Cisco Secure IPS (NGIPS) and Check Point IPS compete in the intrusion prevention systems category. Cisco has an edge due to its cloud integration and third-party compatibility, while Check Point excels in vulnerability management and tailored threat protection.
Features: Cisco Secure IPS offers strong intrusion prevention, application filtering, and real-time threat detection. Its integration capabilities with third-party solutions like Radware for DDoS protection further enhance its adaptability. Meanwhile, Check Point IPS provides extensive threat protection with a vast database of signatures. It facilitates complete visibility across networks and offers automatic updates for seamless security management.
Room for Improvement: Cisco Secure IPS needs better SIEM integration, more intuitive dashboards, and improved usability for non-technical users. Its performance and signature updates also require refinement to reduce false positives. Check Point IPS faces performance challenges when the IPS module is active and could improve automation for signature deployment and reporting tools. Enhancing scalability options and reducing false positives would improve user experience for both solutions.
Ease of Deployment and Customer Service: Cisco Secure IPS is deployed primarily on-premises and in hybrid/cloud environments, with excellent technical support, though it lacks depth in some regions. Check Point IPS is appreciated for its flexible deployment and consistent support framework. Cisco is noted for customer service excellence, especially in critical scenarios.
Pricing and ROI: Cisco Secure IPS is perceived as expensive, with costs often justified by improved security outcomes. Smaller businesses may find it prohibitive. Check Point IPS offers competitive pricing, especially when bundled, providing good value with substantial ROI due to comprehensive security and network protection. Cisco's licensing processes are streamlined, though its higher cost is a consideration for budget-conscious buyers.
I have seen a return on investment more in the risk saved since it catches a lot of stuff security-wise that is good to catch.
I have seen a return on investment since using Check Point IPS, as evidenced by fewer incidents.
Our technical teams have personal relationships with our account executives and direct support people.
Customer support for Check Point IPS is satisfactory.
The customer support for Check Point IPS is very good.
Fortinet, on the other hand, offers quicker response times and same-day RMAs, which gives them an edge in customer service.
The response was fast, and they provided experts to solve our issues quickly.
A few years ago, I had a very bad situation. We lost a lot of money, and I opened for the first time in my life, a case with priority one. The person responsible for the ticket didn't respond for two days.
We have moved to a hyper-scale master environment, allowing us to scale by adding additional gateways to the clusters.
The scalability of Check Point IPS is on point.
Check Point IPS provides a very stable and reliable environment.
The software situation with Cisco is problematic.
Automated attack path correlation in SmartEvent to improve situational awareness.
At least 60% of all the alarms generated by the IPS are false positives or something that's not important to look at, and this generates a significant workload for my team.
Visual analytics and automated attack path correlation in SmartEvent to enhance situational awareness and attack identification.
Incorporating AI capabilities would enhance its functionality.
CLI is very important in professional working, and it was an unwise decision by Cisco to remove it.
Comparisons with Fortinet show that Check Point IPS is relatively more expensive, but we found it cheaper to retain it rather than switch.
My experience with pricing, setup cost, and licensing for Check Point IPS is good; it's baked into the firewall licensing, so that's very good.
My experience with pricing, setup cost, and licensing for Check Point IPS has been satisfactory.
It's cheaper to integrate with existing IT security solutions compared to other expensive brands with subscription costs.
The integration with Check Point ThreatCloud ensures the IPS engine is updated with the latest attack signatures.
The solution employs behavioral heuristic analysis to block zero-day attacks using AI-powered engines.
Check Point IPS is very useful in providing access control at the network level and preventing access from suspicious sources.
Cisco Secure IPS (NGIPS) is quite powerful for threat detection and includes botnet detection.
They can discover new versions of malware, which is very beneficial.
| Product | Market Share (%) |
|---|---|
| Check Point IPS | 5.0% |
| Cisco Secure IPS (NGIPS) | 4.5% |
| Other | 90.5% |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 24 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 26 |
| Midsize Enterprise | 17 |
| Large Enterprise | 26 |
Check Point IPS is an intrusion prevention system that aims to detect and prevent attempts to exploit weaknesses in vulnerable systems or applications. The solution provides complete, integrated, next-generation firewall intrusion prevention capabilities at multi-gigabit speeds with a low false positive rate and high security. It helps organizations secure their enterprise network, and protect servers and critical data against known and unknown automated malware, blended threats, and other threats.
Check Point IPS Features
Check Point IPS has many valuable key features. Some of the most useful ones include:
Check Point IPS Benefits
There are many benefits to implementing Check Point IPS. Some of the biggest advantages the solution offers include:
Reviews from Real Users
Check Point IPS is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it has granularity capabilities for rule creation, quick updates of signatures, and a helpful mechanism that allows users to turn IPS signatures to a different mode automatically.
A System and Network Administrator at Auriga mentions, “The Check Point IPS module allows me granularity in creating rules. I can specify which definition to apply and to which scope or network.” The reviewer also adds, “I can create multiple profiles, which is helpful.”
“The quick updates of the signatures when a new threat is identified are great. For instance, when Microsoft releases patches, we usually see new signatures for those issues that have to be patched in a day. This gives us time to test/deploy the patches while already being protected from the threats. Also, it's very good with reporting. I can generate reports for management automatically based on the threats of the last day/week/whatever is needed,” says a Systems en networks engineer at CB.
Another PeerSpot user, a Network Engineer at VSP Vision Care, writes, “The mechanism where you can let the system automatically turn the IPS signature to a different mode (prevent / monitor / inactive) is a nice feature that allows us to easily adjust the balance between security protection and the risk of business impact.”
Cisco Secure IPS (NGIPS) provides intrusion prevention, malware detection, and DDoS protection with modularity, third-party integration, and cloud capabilities, focusing on flexibility, automation, and real-time threat detection, while offering centralized management and ease of upgrading.
Cisco Secure IPS (NGIPS) is designed to support network security through an open platform, delivering features such as anomaly detection and security intelligence. Users benefit from robust technical support, making it a reliable choice for enterprises seeking to protect their network infrastructures. However, improvements are needed in user-friendliness, interface complexity, and integration with third-party tools. There is a demand for better reporting, sandboxing capabilities, and enhanced AI-driven threat detection and response times, especially for zero-day attacks. Pricing remains a concern due to high costs and licensing complexity.
What are the key features of Cisco Secure IPS?Businesses deploy Cisco Secure IPS (NGIPS) in both on-premises and cloud environments, addressing needs like compliance audits and integration with platforms such as Cisco Talos and Umbrella. Its implementation strengthens perimeter security, enhances cybersecurity in enterprise and banking sectors, and ensures effective threat management for network defense.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
