


Check Point Quantum Force and Palo Alto Networks K2-Series compete in the advanced security solutions category. Palo Alto Networks K2-Series seems to have the upper hand due to its superior application control and threat prevention capabilities.
Features: Check Point Quantum Force emphasizes its VPN features, including IPsec VPN and real-time traffic monitoring, which are beneficial for secure remote connections. It also offers ease of VPN setup and management. Palo Alto Networks K2-Series provides deep inspection and app identification with features like WildFire and SSL decryption, ensuring a comprehensive understanding of application traffic.
Room for Improvement: Check Point Quantum Force struggles with stability, often requiring frequent reboots and updates, and has high costs for SMBs. Integration limitations with third-party solutions are noted. Palo Alto Networks K2-Series faces criticism for high pricing and a complex licensing model. Management interfaces and API integration could be more user-friendly.
Ease of Deployment and Customer Service: Check Point Quantum Force supports diverse deployment options, but customer service experiences vary. Some users find support responsive, while others encounter delays. Palo Alto Networks K2-Series offers straightforward initial deployment but presents a steep learning curve for new administrators. Customer service is generally excellent, though technical support efficiency in complex scenarios may vary.
Pricing and ROI: Check Point Quantum Force is expensive, with high initial and licensing costs, but offers competitive features that justify the price. Flexibility in licensing can mitigate higher costs. Palo Alto Networks K2-Series also has high costs but balances this with its robust protection capabilities, offering significant ROI over time.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
This is a time-saving measure because we don't need to deploy a cluster or a firewall each time; we just create a virtual system on the management server using the same appliance.
Incident response time has reduced significantly, and downtime due to network issues has been minimized, leading to an improved return on investment.
The fact that we've not had any breach toward the data center side is plenty enough.
For CN-Series, there is no competitor which works the same way as Palo Alto does.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
The support team we engaged was knowledgeable and well-versed with the application.
We have escalated issues to Check Point technical support multiple times and have received timely and very good responses.
Even challenging issues like those with VPNs have been resolved efficiently with their help.
I would rate tech support from Palo Alto Networks at around eight out of ten points because we had dedicated people assigned to us.
We get Gold support from them, and they are pretty good.
I would rate the technical support for the Palo Alto Networks K2-Series from Palo Alto as nine out of ten points.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
If specified correctly, even the smaller boxes offer high session and bandwidth rates, making the solution highly scalable, even up to telco-level requirements.
It is easy to scale up by adding capacity through clustering or upgrading the license, and it effectively handles spikes in remote user connections or increased east-west traffic without noticeable bottlenecks.
Scalability must be carefully planned for, considering future growth and user base increases.
Vertical scaling allows you to purchase more powerful devices with additional RAM, compute, and larger model form factors.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
While the solution is generally stable, there are complications, such as requiring SmartConsole for deployment and upgrades, which can be time-consuming.
I have worked with Check Point products for 15 years and haven't found any stability or performance issues.
The use of Check Point firewalls has helped improve our security posture without any downtime.
Palo Alto typically doesn't have many glitches.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
AI-driven features would be highly valuable—particularly those that enable bulk operations and efficient handling of large numbers of objects or object groups.
Other products, like FortiGate, are perceived as more intuitive because they are easier to configure from the start.
More granularity and control for threat prevention, especially on the OT side, would be beneficial.
Enhancing web traffic protection would be a great upgrade.
L1 engineers cannot work on the Palo Alto Networks K2-Series because it's too complex, which requires L2 and above level of engineers.
With AI, if there is a Precision AI bundle that you're planning on exploring, then that definitely needs a significant uplift because currently it doesn't work for all the known models.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
In comparison to Fortinet and other products, the pricing may be considered high.
Compared to other solutions, the pricing of Check Point NGFW is high.
The perception is that Check Point NGFW is expensive, especially when all software modules are included.
It's a little bit expensive.
The pricing for the Palo Alto Networks K2-Series solution is affordable.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The firewall's default behavior of blocking all traffic, including a cleanup rule that blocks everything from external to internal sources, is highly valuable for protecting our network.
The most valuable features in my experience include perimeter firewalling, cloud and mobile security, application control, URL filtering, DLP, threat prevention, intrusion protection, and safeguarding against malware, botnets, and zero-day attacks.
Since implementing it, we have noticed a lot less getting through that maybe other antivirus within firewalls had failed to catch.
Overall, the K2-Series helps in much more protection, and dashboard compliances are being met.
We had configured dynamic user groups and App-ID based policies, which makes it all Zero Trust.
Mainly, it is very easy to understand, and the logs are very good.
| Product | Market Share (%) | 
|---|---|
| Fortinet FortiGate | 19.9% | 
| Check Point Quantum Force (NGFW) | 2.7% | 
| Palo Alto Networks K2-Series | 0.1% | 
| Other | 77.3% | 



| Company Size | Count | 
|---|---|
| Small Business | 350 | 
| Midsize Enterprise | 130 | 
| Large Enterprise | 187 | 
| Company Size | Count | 
|---|---|
| Small Business | 148 | 
| Midsize Enterprise | 94 | 
| Large Enterprise | 199 | 
| Company Size | Count | 
|---|---|
| Small Business | 14 | 
| Midsize Enterprise | 8 | 
| Large Enterprise | 13 | 
Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.
Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.
What are the key features of Fortinet FortiGate?Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.
Check Point Quantum Force NGFW provides centralized management with scalable security for network perimeters. As a reliable firewall, it ensures advanced threat prevention and offers seamless integration, making it suitable for various network environments.
Offering comprehensive security, Check Point Quantum Force NGFW helps control ingress and egress traffic, secures data center firewalls, and integrates seamlessly with cloud and on-premises setups. Users appreciate its application control, deep packet inspection, and identity awareness features for enhanced protection against cyber threats. Despite pricing issues and interface complexity, its IPsec VPN and robust logging provide valuable insights into network activities.
What are the key features of Check Point Quantum Force NGFW?Check Point Quantum Force NGFW is deployed across industries for securing network boundaries, supporting critical data center operations, and enabling secure VPN connections. In finance, it helps meet stringent compliance standards, while in healthcare, it's crucial for protecting sensitive patient data through robust security protocols.
Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.