FIREWALL REVIEW VENDOR COMPARISON SUMMARY
Call us: 866-661-6685 www.eSecurityToGo.com
SMB FIREWALLS Watchguard
Fortinet
SonicWALL
Astaro
NetGear
Cyberoam
CheckPoint
XTM 21 - 505 (Upgradable)
FG30-110C
TZ & NSA -2400 Series
Hardware, Software, VM
ProSecure UTM
15 - 35 Series
UTM-Edge
Cisco AS & ASA
Price Value
Relative to Category
Best Value
Best Value/High Feature
Best Value
Good value / Flex. Platforms
Low Price Entry Level
Good Value
Higher Cost
High Cost / Less Security
Target Bus. Size
Small Office/Branch
Small - Medium
Small - Medium
Small - Medium
Small - Medium
Small
Small - Medium
Small - Medium
Small - Medium
Firewall
110 - 850 Mbps
30-500 Mbps
100 - 775 Mbps
1,800 - 3,800 Mbps
90 - 900 Mbps
150 - 750 Mbps
190 - 1,000 Mbps
150 - 650 Mbps
UTM Mode
18 - 275 Mbps
5- 65 Mbps
25 - 150 Mbps
45 - 135 Mbps
15 - 90 Mbps
< 35 - < 200
Not Specified
3 - 6 Gbe
0 - 4 Gbe
0 - 6 Gbe
4 - 8 Gbe
15 - 130 Mbps 5 - 8 Gbe
0 - 4 Gbe
0 - 6 Gbe
FREE SSL (Tunnel) VPN ($$/Lic.)
FREE Portal (ex. FG30)
FREE SSL (Tunnel) VPN ($$/Lic.)
SSL Tunnel
SSL Tunnel
FREE Clientless Portal/Tunnel
VPN (PPTP, IPSEC)
Both
Both, FREE Clients
IPSEC only, $$ Clients
Both
IPSEC
Both
IPSEC
3G & WiFi Wireless
Yes
Yes
Yes, Model specific
3G USB, WiFi via APs
Yes
Yes
Ease of Setup Performance
Ports SSL-VPN
Features
3rd Party
Yes
Yes
Yes
3rd Party
3rd Party
3rd Party
Application Control
Yes
Yes
TZ210+ Only ...by user
Basic
VOIP QOS/Shaping
Yes
Yes
Yes
Basic Yes
Yes Yes
Yes Yes
Deep Packet ICSA
Layer 7 Stateful (+ User Level) ICSA
Wireless Access Points
NW Traffic Monitor
Security
Security Architecture (OS Design, App. Ctl, User Ctl, SSL traffic)
Yes
Yes
Yes
Yes
Application Proxy EAL4+
Transperent Limited Proxy EAL4+
Deep Packet ICSA
Deep Packet ICSA
Deep Packet ICSA
Add-on Security Features
Hardware
Yes
Desktop
Desktop
Desktop
Desktop & Rack
De' Desktop
Desktop
Desktop
Desktop
with XTMPro O/S
FG50B+
Yes
Yes
UTM 25 +
Yes
Yes
Yes 5520 +
5 Series Only (XTM Pro O/S)
Yes
Select Models
Management
Reporting Single Device Central Management
SALES NOTES
Rating Key Best Better Good
Advanced Features
Lifetime Warranty Included
Yes 5520 +
Opt. FortiAnalyzer
User Based Realtime plus Optional Viewpoint
Yes, Upgradable Realtime options
Basic
1 Yr Adv. User based
Web
Web
Web
Web
Web
Web
Option (Incl. on XTM 5+ Series)
Opt. FortiManager
Optional
Yes, SW or VM (& Reporting)
No
Option
Best Value
Best Value / High Feature
Best Value
Good Value / Multi-Platform
Low Price Entry Level
Good Value
Higher Cost
Wizard + GUI (Drag & Drop VPN)
Setup Wizard + GUI Interface
Setup Wizard + GUI Interface
Setup Wizard + GUI Interface
Easy to use and setup
Setup Wizard + GUI Interface
UTM - Edge Series limits users
Adv.Proxy based UTM Security
Adv. UTM Security Opts.
Adv. UTM Security Opts.
Adv. UTM Security Opts.
