Check Point IPS vs Cisco NGIPS comparison

Cancel
You must select at least 2 products to compare!
Check Point Logo
5,174 views|3,888 comparisons
Cisco Logo
3,346 views|2,208 comparisons
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point IPS and Cisco NGIPS based on real PeerSpot user reviews.

Find out in this report how the two Intrusion Detection and Prevention Software (IDPS) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Check Point IPS vs. Cisco NGIPS Report (Updated: November 2022).
655,994 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"IPS logs enable complete visibility and reporting through the smart console.""Check Point IPS manages risk categories very well and accordingly helps us protect each of our devices in real-time.""We are able to define our own rules for detection.""Check Point is one of the best security brands worldwide.""IPS easily allows follow-up flags on recently updated patterns. If, in rare cases, a false positive does occur, it is quickly detected and an exception can be easily created.""Some of the features for views and visualization are already predefined as default files.""Check Point Intrusion Prevention System has great profiles, and we can continuously create, modify, activate, deactivate or configure any specific setting to allow the profile to focus on just one thing or for certain attacks.""The autonomous threat prevention is very easy to use. The APIs and SmartConsole tool also work well."

More Check Point IPS Pros →

"It is salable and technically sound.""The top features of Cisco NGIPS, which have been working very well, include stateful inspection and the access list-based security configuration. But from my perspective, the best part of Cisco NGIPS is the licensing process, which is very easy and straightforward. It's essentially copy-paste licensing.""The traffic filter of this solution is very valuable to us, and to our clients.""The most valuable features of Cisco NGIPS are protection and reporting.""I've found the performance and stability to be the most valuable features of Cisco NGIPS. It is scalable as well.""I have found the filter and the antivirus to be most valuable.""We like the Cisco product, the concept, and the tech intelligence.""We are satisfied with the technical support."

More Cisco NGIPS Pros →

Cons
"What I would like to improve in IPS would be the capacity of the hardware. I would also like to be able to sort signatures by severity. This would greatly impact how well I can manage my environment.""I am not aware of a preview channel or some repository to have a preview on upcoming signatures, however, this would be nice to have.""This is an expensive solution, higher than other products on the market.""They are also among the most expensive solutions.""The dashboard reports can be easier to generate and customize.""We have a lot of false positives and the list of IPs are not up to date in terms of their location.""There is no standalone IPS appliance available.""The cost is a bit high but it is worth it."

More Check Point IPS Cons →

"The GUI user interface could be improved and the login is not very user friendly.""Cisco NGIPS could improve its ability to do SSL inspections. Sometimes the ability to do SSL inspection is not scalable and you might not be able to get the installment required if you don't size the right hardware.""We would like to see some improvement in the configuration process for this solution, as it is currently quite complex.""I would like to see Cisco NGIPS to include home office support in one single product.""What I don't like about Cisco recently is they keep changing the names, which makes it hard for customers and sometimes even us as engineers to know what is the solution they are speaking about. For example, with AMP, now they call it Secure Endpoint and I don't know if in the next couple of years they're going to change it to something else. They should keep the names the same.""Some Next-Generation Firewall solutions come with Intrusion Prevention. It would be nice if Cisco NGIPS included that.""The solution should contain the sandbox features which we find in Check Point.""We don't like its licensing model. It has separate licensing for all the features. For instance, to get URL filtering, you need to buy another license. Every feature set seems to require another license. Unless you purchase them all upfront, you find some surprises and realize that you can't do that because you need another license. Its logging isn't quite as good as it used to be in our previous solution. We used to have Cisco ASA, and we could view the logs a lot easier than NGIPS (also known as Firepower). We saw real-time logging, but we don't see that as much in Firepower."

