Try our new research platform with insights from 80,000+ expert users

Check Point SandBlast Network vs NetWitness Platform comparison

The compared Check Point Software Technologies and NetWitness solutions aren't in the same category. Check Point Software Technologies is ranked #11 in ATP , with an average rating of 8.6, and holds a 5.7% mindshare in the category. NetWitness is ranked #38 in Log Management , with an average rating of 8.0, and holds a 0.3% mindshare. Additionally, 92% of Check Point Software Technologies users are willing to recommend the solution, compared to 75% of NetWitness users who would recommend it.
Check Point SandBlast Network
Read 38 Check Point SandBlast Network reviews
  • 1,074 Views
  • 763 Comparison Views
92% willing to recommend
NetWitness Platform
Read 37 NetWitness Platform reviews
  • 739 Views
  • 465 Comparison Views
75% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between Check Point SandBlast Network and NetWitness Platform based on real PeerSpot user reviews.

Find out in this report how the two Advanced Threat Protection (ATP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Check Point SandBlast Network vs. NetWitness Platform Report (Updated: September 2022).
Buyer's Guide
Check Point SandBlast Network vs. NetWitness Platform
September 2022
Download the complete report
Helped 853,682 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point SandBlast Network
Average Rating
8.4
Reviews Sentiment
7.5
Number of Reviews
38
Ranking in other categories
Advanced Threat Protection (ATP) (11th)
NetWitness Platform
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
37
Ranking in other categories
Log Management (38th), Security Information and Event Management (SIEM) (32nd)
 

Mindshare comparison

Check Point SandBlast Network and NetWitness Platform aren’t in the same category and serve different purposes. Check Point SandBlast Network is designed for Advanced Threat Protection (ATP) and holds a mindshare of 5.7%, up 5.4% compared to last year.
NetWitness Platform, on the other hand, focuses on Log Management, holds 0.3% mindshare, down 0.4% since last year.
Advanced Threat Protection (ATP)
Log Management
 

Featured Reviews

GaneshKhutwad - PeerSpot reviewer
Provides advanced threat prevention and utilizes geographic-based policies to mitigate attacks
Check Point offers three types of support: Gold, Platinum, and Diamond. The level of support you receive should be based on the criticality of the issue, not solely on your client's support tier. While there are established support levels, I have experienced instances where the support provided was not categorized as Gold, Platinum, or Diamond but rather a standard support level. In such cases, the response times were slower, and getting support personnel on the call was more difficult.
Read full review
MOTASHIM Al Razi - PeerSpot reviewer
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most efficient and protective characteristics of Check Point's SandBlast solution are that we can see a lot of this protection at the network and mail levels."
"SandBlast has opened us up to a lot more opportunities where we can offer this service to clients, that way they don't have to go to a third-party to get this specific solution. It comes in the Check Point Infinity Package so it has helped us a lot."
"Check Point SandBlast Network Solution provides signature-based as well as zero-day threat protection. Also sandboxing can be performed on an on-premise device, cloud as well as the combination of both. Threat emulation is done on multiple OS & verdict is provided."
"The sandbox is able to scan files without adding a delay or compromising productivity."
"Check Point SandBlast is best in terms of the extraction function. Customers can get a clean firewall with extraction after I've cleaned and scanned it from Check Point. It's easy for users, too."
"It enables my IT system to apply threat detection intelligence and diffuse the endpoint and potential threat attacks and phishing attacks onto the system in the most proactive and secure manner."
"The most valuable thing about this product is that it keeps the network secure against zero-day threats."
"I have seen both money and time saved as a return on investment."
More Check Point SandBlast Network pros
"The most valuable features are the packet decoder, log decoder, and concentrator."
"The packet capture aspect of it is a valuable feature because it is quite different from a traditional SIEM solution that only carries out investigations based on captured logs."
"Their technical support responds quickly and are knowledgable."
"What we are mainly using are the RSA concentrator, RSA Decoder, Archiver, Broker, and Log Decoder."
"The most valuable feature is that we can create our own connectors for any application, and NetWitness provides the training and tools to do it."
"The newer 11.5 version that my team is using has found it to have good mapping."
"The most valuable features are the integration and ease of use."
"It gives the ability to investigate into network traffic in the Net and the organization what we couldn't do before."
More NetWitness Platform pros
 

Cons

"Today, we have it as part of a solution or a package. However, we'd like there to be a way where we can have the solution's features available to us in a cheaper way in the future."
"SandBlast takes longer than FortiSandbox to complete a scan."
"The file types that can be scanned are limited, which means that if the file type is not listed or enabled for the sandbox, they are bypassed and it can lead to a security issue."
"We have found a need for the application to be a bit more elastic, bringing it to SAS services and not IAS."
"There have been a couple of things that we've tried where we read through the documentation, and we were really looking for some help in implementing, and technical support wanted me to try it first, then call them if it breaks. It would be nicer if they would hold my hand a bit more. It makes me nervous in production, as I don't have a lab."
"Using it in the beginning was difficult because I had never used anything similar. In terms of navigating the UI, it was all not too bad, but there is definitely a learning curve."
"We have noticed a slight performance hit when the Threat Emulation and Extraction features were enabled, but the protection trade-off is worth it for us."
"At the support level, they could improve the attention times and have the resolution of cases happen a little faster."
More Check Point SandBlast Network cons
"It should have a monitoring feature. It would help us analyze the current state of attacks faster from a single platform."
"The user interface is a little bit difficult for new users and it needs to be improved."
"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."
"The documentation is not as structured as I would like, personally, and I think that it can be improved and made much more user-friendly."
"I believe that integrating the solution with other products such as Oracle would be beneficial."
"Lots of competing products have vulnerability protection built into their products, and this solution would be improved by including that support."
"More customizability is required, which is something that they need to improve on."
"Sometimes, it gives me static when integrating Windows-based systems. It should produce a precise log of sorts as to where the problem is. For example, a few days ago because of the McAfee application firewall, I couldn't get access to the particular Windows machine. So, my team and I had to figure out by ourselves that there was a virus responsible for the obstacle. This solution should trigger a meaningful log or message indicating the reason the user or implementer can't get into the machine."
More NetWitness Platform cons
 

