IT Central Station is now PeerSpot: Here's why

Check Point CloudGuard Network Security vs Cisco ASA Firewall comparison

Cancel
You must select at least 2 products to compare!
Featured Review
Buyer's Guide
Check Point CloudGuard Network Security vs. Cisco ASA Firewall
July 2022
Find out what your peers are saying about Check Point CloudGuard Network Security vs. Cisco ASA Firewall and other solutions. Updated: July 2022.
620,600 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature would be ASDM. The ability to go in, visualize and see the world base in a clear and consistent manner is very powerful.""The most valuable features of this solution are advanced malware protection, IPS, and IDS.""You can also put everything into a nice, neat, little package, as far as configuration goes. I was formerly a command-line guy with the ASA, and I was a little nervous about dealing with a GUI interface versus a command line, but after I did my first deployment, I got a lot more comfortable with doing it GUI based.""Provides good integrations and reporting.""It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective.""The most valuable feature is the access control list (ACL).""The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable.""If configured, Firepower provides us with application visibility and control."

More Cisco Firepower NGFW Firewall Pros →

"Advanced check prevention is a great feature that provides threat intelligence at speed.""The features of the solution which I have found most valuable are its flexibility and agility. It's a fully scalable solution, from our perspective. We can define scaling groups and, based on the load, it will create new instances. It's truly a product which is oriented toward the cloud mindset, cloud agility, and this is a great feature.""The visibility, the one-pane-of-glass which allows me to see all of my edge protection through one window and one log, is great. Monitoring everything through that one pane of glass is extremely valuable.""The solution could improve to have a DLP feature.""It improves the availability of engineers to carry out projects.""It really is a pretty complete solution.""The most valuable feature is that we can use the same manager server that we use on our own Check Point firewalls. We integrated CloudGuard on that manager and we can use the same kind of protections that we use on the on-prem firewalls, like the IPS and antivirus policy. We can have the same kind of protection on the Cloud environment that we have on-premise.""The Capsule solution and application filters are the most valuable. It is pretty straightforward to implement, and it also has good stability and scalability. Their technical support is also really good."

More Check Point CloudGuard Network Security Pros →

"The configuration capabilities and the integration with other tools are the most valuable features. I really like this product. Cisco is one of my favorite brands, and I always think Cisco solutions are very reliable, easy to configure, and very secure.""The configuration support is very good. You can find a lot of configuration samples and troubleshooting tips on the internet, which is very good.""The features that are most valuable within the firewall are the IPS as well as the Unified Communications. We also really like the dynamic grouping.""It is pretty stable. I haven't seen many issues during the past four years.""The most valuable feature is that it's secure.""The most valuable features are the provision of internet access, AnyConnect, and VPN capabilities.""ASA integrates with FirePOWER, IPS functionality, malware filtering, etc. This functionality wasn't there in the past. With its cloud architecture, Cisco can filter traffic at the engine layer. Evasive encryptions can be entered into the application, like BitTorrent or Skype. This wasn't possible to control through a traditional firewall.""The initial setup was not complex."

More Cisco ASA Firewall Pros →

Cons
"The solution could offer better control that would allow the ability to restrictions certain features from a website.""I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device.""Cisco Firepower is not completely integrated with Active Directory. We are trying to use Active Directory to restrict users by using some security groups that are not integrated within the Cisco Firepower module. This is the main issue that we are facing.""They need a VTI. I know it's going to be available in the next software version, which is the 6.7 version. However, the problem with that is that the 6.7 is going to deprecate all the older IKEv1 deployment tunnels. Therefore, the problem is that we have a lot of customers which are using older encryptions. If I do that, update it, it's not going to work for me.""The only drawback of the user interface is when it comes to policies. When you open it and click on the policies, you have to move manually left and right if you want to see the whole field within the cell. Checkpoint has a very detailed user interface.""We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond.""It would be great if some of the load times were faster.""Most of the features don't work well, and some features are missing as well."

