No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point SandBlast Network vs Palo Alto Networks WildFire vs Symantec Advanced Threat Protection comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of October 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Check Point SandBlast Network is 3.3%, up from 3.1% compared to the previous year. The mindshare of Palo Alto Networks WildFire is 6.7%, down from 10.2% compared to the previous year. The mindshare of Symantec Advanced Threat Protection is 2.2%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks WildFire6.7%
Check Point SandBlast Network3.3%
Symantec Advanced Threat Protection2.2%
Other87.8%
Advanced Threat Protection (ATP)
 

Featured Reviews

Karan Pichlangia - PeerSpot reviewer
Assistant General Manager at Sunteck Realty Pvt Ltd
Advanced threat analysis has reduced malware incidents and gives our security team more confidence
The best features that Check Point SandBlast Network offers include threat emulation for zero-day attacks, which I truly appreciate, and deep file analysis across multiple OS environments. The deep file analysis from Check Point SandBlast Network makes my daily workflow much easier, as I am able to analyze everything in terms of a report about my network. Check Point SandBlast Network has positively impacted my organization, as I have seen huge changes with a notable drop in malware incidents, especially with suspicious attachments; it gives the security team confidence that known or zero-day files are checked automatically. Regarding the huge drop in malware incidents, I estimate that it may be around 20%.
reviewer2695164 - PeerSpot reviewer
IT Security Specialist at a tech services company with 11-50 employees
Advanced threat detection has protected critical document workflows and checks suspicious files
I would say the setup and putting together the hierarchy within the devices was not straightforward. There were many reboots and reconfigurations while the optimal setup was established. However, we were happy with the device. The setup process could be easier to establish the cluster. It should be easier to establish the Palo Alto Networks WildFire cluster between the devices. We had some difficulty with it, but it was not catastrophic. The operation and usability itself is what I was happy with.
Dennis O'Reilly - PeerSpot reviewer
Cyber SecOps Principal at Dotcom Security
Provides end-to-end antivirus protection and has good stability
Symantec Endpoint Protection provides end-to-end protection. Along with antivirus protection, it has a lot of key areas, including intrusive prevention, firewall features, and application and device control. It can integrate with other Broadcom solutions, such as Symantec Messaging Gateway and Symantec DLP. If you want to send an email, it gets scanned through endpoint protection and DLP. We get all Symantec functionality in a single pane.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The zero-day protection is its most valuable feature."
"Threat Emulation gives networks the necessary protection against unknown threats in files that are attached to emails. The Threat Emulation engine picks up malware at the exploit phase before it enters the network. It quickly quarantines and runs the files in a virtual sandbox, which imitates a standard operating system, to discover malicious behavior before hackers can apply evasion techniques to bypass the sandbox."
"We didn't really have any IPS before. So, Check Point has improved our security posture. People get used to doing things certain ways, which might not be the best or most secure way, and they can't do that now, which just requires more education of the user base. With the endpoint client, we've started to use Check Point for remote access."
"Its greatest value is in the integration of AI analytics and detecting zero-day threats, which in many cases are a great vulnerability."
"I have seen both money and time saved as a return on investment."
"The solution can detect and prevent attacks that may be encrypted."
"Preventing zero-day threats and extracting potential threats from incoming files with Threat Extraction is the most valuable feature for us."
"The overall security of the environment has been greatly improved by the Check Point NGFWs with the SandBlast Network blade activated."
"The product is the best."
"The analysis is very fast."
"After implementing the Palo Alto firewalls, they have achieved more than what is expected, and we are able to control the number of applications; who gets to have access, and what is flowing inside the network."
"It has one of the best WebUIs that I have used, because at a glance it looks simple, but offers us a lot of options to secure all the traffic that is passing through the device (or all traffic that the user decides to pass through)."
"The most valuable feature is the Automatic Verdict, to recognize whether something is a threat, or not."
"WildFire is always a product that we recommend for our Palo Alto clients because it tracks potential malware in the cloud and it is very important to prevent these types of attacks."
"Wildfire has excellent features and offers some of the best security measures available, although it requires a significant budget."
"WildFire has been instrumental in blocking a number of new threats, before common desktop anti-virus tools were able to detect them."
"Overall, the product supports everything already feature-wise, because it has email protection, monitoring detection, network intrusion detection, and advanced threat protection."
"They have a very simple and easy implementation; they have been around for a long time, and they have been very easy to deploy, support, and manage."
"Currently we have 800-plus nodes connected with this solution, without any issues. The solution is scalable."
"The most valuable feature is NetFlow threat protection."
"Endpoint to network is a good feature, it can protect the line."
"This is a good solution, and whatever our requirement is, all of the features are there."
"Technical support has been helpful and responsive."
"They manage to solve detection quite nicely, with rather elaborate detection compared to other providers, and Symantec also provides a useful set of information linked to each of the attacked computers."
 

