Try our new research platform with insights from 80,000+ expert users

Check Point CloudGuard CNAPP vs Cisco Umbrella comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 30, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Vulnerability Management (18th), Continuous Threat Exposure Management (CTEM) (3rd)
Check Point CloudGuard CNAPP
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
72
Ranking in other categories
Vulnerability Management (11th), Cloud and Data Center Security (9th), Container Security (10th), Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (6th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (7th), Compliance Management (6th)
Cisco Umbrella
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
122
Ranking in other categories
Secure Web Gateways (SWG) (1st), Internet Security (1st), Cloud Access Security Brokers (CASB) (2nd), Domain Name System (DNS) Security (1st), Cisco Security Portfolio (1st)
 

Mindshare comparison

Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Check Point CloudGuard CNAPP1.1%
Wiz7.5%
Tenable Nessus5.2%
Other86.2%
Vulnerability Management
Domain Name System (DNS) Security Market Share Distribution
ProductMarket Share (%)
Cisco Umbrella21.6%
Infoblox Advanced DNS Protection12.4%
Palo Alto Networks DNS Security7.5%
Other58.5%
Domain Name System (DNS) Security
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
reviewer2751468 - PeerSpot reviewer
Assistant Manager at a computer software company with 201-500 employees
Boosts security and compliance in multi-cloud environments while real-time threat detection enhances risk management
Check Point CloudGuard CNAPP flagged a misconfiguration in our AWS S3 bucket that had overly permissive access settings. That configuration could have exposed our sensitive data to the public internet. The platform not only identified the issue but also provided remediation that our team was able to apply immediately. This prevented a potential data exposure. Check Point CloudGuard CNAPP offers a unified, modular platform that combines CSPM, CWPP, CIEM, code security, and cloud detection and response. The agentless workload posture, real-time threat detection and response, multi-cloud coverage and visibility, compliance automation, and one-click remediations stand out as its best features. I find myself relying on the risk management engine and prioritization the most day-to-day. In any cloud environment, you are flooded with findings, misconfigurations, vulnerabilities, and compliance gaps. Without prioritization, it is overwhelming for our team to take care of the posture. CloudGuard's risk scoring helps us cut through incidents. This makes remediation faster and focused instead of wasting time checking every alert. We get to fix the issues that pose real business risks. Check Point CloudGuard CNAPP has positively impacted our organization at a significant level. We get greater visibility and control across all our cloud environments. Some biggest benefits we have seen are faster detection and remediation of misconfigurations, improved compliance posture, reduced risk exposure, operational efficiency, and cost savings. Overall, it has made our cloud environment more secure, compliant, and easier to manage while freeing up our teams to focus on projects instead of chasing alerts.
Emilio Montoya - PeerSpot reviewer
CTO at PROA
Ensures internet navigation safety and boosts productivity
The features of Cisco Umbrella I prefer most are DNS protection and traffic redirect. With Cisco Talos's threat intelligence, we reduce the impact of malware traffic in our network, and we currently see the behavior of equipment and choose the correct sites. Cisco Talos has helped us reduce the impact of malware traffic. We can see the behavior and choose the correct sites. We're currently testing secure access with Umbrella in order to secure access to core applications. It's a product that the user doesn't even know is there, even though it is protecting them. It's not hard on the equipment. And, for us, it centralizes everything, which improves productivity. With the Experience Insights feature of Cisco Secure Access, we've seen impacts on the management of user connectivity by allowing us to deliver safe connectivity. We are testing the Secure Access product with Cisco Umbrella to improve our connectivity with our users in order to secure access to the corporate applications. Cisco Umbrella is in the cloud, which is nice.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"We saw benefits from Zafran Security almost immediately after deploying it."
"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."
"The most valuable feature is the ability to work with the APIs to integrate into our own backend systems."
"The most valuable feature is the CloudBots for auto-remediation of security findings."
"The new scanning function is a valuable feature that wasn't available until recently."
"The CloudGuard for Cloud Intelligence tool has several significant features that provide security to our company."
"It presents great visibility of the traffic flow of our cloud, providing information on what data and users are circulating and in the event of a threat, it immediately identifies them by providing detailed and granular information from our entire environment."
"Cloud security posture management is the feature we've been using the longest."
"The visibility in our cloud environment is the most valuable feature."
"Cisco Umbrella is the first layer of security that protects me while surfing the net, identifying untrusted websites to prevent access."
"The reports and notifications are the most useful part of the platform. As soon as you deploy the security layers, the reporting is very comprehensive. It helps you to have, at a glance, a clear view of what's going on."
"The most valuable feature is its ability to detect if a URL has malware or is vulnerable."
"You can manage and create policies based on a group of users. It can permit some URLs and block others."
"It is user-friendly. It is easy to manage the solution."
"Meraki features and cloud-based functionality are advanced and easy to manage centrally."
"The single-pane-of-glass management is really important. In today's era, administration costs and operational expenses will cost you a lot, and it reduces that as well. You don't need extra resources to manage all your parameter firewalls, looking at every single device to allow resources internal access. By just introducing the single-pane-of-glass management, it has lifted the burden off of management, especially the network management."
"Application performance has greatly improved and there are less operational issues. Productivity has been going up because we have less operational issues. Also, we have happy customers."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"Check Point CloudGuard CNAPP can improve with more intuitive onboarding and policy templates for new users who are not accustomed to it, better customizable dashboards for different team roles, and deeper automated remediation suggestions to speed up fixes."
"The tool has a lot of potential, but today, it lacks a lot of Scripts/Bots for Azure."
"I would like CloudGuard's pricing to be cheaper, but I think that's impossible. The pricing is the only thing I think they can improve."
"Currently, I would like this solution extended to cellular devices or tablets."
"Adding a feature that allows me to easily identify the changes that have been made to the CIS benchmark and update my own policy accordingly would be a valuable addition to Check Point CloudGuard Posture Management."
"We want to be able to customize the solution more in order to meet the needs of our company."
"I am not a technical person, but generically, the user interface can be a little more intuitive. Our staff has trained network security and cloud security professionals, and they get it, but when you are trying to get to the customers to be able to pick it up and maintain it, it can be a bit difficult."
"The main issue that we found with Dome9 is that we have a default rule set with better recommendations that we want to use. So, you do a clone of that rule set, then you do some tweaks and customizations, but there is a problem. When they activate the default rule set with the recommendations and new security measures, it doesn't apply the new security measures to your clones profile. Therefore, you need to clone the profile again. We are already writing a report to Check Point."
"The solution could be faster as the process is very slow."
"I don't have an answer for how Cisco Umbrella can be improved, as it has been some time since I've worked with it."
"I'd like to see improvement in its overall integration with all the other platforms. There's some integration between Umbrella and Meraki, but an overall Cisco problem is that there are so many different tools, and finding easy, seamless ways of connecting everything together is always a challenge."
"From my perspective, I would Cisco Umbrella to give more exposure to my sales engineers. I know I can call them whenever I have an issue, however, more frequent meetings would be awesome."
"Some countries don't have a DNS server leading to a domain resolution IP, not at a local level."
"The channel of support needs improvement. It is not under normal Cisco support, and I cannot simply call for support."
"I would like them to make some videos, practical videos, the kind with steps that people can use to learn and deploy"
"The pricing is a bit high. Being outside of the USA, we have issues with the exchange rate."
 

