No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Cisco Catalyst SD-WAN comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
Check Point Cloud Firewall boosts ROI by enhancing security, flexibility, and automation, leading to cost savings and efficiency.
Sentiment score
6.4
Users reported reduced WAN costs, improved service reliability, and significant savings with potential ROI within a year.
The value lies in maintaining operational integrity with zero downtime or incidents, facilitating secure, ongoing business operations.
Cybersecurity consultant at a comms service provider with 51-200 employees
Implementing CloudGuard has resulted in an excellent return on investment over one hundred percent ROI.
Android Developer at Droidforge
The unified policy is comprehensive and helps me to create firewall policies that are shared across all our facilities and plants.
System engineer at a manufacturing company with 1,001-5,000 employees
They are now back to do that with the remainder of their company, so they've realized the value in 12 months and are willing to invest in the remainder of their organization.
Information Technology Consultant at Island Networks
 

Customer Service

Sentiment score
7.2
Check Point Cloud Firewall support is praised for its expertise but criticized for inconsistent service quality and response times.
Sentiment score
7.4
Cisco Catalyst SD-WAN support is generally praised for responsiveness and efficiency, despite occasional delay issues, rated highly by users.
They usually respond quite fast, and they are very knowledgeable about what they do.
Network security engineer at a tech services company with 201-500 employees
We had an endless loop of emails trying to fix this, and the suggestion was to reinstall the gateway and do it from scratch, which was not an option at that point because it would leave that specific location without access.
System administrator at a consultancy with 201-500 employees
Available twenty-four by seven.
Android Developer at Droidforge
The principal third-level support is very good.
Technology supervisor at a non-profit with 1-10 employees
I would consider Cisco support a 10 out of 10.
Information Technology Consultant at Island Networks
I would rate Cisco's support, their customer service, and technical support as excellent.
Solution Architect at Sonda S.A.
 

Scalability Issues

Sentiment score
7.7
Check Point Cloud Firewall is highly scalable, integrating well into various environments, praised for its deployment and performance.
Sentiment score
7.4
Cisco Catalyst SD-WAN is scalable, supporting extensive networks and preferred for seamless scaling in complex environments across various sectors.
It is capable of managing the increased load and performs well as our needs expand.
IT Security Analyst at Eos Energy Enterprises, Inc.
I can deploy it everywhere I need it.
Security & Network Services at a tech company with 201-500 employees
We have transitioned from 1,000 to 500 users without any issue.
Cloud Infrastructure Engineer at delaware BeLux
Cisco SD-WAN is highly scalable and can be expanded to more than 10,000 sites.
Technical Consultant at Vertex Techno Solutions (B) Pvt Ltd
The ease of configuration and features like zero-touch provisioning enhance the scalability of Cisco SD-WAN, especially in disaster recovery situations.
Engineer at Routz
It is done through static whitelisting of the IPs, which is not a scalable solution since IPs can change at any time.
Network Manager at HPCL
 

Stability Issues

Sentiment score
8.0
Check Point Cloud Firewall is stable and reliable, with minor connectivity issues that rarely affect functionality, meeting user expectations.
Sentiment score
7.4
Cisco Catalyst SD-WAN is reliable overall, with stability varying by configuration, despite minor bugs and integration challenges.
I have not observed any downtime.
Sales manager/ project manager at Atea
For instance, when we are working on a release and do an upgrade, we start experiencing unexpected issues.
Chief Technology Officer at Chief Security Officers
The solution is stable.
Network administrator at Helios IT Service GmbH
While some software-related issues and bugs were encountered, they did not cause the whole environment to crash.
Engineer at Routz
A simple issue in the control connections between the fabric causes numerous complexities.
Network Manager at HPCL
 

Room For Improvement

Check Point Cloud Firewall needs better integration, improved UI, clearer policies, simplified pricing, and enhanced support and documentation.
Cisco Catalyst SD-WAN suffers from high costs, complex configuration, and lacks user-friendly features, hindered by complicated licensing.
Scalability could be improved as well; needing to purchase a new license each time I want to add a new interface is not ideal.
Security architect at Twinformatics
Better documentation would be welcome.
Network security engineer at a tech services company with 201-500 employees
The user interface could be more intuitive, and the initial setup and configuration can be complex, requiring a technical team.
Android Developer at Droidforge
Now, they change frequently, making it difficult to obtain long-term support.
Technology supervisor at a non-profit with 1-10 employees
Including more features like integrating with Splunk for monitoring vulnerabilities would help eliminate the need for other SOC solutions.
Technical Consultant at Vertex Techno Solutions (B) Pvt Ltd
The negative, or the downside of Cisco is the knowledge base; you need to be a little bit more tech-savvy and network-savvy to work with Cisco, while Juniper is a lot more user-friendly from what I can see, especially in terms of configuration and any kind of roll back.
Information Technology Consultant at Island Networks
 