Cons

"Today, we have it as part of a solution or a package. However, we'd like there to be a way where we can have the solution's features available to us in a cheaper way in the future."
"If any file is more than 15 GB, the inspection takes some time, so that can be reduced to make real-time protection much faster."
"Check Point SandBlast Network can improve the integration with third-party vendors, such as EDR or CRM products. For example, IBM Curator."
"EDR and EPM solutions like Carbon Black or CyberArk have integrations with the cloud version of Sandblast, however, there must be on-premise Sandblast options also (due to the fact that there are regulations for cloud usage restrictions in some countries)."
"Using it in the beginning was difficult because I had never used anything similar. In terms of navigating the UI, it was all not too bad, but there is definitely a learning curve."
"The cost is a little bit high-end, and you need to get precise performance metrics in order to get the correct size. Improvements are required in both areas of the tool."
"The file types that can be scanned are limited, which means that if the file type is not listed or enabled for the sandbox, they are bypassed and it can lead to a security issue."
"Firstly, performance in our case daily many emails were queued for scanning and among that 30% of emails were getting skipped, meaning delivered without scanning."
"The support is quite difficult to access promptly. I rate it as seven out of ten."
"Unfortunately, the support is getting worse. We have had some open tickets for months, maybe half a year, and there is no real answer."
"Palo Alto Networks WildFire could improve by adding support for manual submission of suspicious files and URLs. Additionally, it would be an advantage to add rule-based analysis. Currently, it uses only static and AI. We need to be able to analyze archive files."
"There are more specialized solutions that compete with Wildfire. Therefore, they need to work on their machine learning and AI to be more competitive."
"The global product feature needs improvement, the VPN, and we need some enhanced features."
"Customer Service: Great when I was at a large company but average or less than average at a small company."
"I don't think it needs to improve anything, except maybe the speed to deploy the changes."
"Improving detection on non-Windows formats would be beneficial as there are many samples, such as Linux or ransomware for macOS."
"The administration interface needs a lot of improvement. It should be UI-based and simple."
"Solutions like CrowdStrike, ESET, and SentinelOne have really jumped ahead on behavioral and algorithm-based detection capabilities. Symantec is trying to catch up, but they still have some limitations of being an old-school AV protection program and adding AI and behavioral learning and detection algorithm."
"The support team that Symantec offers didn't know how to solve issues even though they referred to themselves as "engineers"."
"The administration interface needs a lot of improvement. It should be UI based, and simple. They need to improve it. It's pretty much not that friendly compared to what we were using as Bitdefender before. It's okay but is improving, actually."
"There are some ‎features that would add value to this product. One of them would be a graphical presentation of threats that the system has encountered."
"One area for improvement could be the pricing model."
"The cloud platform needs to have improvement in terms of the user interface and the different capabilities it has available. It needs to match the other leading next-gen EDR products that are available in the market. That's the reason why we are stepping away from Symantec. Their cloud environment is just generally lacking in comparison to others."
"It also needs network-based threat protection for shared folders and files."
 

Pricing and Cost Advice

"The product's cost is high."
"Choosing the correct set of licenses is essential because, without the additional software blade licenses, the Check Point gateways are just a stateful firewall."
"The cost of Check Point SandBlast Network is annually, and there is only a standard license."
"The cost is not significantly high and it can be negotiated during any purchase of NGFW."
"The pricing is quite effective, not excessively high. On a scale of one to ten, where ten is the highest price, I rate the pricing a nine."
"We would like to try the Threat Extraction blade, but you need to buy a license. Check Point is expensive. I would like to buy things, but I would need the funding."
"I think the overall cost for introducing Check Point with SandBlast was reasonable and competitive in the market."
"We have seen ROI."
"The pricing is highly expensive."
"The price is expensive but is reasonable considering overall functionality."
"I think they should lower the price of this solution"
"There are different types of licenses."
"It's not particularly cheap, but it is absolutely worth it."
"The licensing fees are on an annual basis, and there are no costs in addition to the standard fees."
"The price is a bit higher than the other products such as TrendMicro, or FireEye."
"It depends on the features. Additional features cost additional money as well."
"Symantec Endpoint Protection has an average price."
"The pricing of this solution is inexpensive and affordable."
"The price is quite expensive."
"Pricing is good. It is nice to have a great product at a fair price."
"Symantec Advanced Threat Protection's pricing is comparable."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
919,586 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Security Consultant at Webernetz.net - Network Security Consulting
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Top Industries

By visitors reading reviews
Outsourcing Company
14%
Construction Company
11%
Manufacturing Company
9%
Financial Services Firm
9%
Manufacturing Company
13%
Outsourcing Company
9%
Comms Service Provider
9%
Financial Services Firm
7%
Outsourcing Company
18%
Manufacturing Company
11%
Financial Services Firm
10%
Marketing Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise8
Large Enterprise13
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise15
Large Enterprise29
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise3
Large Enterprise13
 

Questions from the Community

What is your experience regarding pricing and costs for Check Point SandBlast Network?
My experience with pricing and setup cost is that pricing was a bit high, but the setup cost was initially justified.
What needs improvement with Check Point SandBlast Network?
I feel that Check Point SandBlast Network could be improved with slight delays in cleaning the file delivery. Additio...
What is your primary use case for Check Point SandBlast Network?
My main use case for Check Point SandBlast Network is advanced threat protection, especially for scanning emails, att...
How does Cisco Firepower NGFW Firewall compare with Palo Alto Networks Wildfire?
The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one conside...
Which is better - Wildfire or FortiGate?
FortiGate has a lot going for it and I consider it to be the best, most user-friendly firewall out there. What I like...
How does Cisco ASA Firewall compare with Palo Alto's WildFire?
When looking to change our ASA Firewall, we looked into Palo Alto’s WildFire. It works especially in preventing advan...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

Edenred, State Transport Leasing Company (STLC), Edel AG, Laurenty, Conseil Départemental du Val de Marne, Koch Media
Novamedia, Nexon Asia Pacific, Lenovo, Samsonite, IOOF, Sinogrid, SanDisk Corporation
ECI
Find out what your peers are saying about Palo Alto Networks, Proofpoint, Microsoft and others in Advanced Threat Protection (ATP). Updated: September 2026.
919,586 professionals have used our research since 2012.