Pricing and Cost Advice

Information not available
"Its price is very fair."
"The licensing and costs are straightforward, as they have a baseline of 100 workloads (number of instances) within one license with no additional nor hidden charges. If you want to have 200 workloads under Dome9, then you need to take out two licenses for that. Also, it does not have any impact on cloud billing, as data is shared using the API call. This is well within the limit of free API calls provided by the cloud provider."
"The solution’s pricing is a little bit high."
"It is a very straightforward licensing model that is based on the number of assets you are discovering and managing with the solution."
"Licensing and costs are straightforward, as they have a baseline of 100 workloads within one license and no additional charges."
"I suggest that you pay attention to the product pricing because while there are no tricks, and the licensing model is transparent, the final numbers may surprise you."
"The price is on the higher end."
"Check Point CloudGuard Posture Management is expensive."
"There are no hidden costs with Umbrella. Everything is included in the package."
"The pricing model is easier compared to some of the other solutions, and it is also competitive."
"Cisco should make the solution cheaper."
"The price could be lower."
"You can request an evaluation license​."
"There is room for improvement when it comes to the cost."
"​The pricing is fair."
"The licensing and pricing structure of Cisco Umbrella is in line with standard systems on the market, and we have no specific requirements in this area. Overall, we have found it to be an acceptable pricing model for our organization."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
880,490 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
7%
Outsourcing Company
6%
Financial Services Firm
11%
Manufacturing Company
9%
Computer Software Company
8%
Outsourcing Company
6%
Computer Software Company
13%
Manufacturing Company
9%
Financial Services Firm
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business55
Midsize Enterprise17
Large Enterprise57
By reviewers
Company SizeCount
Small Business49
Midsize Enterprise30
Large Enterprise51
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What is your experience regarding pricing and costs for CloudGuard Workload Protection?
My experience with pricing, setup cost, and licensing has been reasonable for the value it delivers. The initial setu...
What do you like most about CloudGuard for Cloud Intelligence?
The new scanning function is a valuable feature that wasn't available until recently.
What needs improvement with CloudGuard for Cloud Intelligence?
One area that Check Point CloudGuard CNAPP could use improvement is the navigation when switching between modules. A ...
Which is the better security solution - Cisco Umbrella or Zscaler?
Cisco Umbrella and Zscaler Internet Access are two broad-spectrum Internet security solutions that I have tried. Zs...
Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-nat...
What do you like most about Cisco Umbrella?
Cisco Umbrella is easy to monitor, manage, and deploy.
 

Also Known As

No data available
Check Point CloudGuard Posture Management, Dome9, Check Point CloudGuard Workload Protection, Check Point CloudGuard Intelligence
OpenDNS
 

Overview

 

Sample Customers

Information Not Available
Symantec, Citrix, Car and Driver, Virgin, Cloud Technology Partners
Chart Industries, City of Aspen, Eastern Mountain Sports, FLEXcon, George Washington University, Jackson Municipal Airport Authority, Ohio Public Library Information Network, PTC, Richland Community College, Smart Motors, Tulane University, VeriClaim
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: January 2026.
880,490 professionals have used our research since 2012.