Setup Cost

Check Point Cloud Firewall offers flexible, premium pricing with significant value and savings for advanced security needs through various licensing options.
Cisco Catalyst SD-WAN is costly with hidden fees, prompting a shift from Capex to Opex to manage expenses.
The pricing and licensing are expensive, costing between seven thousand to eight thousand dollars.
Android Developer at Droidforge
Check Point is expensive, however, with the features and capabilities, I can justify the cost.
Manager, Managed Security Services at a tech vendor with 51-200 employees
It is the highest in the market.
System engineer at a manufacturing company with 1,001-5,000 employees
Its pricing is justifiable due to the comprehensive solution it offers.
Technical Consultant at Vertex Techno Solutions (B) Pvt Ltd
It is also relatively cost-effective for smaller businesses when using the Meraki version.
Engineer at Routz
The pricing of Cisco Catalyst SD-WAN is rated between eight and nine out of ten, where ten is the most expensive.
Technology supervisor at a non-profit with 1-10 employees
 

Valuable Features

Check Point Cloud Firewall enhances security with threat prevention, centralized management, auto-scaling, real-time detection, and seamless cloud integration.
Cisco Catalyst SD-WAN is praised for its centralized management, integrated security, zero-touch provisioning, scalability, and cloud cost savings.
One of the most valuable features is the automated threat prevention, which helps us detect and block potential cyberattacks in real-time, minimizing data breaches.
Android Developer at Droidforge
Centralized management is the feature I like best, resulting in reduced workload and more continuous policy.
Security & Network Services at a tech company with 201-500 employees
Network Security provides us with unified security management across hybrid and cloud as well as on-prem.
Manager, Managed Security Services at a tech vendor with 51-200 employees
It also provides robust security features, including port security, analysis, mirroring, and multiple other security solutions.
Technology supervisor at a non-profit with 1-10 employees
Cisco Catalyst SD-WAN has integrated security features which include base firewall, URL filtering, IPS, and secure segmentation.
Solution Architect at Sonda S.A.
Integration capabilities provide comprehensive security.
Technical Consultant at Vertex Techno Solutions (B) Pvt Ltd
 

Categories and Ranking

Check Point Cloud Firewall ...
Ranking in Software Defined WAN (SD-WAN) Solutions
5th
Ranking in WAN Edge
3rd
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
167
Ranking in other categories
Firewalls (8th), Managed Security Services Providers (MSSP) (1st), Cloud and Data Center Security (6th), Unified Threat Management (UTM) (4th)
Cisco Catalyst SD-WAN
Ranking in Software Defined WAN (SD-WAN) Solutions
2nd
Ranking in WAN Edge
2nd
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
98
Ranking in other categories
Network Management Applications (5th)
 

Mindshare comparison

As of May 2026, in the Software Defined WAN (SD-WAN) Solutions category, the mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 3.0%, up from 1.3% compared to the previous year. The mindshare of Cisco Catalyst SD-WAN is 10.4%, down from 14.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Defined WAN (SD-WAN) Solutions Mindshare Distribution
ProductMindshare (%)
Cisco Catalyst SD-WAN10.4%
Check Point Cloud Firewall (formerly CloudGuard Network Security)3.0%
Other86.6%
Software Defined WAN (SD-WAN) Solutions
 

