Check Point’s 4000-series appliances is a legacy firewall offering. It also provides IPsec VPN access and intrusion prevention within the offering.
N/A
WatchGuard Network Security
Score 8.9 out of 10
N/A
WatchGuard Network Security is a network security and firewall software. WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services designed for SMB’s.
WatchGuard was a little more like a Sonicwall, and we felt the Soho-type interface wasn't what we wanted out of a security product. The anti-malware and spyware products were not nearly as good or pronounced as the checkpoint products. Secondly, we have to have the checkpoint …
Well suited for small to medium business with less than 1000 users. Good edge device, NAT is easy to work with. The anti-malware, anti-spyware are worthwhile paid add-ons. Anti-spoofing is built in, and required to be put in. The split of management between Gaia and secure platform applications is painful, but nothing that can't be gotten around.
Generally speaking, our customers have standard requirements and the WatchGuard Network Security Firebox is there to ensure they stay protected. We've never had a successful breach on a customer's on-premise setup with a WatchGuard Network Security Firebox installed. 3rd parties (like CCTV, Printers, Login Systems, etc.) do not know which port their devices work over, so we have to identify that with them and there are often delays when this occurs.
I'm giving this note to WatchGuard Network Security due to its ease of daily support (after acquiring necessary knowledge in the solution), which allows agility in configuration changes, its integration of several reliable security features (such as SSL VPN, VPN Virtual Interfaces between companies, and others) and functional and stability in operation, with no downtime in the equipment due to problems or malfunctions
Although it might take some time to figure out, we have been able to use WatchGuard's online reference library and tech support to create/implement/modify all of our filtering rules and exceptions needed. There really has not been a shortcoming other than perhaps a learning curve.
Availability has always been a strong point of this product, it is rare that watchguard does not have a solution for customers' network monitoring needs.
The performance of WatchGuard Network Security is very good, in the years that we have used the solution we have only had a single error and Watchguard itself was able to solve it. Furthermore, when purchasing any product, the partner always evaluates the capacity of the solution to recommend the most appropriate product for our needs.
We have only had to contact them once during the initial set up to help bring the internet back on line. After that for the most part our systems have been automated, and could easily be checked form their online FAQ and Knowledge base that they provide. Everything else is easily handled from their browser based interface
We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.
I had my key information for setting up the firewall, and they assisted me in finding the settings and appropriate places to enter data. They also helped troubleshoot when I didn't understand some of their feature concepts, and we got it running.
We were using the Cisco ASA 5525 but this firewall was not fully secure. Lots of advanced features were missing so we installed the Check Point 4000 Appliances and we are really happy with the features, advanced IPS and web filtering help us to protect our organization and also more control our user traffic.
At 3 of my locations I use both a Sonic Wall and a watch guard. In my experience, the sonic wall has a much better interface. I feel it was much easier for someone that has never accessed a fire wall to be able to make changes and learn very quickly. I feel the Watchguard has better built in applications and the VPN was easier to use and access.
This product is very scalable since previously everything related to Watchguard was on premises but that has now changed with the inclusion of watchguard cloud. Now the product has evolved to have full control of firewalls at the cloud level.
The VPNs are very easy to configure, less time to loose at new implementation.
The traffic monitor can be improved, I can't see the ISO layers to do a faster diagnosis.
Having an ADDS authentication is a plus, can use it with rules and vpn for remote access. Very useful.
The dimension feature can be developed as a website + database for NGINX, Apache2, IIS, etc., I feel traped on that linux vm only.
Most of the customers doesn't like to pay for a solution like this. They will accept only after beign attacked. WatchGuard can improve the sales with a demo (hacking, active security, etc.).