areas, which makes it more difficult to navigate and get the right section of the correct file. The solution is quite expensive, so it would not be suitable for small to medium sized organizations."
"Troubleshooting for Fortinet products is more difficult than competing products like Cisco and Palo Alto."
"When we have a specific configuration pushed it does take some time to be deployed on the actual firewall."
"Can be difficult to configure."
"The information extraction through command lines was could improve to some extent. Although there were some command lines available, there were not enough options. For instance, I needed to obtain the management IP address of my two Fortigates, but the Fortinet FortiManager did not provide me with the IP address on the LAN interface. I attempted to find this information through the command line but was unsuccessful. I also searched for articles on the internet, but could not find a solution. This is an aspect that could be improved or potentially there is a method to access this information that I have yet to discover."
"The graphics interface between Fortinet FortiManager and any Forti products should be standardized."
"Within the management of some features on FortiManager, specifically the management of user objects used for VPN service, FortiManager is quite weak."
"The price always has room for improvement."
 

Pricing and Cost Advice

Information not available
"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
"The solution’s pricing is a little bit high."
"I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
"The license for CloudGuard Posture Management is about $80 a year, and it's based on your cloud footprint, not the number of users. So you could have a million users, and it doesn't matter."
"We have the enterprise-level license and we renew it annually because it is worth the cost."
"​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
"Check Point CloudGuard Posture Management is expensive."
"Everything in this field is very expensive."
"Pricing could improve a little bit so I rate it a seven out of ten."
"I hope that the prices will become more competitive in subsequent releases, as the current pricing is perceived as somewhat elevated."
"Fortinet FortiManager is costly."
"In comparison with other products, the price of FortiManager is reasonable."
"Compared to Check Point or Cisco, Fortinet FortiManager is more affordable but it is still on the higher end."
"The pricing is based on a licensing model by feature."
"FortiManager is reasonably priced - I pay around US$40,0000 per year, which covers fifty locations."
"This is an affordable solution, and its licensing model is based on the number of devices."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
851,471 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
13%
Manufacturing Company
7%
Government
6%
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
8%
Educational Organization
5%
Computer Software Company
16%
Financial Services Firm
10%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
I find that the pricing for Zafran aligns well with the comprehensive features it offers. The asset and user-based li...
What needs improvement with Zafran Security?
Zafran is a new startup. Features are continuously being added or improved. 1) Continued integrations with existing (...
What is your primary use case for Zafran Security?
We connect this to our vulnerability scanner as input, our security tools to better determine risk, and our change ma...
What do you like most about Fortinet FortiManager?
The most valuable feature is the centralized management console.
What is your experience regarding pricing and costs for Fortinet FortiManager?
I find Fortinet FortiManager to be a bit more expensive, especially when considering the environment. It shows cost-e...
What needs improvement with Fortinet FortiManager?
The deployment of Fortinet FortiManager is quite complex and should be easier. It requires improvement in vulnerabili...
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
No data available
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Find out what your peers are saying about Wiz, Qualys, Tenable and others in Vulnerability Management. Updated: May 2025.
851,471 professionals have used our research since 2012.