More Cisco NGIPS Cons →

Pricing and Cost Advice
  • "The price of this product should be reduced."
  • "Enabling IPS does not require any additional license purchase from OEM, as it comes by default with the NGFW bundle."
  • "The pricing for Check Point IPS is competitive and brings good value for the money."
  • "The module has a considerable cost but you can save by purchasing a package with several modules instead of making a single purchase."
  • "Pricing for this solution is negotiable and I'm happy with our pricing."
  • "There is a license needed to use the Check Point IPS which is not expensive. However, the Check Point IPS device is expensive."
  • More Check Point IPS Pricing and Cost Advice →

  • "There are licensing fees depending on the features that you are using."
  • "Cisco products are not cheap and this solution is no different."
  • "It is expensive. It has separate licensing for all the features, and every feature set seems to require another license. Licensing is on a yearly basis. There are no additional costs besides the standard licensing fee."
  • "The licensing can be billed annually or in multi-year contracts such as three, four, or five years."
  • "The pricing could be improved. Our customers have a yearly license."
  • "It could be less expensive."
  • "The solution is pricey, but worth it."
  • "We pay for the IPS license to use this solution."
  • More Cisco NGIPS Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
    655,994 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Some of the features for views and visualization are already predefined as default files.
    Top Answer:It is always important to validate the costs and characteristics of the available tools. I recommend finding a partner that can provide that support to correctly deploy what is necessary.
    Top Answer:The service that we want to see in the future is a capacity to segment the IPS services by equipment. We'd like to see the integration of the communication of the services in the next-generation… more »
    Top Answer:IPS is a valuable function, because they update the signatures all the time and it's very granular.
    Top Answer:I'm not sure of the licensing costs, I know we have a three-year subscription.
    Top Answer:I think the GUI user interface could be improved and the login is not very user friendly. They could maybe improve on that.
    Ranking
    Views
    5,174
    Comparisons
    3,888
    Reviews
    22
    Average Words per Review
    528
    Rating
    8.9
    Views
    3,346
    Comparisons
    2,208
    Reviews
    28
    Average Words per Review
    405
    Rating
    8.3
    Comparisons
    Also Known As
    Check Point Intrusion Prevention System
    Sourcefire NGIPS, Firepower NGIPS
    Learn More
    Overview

    Check Point IPS is an intrusion prevention system that aims to detect and prevent attempts to exploit weaknesses in vulnerable systems or applications. The solution provides complete, integrated, next-generation firewall intrusion prevention capabilities at multi-gigabit speeds with a low false positive rate and high security. It helps organizations secure their enterprise network, and protect servers and critical data against known and unknown automated malware, blended threats, and other threats.

    Check Point IPS Features

    Check Point IPS has many valuable key features. Some of the most useful ones include:

    • Real-time protections: IPS is constantly updated with new defenses against emerging threats. Because the solution’s IPS protections are pre-emptive, it provides organizations with defenses before exploits are created or vulnerabilities are even discovered.
    • Virtual patching: The solution combines robust IPS functionality with a concerted patching strategy, allowing network administrators to secure networks between upgrades and patches.
    • Flexible deployment: Check Point IPS was designed to be deployed easily and efficiently.
    • 360 visibility and reporting: To help users achieve an unmatched level of visibility that detects and prevents threats, Check Point IPS integrates with SmartEvent, enabling security operations center (SOC) staff to respond to high-priority events first.

    Check Point IPS Benefits

    There are many benefits to implementing Check Point IPS. Some of the biggest advantages the solution offers include:

    • Efficient: Check Point IPS includes acceleration technologies that let you safely enable IPS. Additionally, its low false positive rate can save a lot of time.
    • Secure: The solution delivers thousands of signature and behavioral preemptive protections, making it a very secure tool.
    • Unified: With Check Point IPS, users can Enable IPS on any Check Point security gateway, thereby reducing Total Cost of Ownership (TCO).

    Reviews from Real Users

    Check Point IPS is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it has granularity capabilities for rule creation, quick updates of signatures, and a helpful mechanism that allows users to turn IPS signatures to a different mode automatically.

