No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point SandBlast Network vs Symantec Advanced Threat Protection comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point SandBlast Network
Ranking in Advanced Threat Protection (ATP)
7th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
No ranking in other categories
Symantec Advanced Threat Pr...
Ranking in Advanced Threat Protection (ATP)
24th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
16
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Check Point SandBlast Network is 3.3%, up from 3.1% compared to the previous year. The mindshare of Symantec Advanced Threat Protection is 2.2%, up from 1.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Check Point SandBlast Network3.3%
Symantec Advanced Threat Protection2.2%
Other94.5%
Advanced Threat Protection (ATP)
 

Featured Reviews

Karan Pichlangia - PeerSpot reviewer
Assistant General Manager at Sunteck Realty Pvt Ltd
Advanced threat analysis has reduced malware incidents and gives our security team more confidence
The best features that Check Point SandBlast Network offers include threat emulation for zero-day attacks, which I truly appreciate, and deep file analysis across multiple OS environments. The deep file analysis from Check Point SandBlast Network makes my daily workflow much easier, as I am able to analyze everything in terms of a report about my network. Check Point SandBlast Network has positively impacted my organization, as I have seen huge changes with a notable drop in malware incidents, especially with suspicious attachments; it gives the security team confidence that known or zero-day files are checked automatically. Regarding the huge drop in malware incidents, I estimate that it may be around 20%.
Dennis O'Reilly - PeerSpot reviewer
Cyber SecOps Principal at Dotcom Security
Provides end-to-end antivirus protection and has good stability
Symantec Endpoint Protection provides end-to-end protection. Along with antivirus protection, it has a lot of key areas, including intrusive prevention, firewall features, and application and device control. It can integrate with other Broadcom solutions, such as Symantec Messaging Gateway and Symantec DLP. If you want to send an email, it gets scanned through endpoint protection and DLP. We get all Symantec functionality in a single pane.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It looks out for new cyber ​​threats and generates predictions based on behaviors that are already detected on a daily basis."
"We didn't really have any IPS before. So, Check Point has improved our security posture. People get used to doing things certain ways, which might not be the best or most secure way, and they can't do that now, which just requires more education of the user base. With the endpoint client, we've started to use Check Point for remote access."
"The Check Point SandBlast Network uses caching and static analysis to actually reduce the time it takes to scan and isolate the same file for incoming data compromises."
"Threat Emulation gives networks the necessary protection against unknown threats in files that are attached to emails. The Threat Emulation engine picks up malware at the exploit phase before it enters the network. It quickly quarantines and runs the files in a virtual sandbox, which imitates a standard operating system, to discover malicious behavior before hackers can apply evasion techniques to bypass the sandbox."
"It saves time with us trying to do the analysis. We use it to try to find out how something got into the network. We use it to stop something before it ever gets in."
"SandBlast has improved my organization in the way that we no longer have to worry as much about attachments which come in."
"The most valuable feature of Check Point SandBlast Network is the sandboxing of PDF and Microsoft system files."
"You do not need to risk your network by using the in-line sandbox."
"It has certainly helped out our audit efforts because we each stay compliant in terms of various security standards."
"You don't have to buy a separate email security platform. You can enable that using their endpoint, and I like that. You don't have to have two agents running on the same box."
"The most valuable feature is Click-time URL protection."
"All of the solution's features are quite valuable for us, and we especially like the threat protection it provides."
"What I like most about Symantec Advanced Threat Protection is its notification capability."
"The great advantage in using this product is it creates multiple services."
"The incident management on the solution is very good. You get a lot of detailed information about an incident. You also get a lot of documentation in connection with the CVI or integration."
"The most valuable feature is NetFlow threat protection."
 

