We performed a comparison between Check Point NGFW and Zscaler Internet Access based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the policy routing and application control."
"The next-generation firewall is great."
"Reliability is the best feature. We faced some issues when we were setting it up, but the service, portal, and administration are good."
"The ability to set up remote systems is the most valuable feature."
"The features that we have found most valuable are the SSL VPN and the User Portal."
"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."
"Its performance in fulfilling our requirements has been satisfactory."
"The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution."
"The packet inspection capabilities are great."
"Being able to search in clear text is simple for the customer and for troubleshooting an environment."
"It offers services like navigation, control, and filtering, which ensure that all users stay connected to business applications."
"The best feature is the ability to increase the capacity of the solution by exactly what you add, not losing anything for High Availability."
"The most valuable feature is the IPsec VPN."
"The software upgrade procedure is very easy; it just needs few clicks & we are done."
"Check Point provides dedicated blades to monitor network traffic, which helps while troubleshooting network and packet-related issues."
"The initial setup is easy."
"The scanning feature is impressive, because they do not introduce a big latency to the traffic."
"For our needs, the cloud-native proxy architecture is a very good solution. We are moving away from on-prem appliances and moving more toward cloud-based solutions. Zscaler is a good fit for our strategy. This architecture helps with cyber threats because we inspect most of the traffic and we can see that a lot of threats are stopped directly in the secure web gateway."
"Zscaler Internet Access has helped us reduce the time that we spend managing security policies by about four hours a week. We can use this time to focus on other things, especially the IT team."
"It is easy to set up the solution."
"The policies are very intuitive and easy to configure, with very little possibility of messing things up."
"One feature that is valuable to me from an implementation point of view is that it's very easy to implement."
"The most valuable feature of the solution is SWG traffic."
"The most valuable features I found in Zscaler Internet Access are the restriction of users for a particular URL, the security feature related to stopping DDoS, and the VPN."
"The stability could be a bit better."
"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."
"The command line is complicated, and the interface could be better."
"I think that the infrastructure for the VPN could be improved. The way that it is bundled also made it difficult to use and sell as it is too expensive."
"They should offer special pricing to premium partners and customers."
"I could not configure sFlow from the FortiGate graphical user interface. I realized that the sFlow configuration is available only from the CLI, and discovered that sFlow is not supported on virtual interfaces, such as VDOM links, IPsec, or GRE."
"The room for improvement is about the global delivery time period. Usually I need to wait for almost one month to deliver it overseas. So if you can shorten the deliver time it'd be great."
"There can be more security in hybrid implementations. When a customer has a hybrid environment where some parts are in the cloud, we need a consistent security solution for such scenarios."
"With the version we're on, it's a bit time-consuming if you have multiple IP addresses to add. But in the later versions, which we're moving to, it makes it a lot easier to add IP addresses with dynamic objects, as they call it."
"There needs to be a Mac version of the Smart Console."
"Check Point's support, at all levels, needs a complete overhaul."
"There needs to be advanced troubleshooting."
"Although very efficient, the product could be developed in a way that does not take a lot more system resources."
"The API support is good. However, Check Point needs to focus on more prepared scripts for some tiresome actions."
"One area which is still lacking is the site-to-site VPN solution."
"The firewall can improved to make it more user-friendly."
"The main issue with Zscaler Internet Access is proxy IP detection, which sometimes makes sites inaccessible."
"They could provide more time for the onboarding the training of an IT person."
"If they can also integrate with the multi-factor authentication to prompt users to do another, second-factor authentication, that would be ideal."
"It also needs better integration with other applications as well. There are some restrictions."
"In terms of usage, here in the GCC, it's still growing a growing market, so the combination of DLP, data leak prevention, to a certain extent is fine. But what it requires is user-based access or role-based access. The solution needs to grow into that, which definitely takes time. There's not an easy way to integrate it, when you have a cloud-based solution."
"There are a few features that are not compatible with the Azure cloud."
"Zscaler Internet Access can improve by adding traffic filtering based on the DNS."
"The interface for administration could be better. They should upgrade the management portal."
Check Point NGFW is ranked 5th in Firewalls with 275 reviews while Zscaler Internet Access is ranked 2nd in Secure Web Gateways (SWG) with 46 reviews. Check Point NGFW is rated 8.8, while Zscaler Internet Access is rated 8.2. The top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". On the other hand, the top reviewer of Zscaler Internet Access writes "Provides integrated CASB and file sandboxing but could be less expensive ". Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Sophos XG, Cisco Secure Firewall, Netgate pfSense and Azure Firewall, whereas Zscaler Internet Access is most compared with Cisco Umbrella, Microsoft Defender for Cloud Apps, Netskope , Prisma Access by Palo Alto Networks and Appgate SDP. See our Check Point NGFW vs. Zscaler Internet Access report.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.