We performed a comparison between Check Point NGFW and Fortinet Fortigate based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Fortinet’s lack of an option to deploy firewalls on multiple endpoints is a definite downside. Although Fortinet received better feedback for its support, Check Point is the winner in this comparison.
"By far, it's the best security solution one can adopt for their organization."
"The solution can scale."
"It's enabled us to move away from basic LAN to LAN segmentation to a more powerful user separation approach."
"When applying application control, we can ensure user access to the internet in accordance with company policy and easy implementation if some users need exception access."
"There are several ways to implement it."
"Objects search and tracker logs are useful."
"The scalability is very good."
"The Network Address Translation (NAT) will always be a valuable feature as it allows me to turn my private cloud to the public at the click of a button and have secure control over the accessible servers/applications."
"Fortinet FortiGate protects against internet-based threats, both internal and external. It is scalable, stable, easy to use, and easy to install."
"This solution has helped our organization by having strong functions and a reliable firewall."
"FortiGate SD-WAN facilitated a smooth transition for our customers between their two internet service providers, ensuring uninterrupted connectivity without any downtime."
"The network security and cloud security are most valuable."
"The multi-tenancy feature is most valuable. It integrates very well with FortiManager and FortiAnalyzer."
"The most valuable features are the enterprise modeling and the simple interface."
"The pipe filter application is an outstanding feature."
"It is quite easy to handle."
"The debugging of VPN tunnels is very stressful."
"There is no clear way to report incorrect classification to support and a business is neither happy nor forgiving when they cannot receive mail from a crucial business partner."
"Sometimes we need to find a resolution by ourselves as the solution's knowledge base is not enough."
"You need to merge all the old consoles into one new one and make the interface more convenient for the novice administrator."
"The product could provide an easier user interface and management, by combining all functions (network and policy configuration) into one single application rather than split it into different applications."
"There needs to be more storage space for reporting."
"Identity Awareness has been a massive source of problems for our deployment and the ability to debug it has been lacking."
"The routing rules and some more network settings should be listed on the Check Point Smart Console instead of GAIA Web GUI."
"The support we receive when we need to upgrade is not satisfactory and has room for improvement."
"Its customer service could be better."
"Fortinet FortiGate could improve by having more storage in the hardware for log data."
"The solution is very expensive."
"Fortinet FortiGate needs to improve the protection, it did not prevent us from being attacked. Additionally, Fortinet FortiGate could provide more features for WAF devices. I should not have to purchase two solutions, it would be a benefit to combine these features into one solution."
"The scalability could be better."
"I would like to see improvements in the product's application rules."
"They have to just improve its performance when we enable all UTM features. When you enable all the features, the performance of FortiGate, as well as of Sophos and SonicWall, goes down."
Check Point NGFW is ranked 5th in Firewalls with 111 reviews while Fortinet FortiGate is ranked 1st in Firewalls with 108 reviews. Check Point NGFW is rated 9.0, while Fortinet FortiGate is rated 8.4. The top reviewer of Check Point NGFW writes "Scalable with seamless failover capabilities and excellent logging functionality". On the other hand, the top reviewer of Fortinet FortiGate writes "Efficient, user-friendly, and affordable". Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Netgate pfSense, Cisco Secure Firewall, Azure Firewall and Sophos XG, whereas Fortinet FortiGate is most compared with Sophos XG, Cisco Secure Firewall, Netgate pfSense, Meraki MX and WatchGuard Firebox. See our Check Point NGFW vs. Fortinet FortiGate report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
I have worked for several years with the Check Point platform (NGFW) and it is by far more stable in hardware and software.
It is a very friendly platform and easy to configure. It is true that it is a bit expensive according to the required blades but it is a platform that is worth having as security in a corporate.
We are using both but the GUI and clustering on the FortiGate side look better/easier/more comfortable.
And I do agree with others - Check Point is expensive and Fortinet FortiGate has many models offering less expensive implementation.
I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such).
-Check Point GUI is a bit complicated,
-Application and Web filtering are better than Fortigate.
-IPS and AV are more effective than Fortigate. Overall more stable than any other firewall
Support: not up to the level like Fortigate and lack of trained resources (in the gulf).
Check Point is expensive.
Fortinet has many models and is more affordable than Check Point. It also provides outstanding support. GUI is more user-friendly.
We had this same discussion recently with my organization. It came down to the security of the platform.
Fortinet has had a number of breaches over the last 2 years and this was a key factor in our decision.
The challenge with Check Point will be the transition from our existing firewall and taking advantage of the various features across our organization.