

Find out in this report how the two Secure Web Gateways (SWG) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
Our company successfully blocked a targeted phishing attack that could have compromised employee credentials and led to a costly data breach.
We have seen a return on investment with Check Point Harmony Browse, reporting a strong return where users have highlighted that the solution's security features, such as blocking phishing attacks and preventing malware downloads, have significantly reduced the number of security incidents, leading to a decrease in IT support costs and less downtime.
At Amazon, we knew exactly how much it would cost if a fulfillment center was down for an hour.
The AI features further contribute by expediting threat detection and incident response, ensuring tangible returns through operational savings.
It is one of those tools that needs to work right out of the box, and thankfully, it does; it is reliable, and the setup time was quick and straightforward.
The phone and email support provide efficient results with direct reachability to support engineers.
Typically, I do not need to reach out to Check Point support because the solutions work well after installation.
The responses were timely, professional, and knowledgeable.
Cisco TAC is very competent.
With our established point of contact within Cisco, our experience has greatly improved; we no longer log all issues through technical cases, as we can go directly to our account managers or customer service team, which expedites resolution.
I would rate the technical support ten out of ten. Hands down.
Supporting thousands of endpoints without compromising performance.
It is scalable as we monitor and manage endpoints and overall users across the system.
Check Point Harmony Browse is virtually infinite in terms of scalability, and I've seen install bases of up to 5,000 users.
We turn the traffic to the Cisco Secure Access cloud, and we can manage and apply the policies that are necessary, making it very easy to scale the solution.
Cisco has a great benefit in that you can integrate with other solutions in an easy way because it has a lot of protocols to integrate with others and sophisticated steps that we can apply for integration.
Performance has remained consistent, usage has increased, and we have not experienced scalability-related limitations.
In terms of stability, our experience with Check Point Harmony Browse has been positive with no major downtime so far, and the browser runs smoothly with regular updates.
Check Point Harmony Browse is very stable with no communication or other issues encountered on my end.
Cisco is renowned for their reliability, and their products perform well under high data usage.
The service consistently provides secure connectivity for remote users, contractors, and hybrid environments with minimal disruption.
I rate the stability of Cisco Secure Access as ten out of ten.
The user interface can be better, and selecting the action for monitored or watch-listed IOCs can be more refined.
Another area of improvement is extension compatibility since it currently works best with Chrome and Edge, but having wider browser support for Firefox and Safari would be beneficial for mixed environments.
Integrating with Fortinet, Palo Alto, or third-party SIEM products such as Splunk would be a seamless advantage.
Modernization is needed, specifically in the enhancement of security features and functionality.
It was challenging to learn because it has a significant learning curve and requires considerable training to become proficient.
The granular access issue is coming from the product limitation at the moment, as it does not offer us the option to tell it that a particular role can only manage websites, allowed sites, and blocked sites.
Smaller projects tend to be more expensive due to fewer licenses, while larger projects of 500 to 2,000 users benefit from better pricing and discounts.
There were no significant upfront hardware or infrastructure costs since it's delivered as a native cloud service.
It is not too high compared to what we expected, but it is not too cheap either, which is why I rate it five.
The solution is cheaper than premium options such as Palo Alto, existing Cisco licenses facilitate replacing previous solutions with Cisco Secure Access smoothly and affordably.
It is good because you want to push Cisco Secure Access, and regarding the price, it is very much below other products.
Improvement on the pricing will help in expanding the market for Cisco Secure Access and then it can be affordable to much more number of companies than what it is right now.
Everything is handled directly within the browser using a lightweight extension, delivering real-time threat prevention, including protection against zero-day phishing and malicious downloads without impacting user productivity.
The isolated environment in Check Point Harmony Browse is the best feature we provide, giving a separate, isolated environment for the production applications and company applications, which is really valuable.
The real-time Threat Intelligence feature powered by Check Point's ThreatCloud is impressive because ThreatCloud integrates and correlates all malicious data from Check Point installations globally, collecting and analyzing this data with AI and machine learning to help prevent zero-day attacks effectively.
It eliminates the hassle of switching on VPNs and provides a direct connection to resources via Cisco Secure Access.
They are sending the traffic encrypted and categorizing the traffic based on the type, whether web traffic or internet traffic, and doing the security mechanism that is needed for the traffic type.
Using ZTNA in Cisco Secure Access has positively affected my transition and my clients' transition to Zero Trust and least privilege principles, reinforcing the security posture.
| Product | Mindshare (%) |
|---|---|
| Cisco Secure Access | 3.1% |
| Check Point Harmony Browse | 0.9% |
| Other | 96.0% |
| Company Size | Count |
|---|---|
| Small Business | 20 |
| Midsize Enterprise | 14 |
| Large Enterprise | 6 |
| Company Size | Count |
|---|---|
| Small Business | 29 |
| Midsize Enterprise | 13 |
| Large Enterprise | 36 |
Check Point Harmony Browse enhances web browsing security by offering zero-day malware protection, phishing defense, and data loss prevention. It secures user credentials and blocks risky content in real-time through lightweight deployment.
Designed to protect against web-based threats like malware and ransomware, Check Point Harmony Browse filters web content, providing real-time threat analysis and browser isolation. It allows for secure browsing for remote employees without complex setups or the need for VPNs. While it effectively maintains data integrity and reduces downtime, it can enhance its offerings with detailed alerts, quicker updates, and improved integrations with iOS, Android, and third-party applications. Enhancing performance, reporting, language support, and pricing transparency can further benefit user experience.
What features define Check Point Harmony Browse?In industries handling sensitive data or utilizing remote workforce models, Check Point Harmony Browse deployment strengthens online security strategies. Healthcare professionals ensure confidentiality while accessing patient data. Financial institutions prevent unauthorized access to client information. Educational entities use it to safeguard proprietary research and personal data of students and staff. These implementations tailor browser security to meet the intensive requirements of their fields, minimizing threats while optimizing performance.
Cisco Secure Access is a comprehensive Security Service Edge (SSE) solution (a key component of a SASE solution) that addresses the complexities of securing a hybrid enterprise. Cloud-delivered and grounded in zero trust, it delivers a unique blend of user simplicity and IT efficiency for frictionless, secure access to all applications—SaaS (with gen AI), private apps, and the internet—regardless of user location or device. Secure Access protects users, data, and devices against relentless, sophisticated, and constantly evolving threats including AI-driven attacks and identity breaches.
Provides all core SSE components (ZTNA, SWG, CASB, and FWaaS) plus extended capabilities.
Includes VPN-as-a-Service (VPNaaS), data loss prevention (DLP), AI Assistant, visibility/control/guardrails for generative AI use, digital experience monitoring (DEM), reserved IP, remote browser isolation (RBI), DNS-layer security, flexible security enforcement (in cloud or on-premises), policy verification, and more.
Protects users as they seamlessly access resources and apps with no extra steps needed, regardless of protocol, port, or level of customization
Simplifies IT operations through a single client, single dashboard, single license, and unified policies.
Lowers risk with least privilege, granular controls backed with unmatched threat intelligence of Cisco Talos.
Eases interoperability with other products from Cisco and third-party vendors with common administrative controls, data structures, and policy management.
Robust integrations
Integrates with Cisco Identity Intelligence to protect against the startling increase in identity-based attacks.
Integrates with many SAML Identity Providers (IDPs) such as AD, Azure AD, Okta, Ping, etc.
Integrates with Cisco offerings including SD-WAN, Splunk, XDR, Thousand Eyes, third party technologies such as Menlo RBI, Chrome Enterprise Browser, and AppOmni for SSPM.
We monitor all Secure Web Gateways (SWG) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.