More Cisco Firepower NGFW Firewall Cons →

"The API integration is complex, which is an area that should be improved.""The documentation has been rough. Being able to do it yourself can be hit or miss given the constraints of the documentation.""I would like to see a step-by-step initial installation of the firewall. That would be really helpful. Like in Oracle appliances, when you start it asks you, what's your current IP address? An initial setup should be a step by step and intuitive process. You click on "begin," it asks you some simple questions. You fill in the blanks - your current IP address, what you want to do, you want to set up a site to site VPN, for example, that kind of thing. That would be the smartest thing to have.""The convergence time between cluster members is still not perfect. It's far away from what we get in traditional appliances. If a company wants to move mission-critical applications for an environment to the cloud, it somehow has to accept that it could have downtime of up to 40 seconds, until cluster members switch virtual IP addresses between themselves and start accepting the traffic. That is a little bit too high in my opinion. It's not fully Check Point's fault, because it's a hybrid mechanism with AWS. The blame is 50/50.""As an administrator, I can say that among all of the Check Point products I have been working with so far, the Virtual Systems solution is one of the most difficult.""The initial setup is complex and could be made simpler.""CheckPoint CloudGuard could be better at solving cases.""Check Point CloudGuard Network Security could improve by making it easier to configure."

More Check Point CloudGuard Network Security Cons →

"Sometimes my customers say that Cisco Firewalls are a bit more difficult compared to Fortigate or Palo Alto. There is complexity in the configuration and the GUI could be improved.""I would like to see them add more next-generation features so that you don't need a lot of appliances to do just one task. It should be a single solution.""I don't have to see all the object groups that have been created on that firewall. That's just something that I would really appreciate on the CLA, even though it already exists on the GUI.""Some individuals find the setup and configuration challenging.""It is hard to control the bandwidth of end-users with a Cisco Firewall. That is the main issue I've faced. I used Mikrotik for many years for this very reason. Mikrotik has the option to set a bandwidth restriction for a single IP or complete segments. Cisco should add this option to their firewall.""Cisco should work on ASDM. One of the biggest drawbacks of Cisco ASA is ASDM GUI. Cisco should improve the ASDM GUI. The configuration through ASDM is really difficult as compared to CLI. Sometimes when you are doing the configuration in ASDM, it suddenly crashes. It also crashes while pushing a policy. Cisco should really work on this.""The user interface is a little clunky and difficult to work with. Some things aren't as easy as they should be.""It would be good if Cisco made sure that the solution supports all routing protocols. Sometimes it doesn't."

More Cisco ASA Firewall Cons →

Pricing and Cost Advice
  • "Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed."
  • "This product requires licenses for advanced features including Snort, IPS, and malware detection."
  • "This product is expensive."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • "The price of Firepower is not bad compared to other products."
  • "The solution was chosen because of its price compared to other similar solutions."
  • "The price is comparable."
  • "It definitely competes with the other vendors in the market."
  • More Cisco Firepower NGFW Firewall Pricing and Cost Advice →

  • "There is flexibility in the different licensing models that are offered."
  • "The pricing is pretty high, not just for your capital, for what you have to pay upfront, but for what you pay for your annual software renewals as well, compared to a lot of other vendors. Check Point is near the top, as far as how much it's going to cost you."
  • "Pricing of CloudGuard is pretty fair when you have a single account. It's comparable with other cloud providers. But for our use case, it got really pricey when we had to deploy multiple CloudGuards on multiple accounts in different regions, because you can't have CloudGuard protecting multiple regions. That's the big thing."
  • "The pricing and licensing have been good. We just had to do a license increase for our portion of it. We had that done within a couple of days. Given the fact that it's purely a software-based license, it ends up being even quicker than doing it for an on-prem firewall."
  • "It is not expensive, but it is a little bit above the middle range. There are other solutions that are a little more expensive than this, but they also have some interesting features."
  • "The price could be better."
  • "You get charged only for what resources you choose and how much traffic actually passes through the firewall, which in turn saves a lot of money."
  • "Although I don't have specifics for pricing, based on my overall experience, I can conclude that Check Point provides the best pricing when comparing to other vendors."
  • More Check Point CloudGuard Network Security Pricing and Cost Advice →

