Try our new research platform with insights from 80,000+ expert users

Check Point SandBlast Network vs Palo Alto Networks WildFire vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.3
SandBlast Network boosted ROI by enhancing security, reducing incidents, and increasing productivity through advanced threat protection and filtering.
Sentiment score
6.5
Palo Alto Networks WildFire provides cost-effective, centralized threat management, reducing security costs and improving efficiency in high-threat environments.
Sentiment score
8.5
Trellix Network Detection and Response exceeded expectations by improving threat prevention and detection, boosting productivity and reducing response times.
Protecting around 2,000 users from cyber threats, including ransomware, has positively impacted the organization's growth by reducing disruptions and business loss.
I have seen both money and time saved as a return on investment.
The service generates a low rate of false positives, reducing the overhead of managing false positive events.
 

Customer Service

Sentiment score
6.5
Check Point SandBlast Network support is generally effective, with high ratings but some users desire faster responses and proactive guidance.
Sentiment score
7.0
Palo Alto Networks WildFire's support is responsive and expert but varies in availability and response time, especially for smaller companies.
Sentiment score
6.8
Trellix's support is praised for responsiveness, but improvements in expertise and incident response promptness are suggested by some.
The customer support for Check Point SandBlast Network could be improved as they are sometimes late with their responses.
There is a lack of SLA adherence, and third-party partners do not provide prompt responses.
The service response times are aligned with standards, responding within a few hours based on the problem's criticality.
The support is quite difficult to access promptly.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
 

Scalability Issues

Sentiment score
7.7
Check Point SandBlast Network scales well for most organizations, with challenges primarily in larger firms, yet supports robust expansion.
Sentiment score
8.2
Palo Alto Networks WildFire efficiently scales for diverse environments, supporting thousands of users while integrating well with security modules.
Sentiment score
7.8
Trellix Network Detection and Response scales effectively in various industries, performing well in large enterprises without latency issues.
The scalability of Check Point SandBlast Network meets our organization's needs as we grow.
The scalability of Check Point SandBlast Network is very nice.
It is scalable but requires growing the box itself because it is a resource-intensive solution.
Palo Alto Networks WildFire is scalable, and I give it a nine for scalability.
Wildfire is highly scalable.
 

Stability Issues

Sentiment score
7.9
Check Point SandBlast Network is generally stable, with reliable performance, some outages, good integration, and effective support solutions.
Sentiment score
8.5
Palo Alto Networks WildFire is highly rated for reliability, seamless integration, and effective network security performance without disruptions.
Sentiment score
7.7
Trellix Network Detection and Response is stable and reliable, with consistent performance and high user satisfaction despite occasional minor issues.
When configured correctly with adequate resources, it functions properly.
It performs filtering, malware blocking, and scanning.
The solution is scalable and stable.
 

Room For Improvement

Check Point SandBlast Network needs better integration, responsiveness, performance, usability, scalability, cost management, setup ease, and false positive reduction.
WildFire needs improvements in integration, user-friendliness, and pricing, along with better support, automation, and global availability.
Trellix Network Detection needs improved customization, integration, AI capabilities, support services, and a more user-friendly interface at reduced pricing.
The customer support for Check Point SandBlast Network could be improved as they are sometimes late with their responses.
Simplification of granular tuning for false positive reduction and bypassing benign files would benefit non-expert users.
Check Point SandBlast Network can be improved by adding more integration capabilities, such as integration with third-party firewalls, third-party EDR solutions, and SIEM.
The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings.
It is a very good product.
The support could be improved, as it takes a while to get assistance from the vendors.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
 

Setup Cost

Check Point SandBlast Network involves high initial costs but offers a favorable cost-benefit ratio with negotiation opportunities.
Palo Alto WildFire offers advanced threat protection, appealing to enterprises despite its high cost, potentially deterring smaller organizations.
Trellix Network Detection is costly but effective, with yearly licensing, discounts, and competitive pricing against some competitors like Palo Alto.
Pricing is a bit costly, but considering the features and security offered by Check Point SandBlast Network, it is reasonable.
I would rate it an eight out of ten in terms of affordability.
 

