Check Point Quantum Firewalls and Security Gateways vs. F5 BIG-IP Access Policy Manager (APM)

Check Point Next Generation Firewall is a great solution for larger companies that have the ability to dedicate a large budget towards information security controls. In order to get the best return on investment, however, the company should have a highly functioning information security maturity level and the ability to invest in dedicated training so that all features are utilized effectively. The SmartEvent dashboards are able to provide ongoing data that can track this effectively.

Incentivized

In the current digital world we are moving into, I would recommend F5 for all SMB to enterprise organizations. There are various models to pick from. This helps secure the environment and make the network robust to any sort of attacks. I am not able to think of any reason why one should not deploy or this device is less appropriate because nowadays every small company has application / ERPs. It is also worthwhile to note in case if all your apps are being deployed in the cloud by another service provider who provides you SAAS access, in that case, you can be at ease as securing these app falls on to the provider. However, should the budget be available I would recommend deploy this and enhancing your security.

Incentivized

• Provides prime level security at perimeter with 99% Accuracy.
• NGTP blade can provide features with maximum benefit.
• Check Point all in one evaluation blade provide access to evaluate the features.

Incentivized

• Source and destination IP Base policy
• Source and application base policy
• Ssl VPN with load balancing and fail over policy working fine.

Incentivized

• Fine tune required in the malicious domains blocking
• Antivirus signatures should be updated in real time
• Network latency can be reduced during high utilization time window

Incentivized

• CCU Licenses are limited by device and are not shared between APM devices
• User sessions are not stored globally, so persistence can be an issue with users all over the world
• Configuration can get complicated when split up between multiple sites

Incentivized

Integration with F5 BIG-IP systems that we plan to keep using for a while.

Incentivized

Security Gateways are coming with a Hyperscale solution that provides maximum usability in production.

Incentivized

If F5 BIG-IP Access Policy Manager usability is fine it's not hard to use if you read the documentation but it does feel dated and could use a responsive design update to modernize user interface to current standards.

Incentivized

Check Point has a variety of support options that can be used to optimize your investment in the product. Companies with a larger information security and certified checkpoint engineer employee base can benefit from a standard SLA, while companies with a smaller security engineering footprint or more critical implementations can opt for premium, elite or diamond packages that even include the ability to provide on-site engineers for major security incidents. Check Point PRO support also provides the ability to outsource maintenance concerns by automating case creation and follow up when application components fail.

Incentivized

• Best Security meets Ultimate Hardware
• SandBlast Zero Day Protection out of the box
• Modular hardware
• High Performance CPUs
• I believe this has been covered prior - Smooth migration and very minimum downtime for a big FSI client. Our FSI client now also wants to integrate it with other 3rd party vendors which will be a part of Q3 or Q4 this FY

Incentivized

F5 BIG-IP Access Policy Manager integrates extremely well with the rest of our F5 infrastructure which is a big plus and provides us with a familiar user interface, but it isn't as scalable in its current iteration as something like Zscaler Private Access.

Incentivized

• Although there are better alternatives out there, Check Point delivers results for the price we paid for the system.
• Since implementation, we have not have any major issues with the product, minor issues were resolved in a timely fashion.
• Check Point currently fulfills our need for an outside facing firewall, when our organization grows larger, we will be looking at higher level enterprise solutions.

Incentivized

• Positive is that due to how much F5 BIG-IP Access Policy Manager can do, the F5 is the landing spot in our environment for MFA authentication.
• It has allowed a technology the company originally bought for load balancing to be used for multiple purposes.
• F5 BIG-IP Access Policy Manager has made the environment more trusting of F5 as a MFA.

Incentivized