    A System and Network Administrator at Auriga mentions, “The Check Point IPS module allows me granularity in creating rules. I can specify which definition to apply and to which scope or network.” The reviewer also adds, “I can create multiple profiles, which is helpful.”

    “The quick updates of the signatures when a new threat is identified are great. For instance, when Microsoft releases patches, we usually see new signatures for those issues that have to be patched in a day. This gives us time to test/deploy the patches while already being protected from the threats. Also, it's very good with reporting. I can generate reports for management automatically based on the threats of the last day/week/whatever is needed,” says a Systems en networks engineer at CB.

    Another PeerSpot user, a Network Engineer at VSP Vision Care, writes, “The mechanism where you can let the system automatically turn the IPS signature to a different mode (prevent / monitor / inactive) is a nice feature that allows us to easily adjust the balance between security protection and the risk of business impact.”

    Cisco Firepower NGIPS provides network visibility, threat intelligence, automation and industry leading threat effectiveness. Gartner has ranked Firepower NGIPS as a Magic Quadrant Leader for seven years running, and the independent NSS Labs testing organization consistently rates it as a “Recommended” IPS solution for eight years.

    Offer
    Learn more about Check Point IPS
    Learn more about Cisco NGIPS
    Sample Customers
    Morton Salt, Medical Advocacy and Outreach, BH Telecom, Lightbeam Health Solutions, X by Orange, Cadence, Nihondentsu, Datastream Connexion, Good Sam, Omnyway, FIASA, Pacific Life, Banco del Pacifico, Control Southern, Xero, Centrify
    American Electric Power, Huntington Bank, Keycorp, Nationwide, Transunion, Marriott, Inova Health, Ford, Thomson Reuters, Dow Chemical, Equifax, Chevron, Walmart, Coca Cola
    Top Industries
    REVIEWERS
    Computer Software Company19%
    Security Firm19%
    Financial Services Firm14%
    Logistics Company10%
    VISITORS READING REVIEWS
    Comms Service Provider17%
    Computer Software Company16%
    Financial Services Firm10%
    Government5%
    REVIEWERS
    Financial Services Firm16%
    Computer Software Company16%
    Government12%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Comms Service Provider16%
    Government10%
    Financial Services Firm8%
    Company Size
    REVIEWERS
    Small Business43%
    Midsize Enterprise24%
    Large Enterprise32%
    VISITORS READING REVIEWS
    Small Business28%
    Midsize Enterprise15%
    Large Enterprise57%
    REVIEWERS
    Small Business41%
    Midsize Enterprise26%
    Large Enterprise33%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise17%
    Large Enterprise60%
    Buyer's Guide
    Check Point IPS vs. Cisco NGIPS
    November 2022
    Find out what your peers are saying about Check Point IPS vs. Cisco NGIPS and other solutions. Updated: November 2022.
    655,994 professionals have used our research since 2012.

    Check Point IPS is ranked 2nd in Intrusion Detection and Prevention Software (IDPS) with 24 reviews while Cisco NGIPS is ranked 4th in Intrusion Detection and Prevention Software (IDPS) with 29 reviews. Check Point IPS is rated 8.8, while Cisco NGIPS is rated 8.2. The top reviewer of Check Point IPS writes "Helpful alerts and reporting, granular rule options, and the update schedule is flexible". On the other hand, the top reviewer of Cisco NGIPS writes "Straightforward licensing with good support, but plagued by stability issues". Check Point IPS is most compared with Palo Alto Networks Threat Prevention, Trend Micro TippingPoint Threat Protection System, Darktrace, Palo Alto Networks URL Filtering with PAN-DB and Cisco Sourcefire SNORT, whereas Cisco NGIPS is most compared with Trend Micro TippingPoint Threat Protection System, Fortinet FortiGate IPS, Cisco Sourcefire SNORT, Darktrace and Palo Alto Networks Threat Prevention. See our Check Point IPS vs. Cisco NGIPS report.

    See our list of best Intrusion Detection and Prevention Software (IDPS) vendors.

    We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.