  • "Cisco is considered to be an expensive solution."
  • "It's very competitive with other products."
  • "We pay about $200 yearly and we have two firewalls."
  • "I'd say it's probably well-priced."
  • "The product cost is a little high. It is a little bit on the high side, and it should be a little bit cost-friendly."
  • "We pay about €2,000 ($2,400 USD) per year for licensing."
  • "If we compare it with FortiGate and the co-existing ASA, FortiGate is better in price."
  • "They seem to be at the top end in terms of pricing, but they are worth the price. They are probably a little bit lower than Palo Alto. If the customers are relying on Cisco products and they are thinking more in terms of scaling to another layer in a year, it is pretty much in a good price range."
  • More Cisco ASA Firewall Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    620,600 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer: The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
    Top Answer:It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer:Check Point has pretty simple solutions, like the virtual appliance which you just download and it is imported into… more »
    Top Answer:The cost is on the higher side, as it is based on workload, hence we need to decide which VPC or workload needs to be… more »
    Top Answer:In terms of what could be improved, we have no support with the current Check Point environment. It ended maybe three or… more »
    Top Answer:One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet… more »
    Top Answer: Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports… more »
    Top Answer:When looking to change our ASA Firewall, we looked into Palo Alto’s WildFire. It works especially in preventing advanced… more »
    Comparisons
    Also Known As
    Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
    CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
    Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv
    Learn More
    Cisco
    Video Not Available
    Overview

    Cisco Firepower Next-Generation Firewall (NGFW) is a firewall that provides capabilities beyond those of a standard firewall and delivers comprehensive, unified policy management of firewall functions, application control, threat prevention, and advanced malware protection from the network to the endpoint.

    Cisco NGFW Firewalls include advanced threat defense capabilities to meet diverse needs, from small offices to high-performance data centers and service providers, and are deployed in leading private and public clouds. Available in a wide range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Cisco NGFW firewalls are also available with clustering for increased performance, high availability configurations, and more.

    Key Features of Cisco NGFW Firewalls

    • Breach prevention and advanced security: Prevent attacks before they get inside. Cisco provides its firewalls with the latest intelligence to stop emerging threats and employs filtering to enforce policies on hundreds of millions of URLs. Cisco NGFW offers built-in sandboxing and advanced malware protection that continuously analyzes file behavior to quickly detect and eliminate threats.

    • Comprehensive network visibility: Constantly monitor your network so you can rapidly spot and stop bad behavior. Cisco NGFW provides a holistic view of all activity and provides a clear picture of threat activity across users, hosts, networks, and devices, as well as information on threats and website, application, and VM activities.

    • Flexible management and deployment options: Centrally deploy, customize, and manage all your appliances.

    • Fast detection: Detect threats in seconds and detect the presence of a successful breach within hours or minutes. Cisco NGFW allows you to deploy consistent policy that's easy to maintain, with automatic enforcement across all the different parts of your organization.

    • Automation and product integrations: Seamlessly integrate with Cisco tools and automatically share threat information, event data, policy, and contextual information with email, web, endpoint, and network security tools. Cisco NGFW automates security tasks like impact assessment, policy management and tuning, and user identification.

    Reviews from Real Users

    Cisco NGFW stands out among its competitors for a number of reasons. Two major ones are its extensive discovery abilities that enable you to constantly see what is happening on your network and take action when necessary, and the high level of protection it provides.

    Mike B., a director of IT security at a wellness & fitness company, writes, "It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective."

    Zhulien K., the lead network security engineer at TechnoCore LTD, notes, " The most valuable feature that Cisco Firepower NGFW provides for us is the Intrusion policy. Again, with that being said, I cannot shy away from giving kudos to all of the other features such as AVC (Application Visibility and Control), SSL Decryption, Identity policy, Correlation policy, REST API, and more. All of the features that are incorporated in the Cisco Firepower NGFW are awesome and easy to configure if you know what you are doing. Things almost always work, unless you hit a bug, which is fixed with a simple software update. "

    Check Point CloudGuard provides unified cloud native security for all your assets and workloads, giving you the confidence to automate security, prevent threats, and manage posture – everywhere – across your multi-cloud environment.

    Cisco ASA Firewall is a security device that combines firewall, intrusion prevention, virtual private network (VPN), and antivirus capabilities. Its main purpose is to provide proactive threat defense to stop attacks before they spread through the network.

    Cisco ASA Firewall Features

    Cisco ASA Firewall has many valuable key features, including:

    • Intrusion prevention system (IPS): Cisco ASA Firewall’s IPS provides contextual awareness.
    • Advanced threat protection: Gain protection against zero day threats (based on using global threat intelligence) .
    • Rapid threat containment: With Cisco ASA Firewall, you can proactively mitigate risks. If a threat is detected, additional security policies are applied to other network devices for increased protection.
    • High availability: Cisco ASA Firewall offers high availability for high resiliency applications
    • Integrated IPS, VPN, and unified communications capabilities
    • Multi-node clustering
    • Multi-site
    • High performance

    Cisco ASA Firewall Benefits

    Some of the benefits of using Cisco ASA Firewall include:

    • Superior protection from threats through CSC, IPS, and the like.
    • Better pricing means that TCO is reduced. 
    • High performance levels that can be scaled to achieve 10+ Gbps.
    • You can deploy new applications easily over secured layers.
    • Identity-based access helps you access business resources.
    • Identity-based access can be integrated with other services, such as LDAP and Microsoft Active Directory.
    • By implementing Cisco ASA Firewall, IT resources are freed up.
    • Because Cisco ASA Firewall offers effective prevention, your spyware cleanup costs decrease.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by Cisco ASA Firewall users.