Valuable Features

Check Point SandBlast Network offers zero-day prevention, real-time protection, and AI-driven threat detection, ensuring secure file delivery.
Palo Alto Networks WildFire automates threat analysis, excels in sandboxing, and offers robust security with cloud-based, user-friendly features.
Trellix excels in threat protection with AI-driven analysis, automation, and enhanced visibility, benefiting security operations and incident management.
Check Point SandBlast Network has positively impacted my organization as it's very accurate and gives almost no false positives, providing excellent threat prevention and protecting against server zero-day attacks.
It detects zero-day exploits in suspicious and normal files, and includes forensic and reporting features that provide detailed incident analysis, malware behavior reports, and indicators of compromise.
The key features of Check Point SandBlast Network include its ability to detect zero-day attacks, provide sandboxing capabilities, and offer real-time protection with threat extraction.
Integrating Palo Alto Networks WildFire with various security protocols similar to a firewall has significantly improved the overall threat detection capabilities in our organization.
The most valuable feature of Wildfire is its sandboxing capability for examining suspicious files or locations.
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
 

Mindshare comparison

As of October 2025, in the Advanced Threat Protection (ATP) category, the mindshare of Check Point SandBlast Network is 4.0%, down from 6.0% compared to the previous year. The mindshare of Palo Alto Networks WildFire is 10.7%, down from 12.5% compared to the previous year. The mindshare of Trellix Network Detection and Response is 5.2%, up from 4.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks WildFire10.7%
Check Point SandBlast Network4.0%
Trellix Network Detection and Response5.2%
Other80.1%
Advanced Threat Protection (ATP)
 

Featured Reviews

Abnet Tsegaye Belay - PeerSpot reviewer
Has prevented zero-day attacks by analyzing and disarming suspicious files before delivery
Check Point SandBlast Network offers wide protocol coverage. It inspects emails through SMTP, POP3, and IMAP, web downloads through HTTP and HTTPS, and file transfers. Original files are analyzed in the sandbox while users get clean copies instantly to their inbox. It detects zero-day exploits in suspicious and normal files, and includes forensic and reporting features that provide detailed incident analysis, malware behavior reports, and indicators of compromise. The wide protocol coverage is particularly valuable because suspicious activities happen across different protocols. With Check Point SandBlast Network supporting multiple protocols, there is strong protection for our networks. Since implementing Check Point SandBlast Network, we have gained enhancement in our email and web security. It protects our files, complies with different standards, and reduces lateral movement in our networks.
AjayKumar17 - PeerSpot reviewer
Enhanced cybersecurity with advanced sandboxing and effective in controlling DNS issues
Improvements are needed in the UI part. The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings. This information should be integrated with the Dashboard so that system admins can see what is happening. Furthermore, technical support needs a lot of improvement, particularly in terms of responsiveness and adhering to service level agreements.
BiswabhanuPanda - PeerSpot reviewer
Offers in-depth investigation capabilities, integrates well and smoothly transitioned from a lower-capacity appliance to a higher one
The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
9%
Energy/Utilities Company
8%
Manufacturing Company
6%
Computer Software Company
15%
Financial Services Firm
9%
Manufacturing Company
9%
Government
7%
Financial Services Firm
13%
Comms Service Provider
13%
Manufacturing Company
11%
Government
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise8
Large Enterprise13
By reviewers
Company SizeCount
Small Business36
Midsize Enterprise17
Large Enterprise28
By reviewers
Company SizeCount
Small Business19
Midsize Enterprise8
Large Enterprise19
 

Questions from the Community

What do you like most about Check Point SandBlast Network?
The solution can detect and prevent attacks that may be encrypted.
What is your experience regarding pricing and costs for Check Point SandBlast Network?
I'm not in charge of costing regarding Check Point SandBlast Network, so I cannot comment on the pricing, setup cost,...
What needs improvement with Check Point SandBlast Network?
Check Point SandBlast Network could be improved as sometimes the cost can be limiting even if the feature is very nic...
How does Cisco Firepower NGFW Firewall compare with Palo Alto Networks Wildfire?
The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one conside...
Which is better - Wildfire or FortiGate?
FortiGate has a lot going for it and I consider it to be the best, most user-friendly firewall out there. What I like...
How does Cisco ASA Firewall compare with Palo Alto's WildFire?
When looking to change our ASA Firewall, we looked into Palo Alto’s WildFire. It works especially in preventing advan...
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. Wi...
What is your experience regarding pricing and costs for FireEye Network Security?
While I do not handle pricing directly, it is known that there is a variety of customers with different licensing nee...
What needs improvement with FireEye Network Security?
The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would...
 

Also Known As

No data available
No data available
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Edenred, State Transport Leasing Company (STLC), Edel AG, Laurenty, Conseil Départemental du Val de Marne, Koch Media
Novamedia, Nexon Asia Pacific, Lenovo, Samsonite, IOOF, Sinogrid, SanDisk Corporation
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Palo Alto Networks, Microsoft, Fortinet and others in Advanced Threat Protection (ATP). Updated: September 2025.
869,760 professionals have used our research since 2012.