Pricing and Cost Advice

"We would like to try the Threat Extraction blade, but you need to buy a license. Check Point is expensive. I would like to buy things, but I would need the funding."
"The pricing is quite effective, not excessively high. On a scale of one to ten, where ten is the highest price, I rate the pricing a nine."
"Choosing the correct set of licenses is essential because, without the additional software blade licenses, the Check Point gateways are just a stateful firewall."
"The cost is not significantly high and it can be negotiated during any purchase of NGFW."
"We have seen ROI."
"The cost of Check Point SandBlast Network is annually, and there is only a standard license."
"The product's cost is high."
"I think the overall cost for introducing Check Point with SandBlast was reasonable and competitive in the market."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
"It is cheap."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"We are on an annual license for the use of the solution."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
"This is a pricey solution; it's not cheap."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"The licenses are good but the cost is very expensive."
More NetWitness Platform pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
See recommendations
853,682 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
Read full review
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
16%
Government
10%
Energy/Utilities Company
6%
Computer Software Company
18%
Financial Services Firm
17%
Government
6%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Check Point SandBlast Network?
The solution can detect and prevent attacks that may be encrypted.
See all answers
What is your experience regarding pricing and costs for Check Point SandBlast Network?
The experience with pricing, setup costs, and licensing was good.
See all answers
What needs improvement with Check Point SandBlast Network?
Check Point SandBlast Network ( /products/check-point-sandblast-network-reviews ) can be improved by adding more integration capabilities, such as integration with third-party firewalls, third-part...
See all answers
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
See all answers
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
See all answers
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
See all answers
 

Comparisons

Palo Alto Networks WildFire vs Check Point SandBlast Network Logo
Palo Alto Networks WildFire vs Check Point SandBlast Network
Compared 50% of the time
Fortinet FortiSandbox vs Check Point SandBlast Network Logo
Fortinet FortiSandbox vs Check Point SandBlast Network
Compared 29% of the time
Symantec Advanced Threat Protection vs Check Point SandBlast Network Logo
Symantec Advanced Threat Protection vs Check Point SandBlast Network
Compared 5% of the time
Trellix Network Detection and Response vs Check Point SandBlast Network Logo
Trellix Network Detection and Response vs Check Point SandBlast Network
Compared 5% of the time
Microsoft Defender for Office 365 vs Check Point SandBlast Network Logo
Microsoft Defender for Office 365 vs Check Point SandBlast Network
Compared 5% of the time
More Check Point SandBlast Network Competitors
Splunk Enterprise Security vs NetWitness Platform Logo
Splunk Enterprise Security vs NetWitness Platform
Compared 23% of the time
IBM Security QRadar vs NetWitness Platform Logo
IBM Security QRadar vs NetWitness Platform
Compared 18% of the time
Elastic Security vs NetWitness Platform Logo
Elastic Security vs NetWitness Platform
Compared 12% of the time
Trellix Network Detection and Response vs NetWitness Platform Logo
Trellix Network Detection and Response vs NetWitness Platform
Compared 10% of the time
RSA enVision vs NetWitness Platform Logo
RSA enVision vs NetWitness Platform
Compared 10% of the time
More NetWitness Platform Competitors
 

Product Reports

Buyer's Guide
Check Point SandBlast Network
May 2025
Check Point SandBlast Network reportDownload Check Point SandBlast Network product report
Buyer's Guide
NetWitness Platform
May 2025
NetWitness Platform reportDownload NetWitness Platform product report
 

Also Known As

No data available
RSA Security Analytics
 

Overview

Check Point’s evasion-resistant technology maximizes zero-day protection without compromising business productivity. For the first time, businesses can reduce the risk of unknown attacks by implementing a prevent-first approach. Learn More about Check Point Sandblast

Check Point Software Technologies

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness
 

Sample Customers

Edenred, State Transport Leasing Company (STLC), Edel AG, Laurenty, Conseil Départemental du Val de Marne, Koch Media
Los Angeles World Airports, Reply
Buyer's Guide
Check Point SandBlast Network vs. NetWitness Platform
September 2022
Free Report: Check Point SandBlast Network vs. NetWitness Platform
Find out what your peers are saying about Check Point SandBlast Network vs. NetWitness Platform and other solutions. Updated: September 2022.
DOWNLOAD NOW
853,682 professionals have used our research since 2012.
See our Check Point SandBlast Network vs. NetWitness Platform report.

We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.