Palo Alto Networks Advanced Threat Prevention and Check Point IPS compete in the cybersecurity space focusing on threat prevention. Palo Alto Networks appears to have the upper hand with its advanced threat detection features and firewall integration.
Features: Palo Alto Networks offers next-generation firewall capabilities, advanced anti-malware protection, and its WildFire feature for sandboxing. Check Point IPS provides detailed protections exceeding 11,000 profiles, real-time threat updates, and robust ransomware protection.
Room for Improvement: Palo Alto Networks could improve email filtering, reduce false positives, and simplify setup. Users also mentioned resource consumption as an issue. Check Point IPS users noted performance impacts due to high CPU usage when features are enabled, and requested more intuitive documentation and better support.
Ease of Deployment and Customer Service: Both Palo Alto Networks and Check Point IPS offer deployment in on-premises, hybrid, and cloud environments for flexibility. Palo Alto Networks has mixed feedback on support with some reliance on third-party assistance, while Check Point generally has positive support feedback though premium services vary by region.
Pricing and ROI: Palo Alto Networks is often seen as expensive, especially for smaller organizations, but offers good scalability and ROI in larger setups. Check Point IPS also comes with high costs, with potential savings through bundled licenses. Users suggest thorough cost-benefit analysis to maximize investment returns.
I have seen a return on investment more in the risk saved since it catches a lot of stuff security-wise that is good to catch.
I have seen a return on investment since using Check Point IPS, as evidenced by fewer incidents.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
Our technical teams have personal relationships with our account executives and direct support people.
Customer support for Check Point IPS is satisfactory.
The customer support for Check Point IPS is very good.
Overall, I find the technical support from Palo Alto Networks quite good, although getting a hold of the TAC can be challenging and sometimes requires long phone calls.
I have proof of this rating - when I escalate a case, I receive a reply from TAC support after two days.
I rate technical support from Palo Alto as eight out of ten.
The scalability of Check Point IPS is on point.
We have moved to a hyper-scale master environment, allowing us to scale by adding additional gateways to the clusters.
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
Check Point IPS provides a very stable and reliable environment.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
Automated attack path correlation in SmartEvent to improve situational awareness.
At least 60% of all the alarms generated by the IPS are false positives or something that's not important to look at, and this generates a significant workload for my team.
Visual analytics and automated attack path correlation in SmartEvent to enhance situational awareness and attack identification.
Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations.
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
Comparisons with Fortinet show that Check Point IPS is relatively more expensive, but we found it cheaper to retain it rather than switch.
My experience with pricing, setup cost, and licensing for Check Point IPS is good; it's baked into the firewall licensing, so that's very good.
My experience with pricing, setup cost, and licensing for Check Point IPS has been satisfactory.
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
The solution employs behavioral heuristic analysis to block zero-day attacks using AI-powered engines.
The integration with Check Point ThreatCloud ensures the IPS engine is updated with the latest attack signatures.
The best features Check Point IPS offers include finding threats hidden in encrypted data, which I find valuable.
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
We are satisfied with the analytic capabilities of Palo Alto Networks Advanced Threat Prevention, especially the reporting features available in the Palo Alto portal in terms of their application visibility interface, which is very good for us to get visibility on all critical applications and the associated users, as well as the risks associated with every category of traffic.
| Product | Market Share (%) |
|---|---|
| Check Point IPS | 5.0% |
| Palo Alto Networks Advanced Threat Prevention | 7.4% |
| Other | 87.6% |
| Company Size | Count |
|---|---|
| Small Business | 31 |
| Midsize Enterprise | 24 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 4 |
| Large Enterprise | 15 |
Check Point IPS is an intrusion prevention system that aims to detect and prevent attempts to exploit weaknesses in vulnerable systems or applications. The solution provides complete, integrated, next-generation firewall intrusion prevention capabilities at multi-gigabit speeds with a low false positive rate and high security. It helps organizations secure their enterprise network, and protect servers and critical data against known and unknown automated malware, blended threats, and other threats.
Check Point IPS Features
Check Point IPS has many valuable key features. Some of the most useful ones include:
Check Point IPS Benefits
There are many benefits to implementing Check Point IPS. Some of the biggest advantages the solution offers include:
Reviews from Real Users
Check Point IPS is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it has granularity capabilities for rule creation, quick updates of signatures, and a helpful mechanism that allows users to turn IPS signatures to a different mode automatically.
A System and Network Administrator at Auriga mentions, “The Check Point IPS module allows me granularity in creating rules. I can specify which definition to apply and to which scope or network.” The reviewer also adds, “I can create multiple profiles, which is helpful.”
“The quick updates of the signatures when a new threat is identified are great. For instance, when Microsoft releases patches, we usually see new signatures for those issues that have to be patched in a day. This gives us time to test/deploy the patches while already being protected from the threats. Also, it's very good with reporting. I can generate reports for management automatically based on the threats of the last day/week/whatever is needed,” says a Systems en networks engineer at CB.
Another PeerSpot user, a Network Engineer at VSP Vision Care, writes, “The mechanism where you can let the system automatically turn the IPS signature to a different mode (prevent / monitor / inactive) is a nice feature that allows us to easily adjust the balance between security protection and the risk of business impact.”
Palo Alto Networks Advanced Threat Prevention is a cloud-based security service that combines cutting-edge technologies, including machine learning, artificial intelligence, and expert human monitoring, to effectively thwart advanced threats like malware, zero-day attacks, and command-and-control threats. It offers inline protection, scrutinizing all network traffic irrespective of port, protocol, or encryption. An integral component of Palo Alto Networks' security platform, it enjoys widespread adoption across diverse organizations. With its robust security capabilities, it's an ideal choice for entities of all sizes, particularly those in high-risk sectors such as finance, healthcare, and government agencies, seeking to safeguard their networks from a broad spectrum of advanced threats.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