Featured Reviews

Viral Shaa - PeerSpot reviewer
IT Security Analyst at Eos Energy Enterprises, Inc.
Cloud security has unified hybrid policies and now protects critical energy workloads continuously
I would say Check Point Cloud Firewall (formerly CloudGuard Network Security) is valuable due to its hybrid cloud security features. It offers granular policy management across the on-premises and cloud environments, giving administrators consistent control for configuration drift. We need to change the policy and the inbound and outbound traffic settings, indicating what traffic must be blocked or allowed, and this capability with Check Point provides significant input into our security strategy. Check Point Cloud Firewall (formerly CloudGuard Network Security) provides unified security management across both hybrid clouds and on-premises environments. Unified security management affects my security operations positively, as we maintain critical systems on the cloud that require strong security and air gap networks. This cloud-native routing and policy installation helps close gaps in protecting critical applications and environments from exposure to the public cloud. From an administrator's perspective, Check Point Cloud Firewall (formerly CloudGuard Network Security) enhances our organization with clearer and more intuitive logging, making decisions easier to understand without deep investigation. In the CloudGuard UI, I can see which threats have triggered alerts, and this information is available on the unified dashboard that provides details of the threat analysis upon alert. As a small team, we log into the console to check specific alerts for high or low network usage or machine shutdowns. If needed, I tune the configuration policy, and the visualizing tools with reporting functionality simplify tracking changes made on the firewall, including the relevant source IP or device names. We ingest logs into our SIEM for detailed oversight, which allows us to monitor any administrative changes. Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk. We clearly understand our threat landscape and the associated risks. Onboarding the CloudGuard solution directly into our cloud environment has significantly lowered the risks throughout the network and it is easy to launch. When we assess our security posture with third-party assessments, we gain granular visibility into our network pre- and post-CloudGuard installation, showing how we have addressed significant risks and secured vulnerabilities.
ND
Network Manager at HPCL
Faced complex visibility and policy challenges but have improved basic traffic routing control
I have found some other solutions more insightful and user-friendly as compared to Cisco Catalyst SD-WAN, but the basic SD-WAN functionality is good enough. I am using it only because it was done as a pilot project, specifically for my 60 to 70 sites. For the majority of the sites, I am using Fortinet's Secure SD-WAN solution and I found that more viable and more in alignment with my requirements. For example, there is not any Internet Service Database available in Cisco Catalyst SD-WAN intrinsically. If I want to write a policy based on applications, I am not able to write it, at least in Cisco Catalyst SD-WAN Viptela deployment that we have done, and that is fairly easy to do in Fortinet. The second issue is the logging capability. I think the visibility that Fortinet Secure SD-WAN has is not even comparable. Cisco Catalyst SD-WAN does not provide that sort of insight or control as far as traffic steering is concerned. With respect to the SLAs, I barely know which sort of SLAs are violated in Cisco Catalyst SD-WAN, so I do not have clear visibility on where the traffic is moving from at my spoke or hub locations. I believe Fortinet gives me a very clear picture of where the traffic is going. Overall visibility, whether it is data traffic or logs, is much better in Fortinet compared to Cisco Catalyst SD-WAN. The complexity of Cisco Catalyst SD-WAN Viptela is noticeable and quite complicated to configure. If something breaks, you have to involve TAC and others to fix it. On the contrary, you can work with underlays. Even if your IPsec overlay tunnel is down, it does not impact your production. Thus, we find Fortinet's solution significantly better than Cisco Catalyst SD-WAN solution. I have used Application-aware Routing in Cisco Catalyst SD-WAN. However, I found it to be very complicated, especially regarding policy writing. For my breakout of VC traffic, we had to write a bunch of IP addresses for Zoom, Webex, and others. Presently, it can only identify Webex as an application, and I highly doubt whether there is any application identification for Zoom and other platforms, as we were not able to find it during our implementation. It is done through static whitelisting of the IPs, which is not a scalable solution since IPs can change at any time. Overall, the application-aware routing policies are not as flexible and scalable as the Internet Service Database feature of Fortinet provides. The struggles encompass policy writing, logging capabilities, traffic visibility, and complex configuration. There is also the issue of load balancing. We have faced considerable challenges with traffic load balancing between the links. Although the SLA targets are configurable, understanding how traffic flows is challenging, making troubleshooting exceedingly difficult. Overall, I find it a quite complicated solution with not that much operational usability.
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
896,467 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
10%
Computer Software Company
9%
Financial Services Firm
9%
Manufacturing Company
7%
Financial Services Firm
12%
Computer Software Company
8%
Manufacturing Company
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business71
Midsize Enterprise41
Large Enterprise79
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise15
Large Enterprise46
 

Questions from the Community

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
We have encountered a few subscription-based licensing models for the virtual gateway and security enablement. We have opted for a three-year contract with fixed pricing for the CloudGuard cost str...
What needs improvement with Check Point CloudGuard Network Security?
I find troubleshooting a bit challenging with Check Point Cloud Firewall (formerly CloudGuard Network Security); one area needing improvement is log clarity, as sometimes policy installation takes ...
What is your primary use case for Check Point CloudGuard Network Security?
My usual use cases for Check Point Cloud Firewall (formerly CloudGuard Network Security) involve onboarding as an energy company, where it acts as the cloud-native security platform that extends th...
What is your experience regarding pricing and costs for Cisco SD-WAN?
The pricing of Cisco Catalyst SD-WAN is rated between eight and nine out of ten, where ten is the most expensive.
What needs improvement with Cisco SD-WAN?
I have found some other solutions more insightful and user-friendly as compared to Cisco Catalyst SD-WAN, but the basic SD-WAN functionality is good enough. I am using it only because it was done a...
What is your primary use case for Cisco SD-WAN?
I have used Cisco Catalyst SD-WAN as a customer. I am a customer of Cisco, and I have been a customer rather than a partner of Cisco.
 

Also Known As

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
Cisco SD-WAN
 

Overview

 

Sample Customers

Physicians Choice Laboratory Services, Helvetica Insurance
Doyle Research, Ashton Metzler & Associates
Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Cisco Catalyst SD-WAN and other solutions. Updated: May 2026.
896,467 professionals have used our research since 2012.