Check Point CloudGuard CNAPP vs Fortinet FortiOS comparison

Cancel
You must select at least 2 products to compare!
Check Point Software Technologies Logo
1,461 views|869 comparisons
94% willing to recommend
Fortinet Logo
4,259 views|3,648 comparisons
98% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point CloudGuard CNAPP and Fortinet FortiOS based on real PeerSpot user reviews.

Find out what your peers are saying about Tenable, Wiz, Check Point Software Technologies and others in Vulnerability Management.
To learn more, read our detailed Vulnerability Management Report (Updated: April 2024).
769,599 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The CloudGuard for Cloud Intelligence tool has several significant features that provide security to our company.""The reporting against compliance is an important feature that helps you comply with policies and standards within your organization.""The most valuable features of CloudGuard CNAPP are its reporting capabilities for aggregating vulnerability information and scoring.""This product provides a really nice visualization of the infrastructure, including network topology, firewalls, etc.""The rulesets and the findings are valuable. The actual core functionality of it and the efficacy of events are great.""It is easy to administer and easy to deploy. It has automated or pre-configured templates, security features, and proactive threat detection.""The posture management and remediation features are the most valuable. We use GSL Builder to build custom rules in alignment with our organization's policies. CloudGuard has canned rules using multiple standard frameworks, but we also have additional rules.""The identification of misconfigurations, maintenance of compliance in a centralized way, and visibility across all the multi-cloud tenants are the key functionalities."

More Check Point CloudGuard CNAPP Pros →

"The most valuable features of Fortinet FortiOS are the SD-WAN, SSL inspection, and IDS/IPS functions.""It efficiently manages large-scale firewall deployments.""Their classification inside of that database of the various threats is typically very, very good.""The initial setup is straightforward, and it is very customer friendly.""The most important feature of Fortinet FortiOS is the IPS.""The most valuable feature of Fortinet FortiOS network segregation, UTM, and antivirus, freight management protection, such as DDoS. Additionally, the CLI and the GUI are easy to use. The architecture makes sense, and the command in the CLI are organized well. They have quite a lot of features are easy to use, and are user-friendly. Any novice can use Fortinet FortiOS without an issue.""The solution is very easy to configure and has a good interface, plus it offers more configuration options than other vendors.""I have found the most valuable feature of Fortinet FortiOS is the low maintenance."

More Fortinet FortiOS Pros →

Cons
"When rules change, it messes up the remediation. They haven't found a fix for that yet. The remediation rule goes into limbo. It's an architectural design flaw within their end compliance engine—a serious bug.""Currently, I would like this solution extended to cellular devices or tablets.""The tool has a lot of potential, but today, it lacks a lot of Scripts/Bots for Azure.""One feature of the product that I would like to enhance is the possibility to connect to vulnerability management platforms so that the issues that emerge from the scans can then be ingested directly into the vulnerability management process.""I’d like to see more integration with third-party tools. For example, it would be helpful to have an integration between Dome9 and ServiceNow to manage security incidents and security changes.""The support must be more effective.""I'd like to see more advanced encryption for local features, which is not present right now.""The user interface could be improved. Sometimes, the visibility is not immediately available for the environment. We have the native servers that come with the solutions, but we cannot see them in the Check Point log. Another issue is with the integrated file monitoring. It would make sense to have stuff like file integrity monitoring and malware scanning available within this module because we don't want to integrate another product."

More Check Point CloudGuard CNAPP Cons →

"Fortinet FortiOS can improve the GUI and remove the command line interface. All the functionality should be available from the GUI. Day-to-day management can be tough for IT administrators. Additionally, the reporting is not very good.""FortiOS could provide a more detailed analysis of the network and connected devices.""It could more scalable for the lower end users.""Fortinet FortiOS can improve by limiting the need for the CLI and GUI combination. The more functions they can have on the GUI and less on CLI would be helpful.""The additional features I would like to see included in the next release is better troubleshooting and reporting.""The implementation could be simplified.""The pricing model makes this product far more expensive than similar solutions.""I want to see a better integration or a better integration with the endpoint protection or with EDR with the security life cycle."

More Fortinet FortiOS Cons →

Pricing and Cost Advice
  • "​They support either annual licensing or hourly. At the time of our last negotiation, it was either one or the other, you could not mix or match. I would have liked to mix/match. ​"
  • "I would advise taking into account the existing number of devices and add a forecast of the number of devices to be added in the coming year or two, to obtain better pricing."
  • "It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
  • "The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
  • "I suggest that you pay attention to the product pricing because while there are no tricks, and the licensing model is transparent, the final numbers may surprise you."
  • "Right now, we have licenses on 500 machines, and they are not cheap."
  • "The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."
  • "Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
  • More Check Point CloudGuard CNAPP Pricing and Cost Advice →