Cons

"We would like to see this solution reach mobile devices more efficiently, through apps or more specific products."
"I would like to see some speed improvements, e.g., how quickly you can get through all the menus. It crashes sometimes because we push so much through it. Therefore, I would like to see more small things behind the scenes, such as, back-end stability in terms of the management application."
"I imagine there will be improvements in later versions. There are hotfixes that come out all the time."
"The file types that can be scanned are limited, which means that if the file type is not listed or enabled for the sandbox, they are bypassed and it can lead to a security issue."
"I think Check Point provides standard time which ideally most other vendors take to identify behaviors of a file by sending them into a sandbox environment for inspection."
"The Threat Emulation software blade significantly affects the performance of the NGFWs, we have a significant increase in the CPU and memory consumption."
"They need to improve the GUI interface."
"EDR and EPM solutions like Carbon Black or CyberArk have integrations with the cloud version of Sandblast, however, there must be on-premise Sandblast options also (due to the fact that there are regulations for cloud usage restrictions in some countries)."
"The endpoint protection looks old."
"They could enhance the solution to work across all devices, including Android, iOS, and Mac, and make it more user-friendly."
"The administration interface needs a lot of improvement. It should be UI-based and simple."
"The product's support services need improvement."
"The support for new OSs and older OSs could be a little tighter. They need to be more upfront about what protection services they're going to provide on new OSs. I haven't seen the Windows 11 version out yet. It is either already released in Beta, or the Beta will be released soon. There could be a little bit more advanced updates on what they're doing to help protect Windows 11 environments. They can let us know in advance so that we know it is going to be protected. We can't roll out the new OS without putting end-point protection on it. So, they should tell us what is their support model for that, and what are they doing to protect Windows 11. They're not telling me, and that's a criticism. The same issue is applicable to all the other antivirus tools. It is not just Symantec; all of them have this problem."
"Solutions like CrowdStrike, ESET, and SentinelOne have really jumped ahead on behavioral and algorithm-based detection capabilities. Symantec is trying to catch up, but they still have some limitations of being an old-school AV protection program and adding AI and behavioral learning and detection algorithm."
"There are some ‎features that would add value to this product. One of them would be a graphical presentation of threats that the system has encountered."
"It should be able to collect information if the agent is disabled."
 

Pricing and Cost Advice

"The product's cost is high."
"The pricing is quite effective, not excessively high. On a scale of one to ten, where ten is the highest price, I rate the pricing a nine."
"We would like to try the Threat Extraction blade, but you need to buy a license. Check Point is expensive. I would like to buy things, but I would need the funding."
"I think the overall cost for introducing Check Point with SandBlast was reasonable and competitive in the market."
"Choosing the correct set of licenses is essential because, without the additional software blade licenses, the Check Point gateways are just a stateful firewall."
"The cost is not significantly high and it can be negotiated during any purchase of NGFW."
"The cost of Check Point SandBlast Network is annually, and there is only a standard license."
"We have seen ROI."
"The price is quite expensive."
"Pricing is good. It is nice to have a great product at a fair price."
"Symantec Endpoint Protection has an average price."
"The pricing of this solution is inexpensive and affordable."
"Symantec Advanced Threat Protection's pricing is comparable."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
920,336 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Construction Company
11%
Manufacturing Company
9%
Financial Services Firm
9%
Outsourcing Company
19%
Manufacturing Company
11%
Financial Services Firm
10%
Marketing Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business31
Midsize Enterprise8
Large Enterprise13
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise3
Large Enterprise13
 

Questions from the Community

What is your experience regarding pricing and costs for Check Point SandBlast Network?
My experience with pricing and setup cost is that pricing was a bit high, but the setup cost was initially justified.
What needs improvement with Check Point SandBlast Network?
I feel that Check Point SandBlast Network could be improved with slight delays in cleaning the file delivery. Additionally, I think it requires proper tuning to avoid unnecessary notifications.
What is your primary use case for Check Point SandBlast Network?
My main use case for Check Point SandBlast Network is advanced threat protection, especially for scanning emails, attachments, web downloads, and incoming files through a sandbox environment. A qui...
Ask a question
Earn 20 points
 

Overview

 

Sample Customers

Edenred, State Transport Leasing Company (STLC), Edel AG, Laurenty, Conseil Départemental du Val de Marne, Koch Media
ECI
Find out what your peers are saying about Check Point SandBlast Network vs. Symantec Advanced Threat Protection and other solutions. Updated: September 2026.
920,336 professionals have used our research since 2012.