Check Point vs Abnormal security

Posted by portfolios2018@reddit | sysadmin | View on Reddit | 2 comments

I'm looking to see what the latest take is on Abnormal vs Check Point? Looking at previous posts, there seems to be a lot of love for Abnormal. In my current POC of both Abnormal and Check Point, we're so far enjoying Check Point more. Their team is more responsive and really knows their product. We're not seeing any difference in detection rates between tools. Our backend is Microsoft 365. We're a CrowdStrike shop, so going into this, I was leaning towards Abnormal due to their integration, but I'm wondering how useful that really is. Two concerns I have with Abnormal are 1. Future API rate limiting by Microsoft and 2. The fact users receive the email, and then it is removed. I've have a couple occurrences during the POC where the alert is still on my iPhone, but no longer in my mailbox. I'm concerned that would open more tickets with our support staff. I'm wondering what others have found in their recent experience with both products?

[-]

foalainc@reddit

I think both of those concerns would affect Checkpoint HEC as well? We sell Checkpoint and the main benefit is that they offer a good product at a very good price.

daditude83@reddit

We tried to go for the trifecta with Crowdstrike, Abnormal and Zscaler. We ended up going with INKY, but Abnormal was a close 2nd. Price in the end was the determining factor. We also trialed Checkpoint and they were solid. I don't think you will go wrong tbh.