We performed a comparison between Check Point IPS and Cisco IOS Security based on real PeerSpot user reviews.
Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is that it protects us against hundreds of different attack vectors, like ransomware. The protection is always being triggered. People try to access websites that are categorized as malware, so when the users do a DNS request for the IP of those malware websites, the IPS Blade replaces the real IP of the website that is malware with a bogus IP. The user gets an IP that doesn't exist and when he tries to access, it won't work."
"The integration is a valuable feature."
"The solution's IPS functionality and firewall functionality are the solution's most valuable features."
"The tool's most valuable feature is its detection panel. Managing and updating policies within Check Point IPS is easy and without issues. It provides a secure network."
"Its event analysis and centralization features are very important for any organization."
"Protection in real-time is very good. It helps us detect things on time and make decisions to improve perimeter security."
"IPS signatures can be set quite granularly depending on your environment. You can filter on performance impact, severity, and confidence which makes sizing and adapting easier."
"It is also worth noting that many IPS signature comes with detailed background about the vulnerability, and potentially how the vulnerability would affect the network security."
"Cisco IOS allows us to keep the same security features as our principal offices."
"The technical support is good."
"Cisco is head-and-shoulders above all of the competition when it comes to technical support."
"I'm able to transfer data over internet network security. With the GRE I'm able to transfer data within one bunch to another bunch in a public way, like the internet. The communication is encrypted and is private. It gives me added privacy."
"The Intrusion Firewall is a valuable feature."
"The product has valuable features for business intelligence."
"The VPN connection portal scan works flawlessly, which was a big plus for us."
"Cisco Technical Assistance Center works on a follow-the-sun concept and gives real 24x7 customer support, which is a great advantage when you have a service contract with them."
"In my opinion, the Check Point software engineers should works on the performance of the blade - when it is activated with the big number of the protections in place, the monitoring shows us the significant increase in the CPU utilization for the gateway appliances - up to 30 percents, even so we are cherry-picking only the profiles that we really needed."
"The solution needs enhanced reporting. The reporting on Cisco Stealthwatch and Darktrace is much bigger. The visibility that they grant for the filtering capabilities over large infrastructures are far superior."
"It is generally good, but improving the performance would be the one thing I'd take a look at right now."
"What I would like to improve in IPS would be the capacity of the hardware. I would also like to be able to sort signatures by severity. This would greatly impact how well I can manage my environment."
"The service that we want to see in the future is a capacity to segment the IPS services by equipment."
"Support is the biggest area for improvement."
"When entering, it always takes a long time to load."
"There is a performance impact on the NGFW post-enabling the IPS blade/Module, which can even lead to downtime if IPS starts to monitor or block high-volume traffic."
"The solution is complex and can be more user-friendly."
"The routers, don't have like long-term tendency features, or higher availability features available for the IOS. It could also use a better user interface."
"We have a very bad experience on the support. They take too much time requesting logs, and they are not coming directly online to resolve the issues."
"It takes too much time to deploy a policy to FMC. It takes around eight minutes. You can't afford any downtime when you're changing policies."
"If they could increase the performance a little better because the device sometimes gets slow."
"In the next release of this solution, we would like to see support for the 100BT and 7000 models."
"The user interface needs to be improved."
"I would like to see much more embedded security that works and that isn't a bolt-on."
Check Point IPS is ranked 3rd in Intrusion Detection and Prevention Software (IDPS) with 45 reviews while Cisco IOS Security is ranked 10th in Intrusion Detection and Prevention Software (IDPS) with 47 reviews. Check Point IPS is rated 8.6, while Cisco IOS Security is rated 8.0. The top reviewer of Check Point IPS writes "Great for detection and access with the capabilities of defining specific rules". On the other hand, the top reviewer of Cisco IOS Security writes "User-friendly and excels in documentation, making it easier to resolve issues". Check Point IPS is most compared with Darktrace, Palo Alto Networks URL Filtering with PAN-DB, Palo Alto Networks Advanced Threat Prevention, Trend Micro TippingPoint Threat Protection System and Cisco NGIPS, whereas Cisco IOS Security is most compared with Cisco Secure Firewall, Fortinet FortiGate, Meraki MX, Fortinet FortiOS and Netgate pfSense. See our Check Point IPS vs. Cisco IOS Security report.
See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.