Readers gave Check Point's VPN-1 UTM, formerly known as Express CL, high marks for the depth of security it provides and its form factor. But there's plenty to be said for the company's stability as a security vendor.
VPN-1 UTM offers firewall, intrusion prevention, anti-virus, antispyware, Web application firewall, and both IPsec and SSL VPN, within a single integrated platform. All these functions can be centrally controlled and updated in real time.
Geiger Brothers, the largest privately held promotional products company in the country, has used Check Point for more than eight years. "We have looked at other products and there are some cheaper solutions," says Rob Herman, IT operations manager with Geiger Brothers. "But Check Point is centrally managed so it cuts down on administration and overhead."
Geiger Brothers uses Check Point primarily to secure its 20 field offices across the country with its headquarters in Lewiston, Maine. "We really like Check Point because it's very secure and seamless to manage," says Herman. "It's also very stable. I've been here for five-and-a-half years and we've had very few problems with downtime."
Herman also notes that Check Point, while relatively small, sells to enterprise-sized companies. "They've got some big clients so obviously they're doing something right," he says.
Check Point's ease of use may have something to do with its target market of midsized offices and branches. "They have to conform to internal auditing requirements and they need options in terms of monitoring and reporting to management," says Dave Burton, director of product marketing with Check Point. "They want something that's easy to install and get up and going, and Check Point offers all of that."
Check Point also has a VPN-1 UTM Edge product specifically for companies with branch offices. "We've seen a trend toward appliances increasing in branch-sized offices," says Burton. "These branch offices don't have a security expert on-site and they want multiple security applications in one device. UTM Edge does just that."
Many UTM providers don't offer SSL and IPsec VPN as part of their solution; Check Point does. Although they come installed, users must purchase separate licenses to use them.
SILVER | Cisco Systems' ASA 5500 Series Adaptive Security Appliance Cisco Systems Price: $19,995
Readers were sold on Cisco's ASA 5500 UTM product, especially for its breadth of functions, such as firewall, IPS, VPN and antimalware. Service and support also rated well. "We like it because of its ability to recognize unusual behaviors," says Carl Goodman, IS manager with Premier Valley Bank in Fresno, Calif. "Other vendors just work with signature files. I liked that proactive approach." Goodman has used ASA 5500 for six months to secure his employer's internal network, and was high on Cisco support. "Cisco was the leader in new technologies, and because they're a large company they have a lot of staff if I have a question," he says.
SonicWALL PRO's ability to provide deep-packet inspection of network traffic earned high marks from readers. They also noted its form factor and ROI, while indicating SonicWALL still has some work to do with installation, configuration and management of the platform. SonicWALL Pro includes enterprise-class networking, routing, firewall, secure wireless and IPsec VPN in one appliance. Melissa Young, information technologies manager with the Portland State University Bookstore, says SonicWALL PRO protected her employer's network from a virus that struck the Oregon university's network. "What I find useful about SonicWALL PRO is that it can take care of itself," says Young. "When I started here six years ago I had never set up a firewall before. For a novice to get it up and running for six years without any problems is great."
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.