    A Cisco Security Specialist at a tech services company says, “All the features are very valuable. Among them is the integration for remote users, with AnyConnect, to the infrastructure. All the security through that is wonderful and it's very easy. You connect and you are inside your company network via VPN. Everything is encrypted and it's a very good solution.” He goes on to add, “The intrusion prevention system, the intrusion detection, is perfect. But you can also integrate Cisco with an IPS solution from another vendor, and just use the ASA with AnyConnect and as a firewall. Cisco ASA also provides application control. You can block or prevent people from going to certain applications or certain content.”

    Jonathan M., Head of Information Communication Technology at National Building Society, comments, "The benefits we see from the ASA are connected to teleworking as well as, of course, having the basic functionality of a firewall in place and the prevention of attacks. The standard reports allow us to constantly monitor our environment and take corrective steps.

    Eric H., CEO at NPI Technology Management, explains, “The command-line interface is really useful for us. We script basic installations and modifications through the command-line, which is considered sort of old school, and yet it allows us to fully document the changes that we're making due to the fact that we can save the exact script that was applied and say, "Here are the changes that we made."

    Offer
    Learn more about Cisco Firepower NGFW Firewall
    Learn more about Check Point CloudGuard Network Security
    Learn more about Cisco ASA Firewall
    Sample Customers
    Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
    Physicians Choice Laboratory Services, Helvetica Insurance
    There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
    Top Industries
    REVIEWERS
    Comms Service Provider19%
    Financial Services Firm17%
    Government13%
    Manufacturing Company6%
    VISITORS READING REVIEWS
    Comms Service Provider29%
    Computer Software Company20%
    Government7%
    Manufacturing Company4%
    REVIEWERS
    Financial Services Firm17%
    Computer Software Company17%
    Government13%
    Program Development Consultancy7%
    VISITORS READING REVIEWS
    Comms Service Provider27%
    Computer Software Company24%
    Government6%
    Energy/Utilities Company5%
    REVIEWERS
    Financial Services Firm15%
    Comms Service Provider12%
    Computer Software Company9%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Comms Service Provider35%
    Computer Software Company19%
    Government6%
    Manufacturing Company4%
    Company Size
    REVIEWERS
    Small Business40%
    Midsize Enterprise25%
    Large Enterprise35%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise20%
    Large Enterprise55%
    REVIEWERS
    Small Business39%
    Midsize Enterprise29%
    Large Enterprise32%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise22%
    Large Enterprise57%
    REVIEWERS
    Small Business35%
    Midsize Enterprise23%
    Large Enterprise42%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise22%
    Large Enterprise51%
    Buyer's Guide
    Check Point CloudGuard Network Security vs. Cisco ASA Firewall
    July 2022
    Find out what your peers are saying about Check Point CloudGuard Network Security vs. Cisco ASA Firewall and other solutions. Updated: July 2022.
    620,600 professionals have used our research since 2012.

    Check Point CloudGuard Network Security is ranked 8th in Firewalls with 30 reviews while Cisco ASA Firewall is ranked 4th in Firewalls with 90 reviews. Check Point CloudGuard Network Security is rated 8.4, while Cisco ASA Firewall is rated 8.4. The top reviewer of Check Point CloudGuard Network Security writes "Unified Security Management has enabled us to combine our on-prem appliances and cloud environments". On the other hand, the top reviewer of Cisco ASA Firewall writes "Includes multiple tools that help manage and troubleshoot, but needs SD-WAN for load balancing". Check Point CloudGuard Network Security is most compared with Azure Firewall, VMware NSX, Fortinet FortiGate, Sophos XG and Barracuda CloudGen Firewall, whereas Cisco ASA Firewall is most compared with Fortinet FortiGate, Palo Alto Networks WildFire, Meraki MX, pfSense and Juniper SRX. See our Check Point CloudGuard Network Security vs. Cisco ASA Firewall report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.