Check Point Quantum Firewalls and Security Gateways vs. CrowdSec

Check Point Next Generation Firewall is a great solution for larger companies that have the ability to dedicate a large budget towards information security controls. In order to get the best return on investment, however, the company should have a highly functioning information security maturity level and the ability to invest in dedicated training so that all features are utilized effectively. The SmartEvent dashboards are able to provide ongoing data that can track this effectively.

Incentivized

Since I've only used CrowdSec in a homelab/small-medium sized business setup, that's really the only market I can safely recommend it and say it's well suited for, because I don't know how much it would cost to run it in an enterprise environment. I've heard some pricing and how they plan on rolling out a subscription model, but it's still in talks. Either way, if you have publicly exposed web applications hosted locally or on a virtual private server, then CrowdSec should be part of every virtual machine and/or network. Even with the lmited number of filter you get out of the free subscription, it provides a nice layer of constantly updated data,

Incentivized

• Provides prime level security at perimeter with 99% Accuracy.
• NGTP blade can provide features with maximum benefit.
• Check Point all in one evaluation blade provide access to evaluate the features.

Incentivized

• Provides great integrations with tools you already use, such as fail2ban, Cloudflare, WordPress, NGINX, Linux Firewalls, etc.
• Lightweight agents can run on individual servers and report to a main security engine so that if there's an attack on one server and a block is implemented, the entire network can be protected
• There are a lot of ways to receive alerts and store logs
• CrowdSec Central API is a nice way to manage everything externally

Incentivized

• Fine tune required in the malicious domains blocking
• Antivirus signatures should be updated in real time
• Network latency can be reduced during high utilization time window

Incentivized

• Getting CrowdSec to run on OPNsense can be a challenge, but that's also a limitation of the OS
• You can only subscribe to a couple of feeds before paying an unknown amount of money that's part of their "Enterprise" package. So, there could be better transparency.

Incentivized

Security Gateways are coming with a Hyperscale solution that provides maximum usability in production.

Incentivized

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

• Best Security meets Ultimate Hardware
• SandBlast Zero Day Protection out of the box
• Modular hardware
• High Performance CPUs
• I believe this has been covered prior - Smooth migration and very minimum downtime for a big FSI client. Our FSI client now also wants to integrate it with other 3rd party vendors which will be a part of Q3 or Q4 this FY

Incentivized

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• It flat-out blocks malicious IPs from accessing any PC on my network.
• It's free-tier makes this a no brainer to implement

Incentivized