Report | Miercom Hybrid Mesh Network Security Competitive Assessment, 2026

Table of Contents

1. Executive Summary
2. Hybrid Mesh Network Security Testing Summary Results
3. Security Effectiveness
   3.1 Malware Prevention and Detection 3.2 Malicious Phishing URLs Prevention and Detection
   3.3 Intrusion Prevention System (IPS) Efficacy
4. Weighted Secure Browsing Speed
5. Risk Exposure
6. Products Tested
7. Test Setup
   7.1 Miercom Advanced Offensive Threat Detection
   7.2 VirusTotal
   7.3 Testing Environment

1. Executive Summary

In 2026, vendors are adopting hybrid mesh network security architectures that unify firewalls, SASE, and cloud security under a single policy framework to address the growing complexity of securing distributed enterprise networks.

While this architectural shift promises simplified management and consistent protection across environments, it also raises the bar for security effectiveness. To independently validate how leading vendors perform in this new model, Check Point engaged Miercom to evaluate hybrid mesh network security solutions in a controlled, comparative test.

Miercom conducted competitive security effectiveness testing of Check Point’s Hybrid Mesh Network Security against products from Cisco, Fortinet, Palo Alto Networks, and Zscaler. Comprehensive testing was conducted with all vendors' security services enabled.

2. Hybrid Mesh Network Security Testing Summary Results

The grid below summarizes the results of all the tests run in the Hybrid Mesh Network Security evaluation:

3. Security Effectiveness

3.1 Malware Prevention and Detection

This year, Miercom strengthened the criteria for malicious file inclusion, evaluating newly observed malware samples from the previous 24 hours detected by nine security engines. The evaluation better reflects the current threat landscape, where novel malware variants appear rapidly.

Summary of Hybrid Mesh Network Security Test Results:

• Blocking and Detection Efficacy: Check Point prevented over 99.9% of malware from a large set of file types.

3.2 Malicious Phishing URLs Prevention and Detection

Summary of Hybrid Mesh Firewall Test Results: Check Point demonstrated the ability to detect phishing websites dynamically using AI-based phishing protection.

3.3 Intrusion Prevention System (IPS) Efficacy

Testing was conducted using BreakingPoint, measuring the ability to detect and block exploit traffic associated with known vulnerabilities.

4. Weighted Secure Browsing Speed

Miercom measured network performance with next-generation firewall protections enabled, focusing on connection and file download speeds.

5. Risk Exposure

CISA maintains the KEV Catalog, reflecting the number of known exploited vulnerabilities associated with each vendor’s products. Check Point stands out with just one listed vendor-specific CVE.

6. Products Tested

• Check Point: Next Generation Firewall, Version R82.10
• Palo Alto Networks: PAN-OS, Version 12.1.4
• Fortinet: FortiGate, Version 7.6.6
• Cisco Systems: Secure Firewall (FTD), Version 7.7.10
• Zscaler: ZIA, SaaS Platform Version

7. Test Setup

Testing was designed to determine the strengths and weaknesses of each vendor’s Hybrid Mesh Network Security offering.

7.1 Miercom Advanced Offensive Threat Detection

Miercom’s Advanced Offensive Security Testing incorporates scenario-driven methods to provide relevant data regarding security readiness.

7.2 VirusTotal

Malware samples sourced from VirusTotal were used for evaluating all the products.

7.3 Testing Environment

Testing was designed to simulate real-world traffic, utilizing unique, confirmed malicious samples.