  • "The program is expensive."
  • "We pay an annual license fee. It is rather expensive so I would like to perhaps see a drop in price in the future."
  • "Be sure to choose a licensing plan that leaves a little headroom so performance is not an issue."
  • "We pay $100,000. That covers the cost of the hardware that we run the VN's on. That also includes any SGNA costs for the internal support tech."
  • "Pricing depends on implementation and licensing choices and is usually not a practical budget choice for small businesses."
  • "The support contracts are usually about $100 - $200 a device."
  • "The software costs roughly half what the hardware costs. Overall, the product is expensive."
  • "The price of Fortinet FortiOS has been reasonable."
  • More Fortinet FortiOS Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
    769,599 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The visibility in our cloud environment is the most valuable feature.
    Top Answer:We have concerns regarding the pricing and would appreciate seeing some improvements.
    Top Answer:In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most PA is good at app control, web filtering and… more »
    Top Answer:The SSL VPN is fee for use is most attractive.
    Top Answer:The solution is cost effective. I would rate the pricing a five out of ten.
    Ranking
    5th
    Views
    1,461
    Comparisons
    869
    Reviews
    55
    Average Words per Review
    662
    Rating
    8.6
    15th
    out of 59 in Firewalls
    Views
    4,259
    Comparisons
    3,648
    Reviews
    35
    Average Words per Review
    408
    Rating
    8.3
    Comparisons
    Also Known As
    Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
    Learn More
    Overview

    Check Point CloudGuard CNAPP is a robust cloud security solution, offering comprehensive protection for cloud workloads and applications against cyberattacks. This platform encompasses cloud security posture management, threat prevention, and efficient incident response, providing organizations with a unified defense against threats. Key features include continuous visibility and remediation of misconfigurations, threat prevention through various techniques like intrusion prevention and malware detection, and rapid, cost-effective incident response. With CloudGuard CNAPP, you can safeguard cloud-native applications, cloud infrastructure, and sensitive data, enhancing your overall cloud security posture. This solution is a powerful asset for organizations seeking to fortify their cloud environments against a range of cyber threats.

    Fortinet FortiOS is a comprehensive security operating system that powers Fortinet's network security solutions. It provides advanced threat protection, network visibility, and centralized management for organizations of all sizes. With its robust features and intuitive interface, FortiOS enables businesses to secure their networks, applications, and data from cyber threats. 

    One of the key features of FortiOS is its advanced threat protection capabilities. It incorporates multiple security technologies, including firewall, antivirus, intrusion prevention system (IPS), and web filtering, to detect and block a wide range of threats. This ensures that organizations are protected against malware, ransomware, and other malicious activities. FortiOS also offers extensive network visibility, allowing organizations to monitor and analyze network traffic in real-time. This visibility enables businesses to identify potential security risks, detect anomalies, and take proactive measures to mitigate threats. 

    Additionally, FortiOS provides detailed reports and analytics, helping organizations gain insights into their network security posture. Centralized management is another crucial aspect of FortiOS. It allows businesses to manage and configure their security policies, devices, and users from a single console. This simplifies the management process and ensures consistent security across the entire network infrastructure. 

    Moreover, FortiOS supports integration with other Fortinet products, enabling seamless security orchestration and automation. FortiOS is designed to be scalable and flexible, making it suitable for organizations of all sizes. It offers a range of deployment options, including physical appliances, virtual machines, and cloud-based solutions. This flexibility allows businesses to choose the deployment model that best fits their requirements and easily scale their security infrastructure as their needs evolve. 

    Sample Customers
    Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
    Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
    Top Industries
    REVIEWERS
    Security Firm22%
    Financial Services Firm18%
    Computer Software Company11%
    Cloud Solution Provider8%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Computer Software Company15%
    Security Firm8%
    Manufacturing Company7%
    REVIEWERS
    Comms Service Provider15%
    Financial Services Firm10%
    Computer Software Company10%
    Manufacturing Company10%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Comms Service Provider8%
    Financial Services Firm8%
    Government8%
    Company Size
    REVIEWERS
    Small Business44%
    Midsize Enterprise13%
    Large Enterprise44%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise11%
    Large Enterprise62%
    REVIEWERS
    Small Business54%
    Midsize Enterprise13%
    Large Enterprise33%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise18%
    Large Enterprise55%
    Buyer's Guide
    Vulnerability Management
    April 2024
    Find out what your peers are saying about Tenable, Wiz, Check Point Software Technologies and others in Vulnerability Management. Updated: April 2024.
    769,599 professionals have used our research since 2012.

    Check Point CloudGuard CNAPP is ranked 5th in Vulnerability Management with 63 reviews while Fortinet FortiOS is ranked 15th in Firewalls with 73 reviews. Check Point CloudGuard CNAPP is rated 8.6, while Fortinet FortiOS is rated 8.4. The top reviewer of Check Point CloudGuard CNAPP writes "Threat intel integration provides us visibility in case any workload is communicating with suspicious or blacklisted IPs". On the other hand, the top reviewer of Fortinet FortiOS writes "Provides effective filtering features, good stability but initial setup is moderately challenging". Check Point CloudGuard CNAPP is most compared with Prisma Cloud by Palo Alto Networks, AWS GuardDuty, Wiz, Microsoft Defender for Cloud and Qualys VMDR, whereas Fortinet FortiOS is most compared with Fortinet FortiGate, Fortinet FortiManager, Fortinet FortiWeb, Fortinet FortiGate-VM and Infoblox Advanced DNS Protection.

    We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.