Uses Good 3rd Pty UTM
Adv. UTM (incl. SPAM) Security Adv. UTM (incl. SPAM) Security
High UTM Thruput
High UTM on Newest Models
High UTM Thruput
High UTM Thruput
Too many models
PPTP, IPSEC, SSL (Tunnel) VPN
PPTP, IPSEC, SSL-VPN Portal Gigabit model Available
IPSEC, SSL (Tunnel) VPN
IPSEC, SSL Tunnel VPN
IPSEC & SSL tunnel
PPTP, IPSEC, SSL-VPN
IPSEC
Basic Security
Gigabit model Available
All models Gigabit + SW & VM
Gigabit model Available
Gigabit models Available
Gigabit models Available
All Pricing is Ala Carte
Gigabit models Available 3G & 802.11n Models Available
3G & 802.11n Models Available 3G & 802.11n Models Available
Good UTM Performance
Optional High Cost / Less Secure
High UTM Thruput
3G & 802.11n Access Points
no 3G or WiFi models
Advanced Logging/Reporting
Opt. FortiAnalyzer HW
Viewpoint (opt)
Basic -> Adv. Reporting Opts
Basic Reporting/logging
User Level Logging & Reporting
Basic Reporting/logging
Great Support & Warranty
Slow Support Response
Good Support & Warranty
Good Support & Warranty
Good U.S. Support/Warranty
U.S. Support & Warranty
Good Support & Warranty
Realtime Device Monitoring Opt
Value Pricing
Inc. Traffic/Bandwidth Mgt
Inc. Traffic/Bandwidth Monitor
eSecurityToGo
Yes Very good
Support Level Warranty Response
Reporting & Monitoring
Layer 7 Stateful (+ User Level) ICSA Optional CSC UTM Bundle OR Optional IPS BUNDLE
Data Loss Prevention (DLP)
Support
IPSEC
Yes
(UTM, A/V, URL, IPS, Spam, etc.)
OTHER ENTERPRISE LEVEL FEATURES Form Factor High Availability Data Link (WAN Failover+)
0 - 4 Gbe Optional Bundle
3G & 802.11n Models Available 3G & 802.11n Models Available Some Options Mutually Exclusive
Page 1 of 2
FIREWALL REVIEW VENDOR COMPARISON SUMMARY
Call us: 866-661-6685 www.eSecurityToGo.com
Medium & Enterprise CheckPoint
McAfee
Fortinet
Watchguard
SonicWALL
Cyberoam
Astaro
UTM-1, Power
Enterprise Firewall
FG200 - Blade Series
XTM 5, 8 & 10 Series
NSA & E Series
200-1500 Series
Hardware, Software, VM
Price Value
Relative to Category
Enterprise Leader
Enterprise Leader
Enterprise Leader
Best Value
Best Value
New Entry
New Entry
Target Bus. Size
Small Office/Branch
Med. - Enterprise
Med. - Enterprise
Med. - Enterprise
Med. - Enterprise
Med. - Enterprise
Med. - Enterprise
Med. - Enterprise
Ease of Setup Performance
Firewall
1.5 - 50 Gbps
1 - 12 Gbps
1 - 264 Gbps
1.4 - 10 Gbps
1.5 - 5.6 Gbps
1 - 10 Gbps
1.8 - 10 Gbps
UTM Mode
Not Specified
500 - 6,000 Mpbs
.240 - 1,700 Mbps 6 - 9 GbE
135-350 Mbps
8-26 GbE
400 - 1,400 Mbps 6 - 12 GbE
150 - 1,200 Mbps
10-18 Gbe
150 - 7,000 Mbps 4-12 GbE
6 - 20 Gbe
8-18 Gbe
n/a
FREE SSL-VPN
FREE SSL (Tunnel) VPN ($$/Lic.)
FREE SSL (Tunnel)
FREE Clientless Portal/Tunnel
FREE SSL (Tunnel) Both
Ports SSL-VPN
Features
VPN (PPTP, IPSEC)
IPSEC
3rd Pty IPSEC Client
Both, FREE Clients
Both
IPSEC only, $$ Clients
Both
3G & WiFi Wireless
No
No
No
No
No
No
Yes
Access Points Yes
Yes
Yes
Yes
Yes
Wireless Access Points Application Control
Yes
Yes
Access Points Yes
VOIP QOS/Shaping
Yes
Yes
Yes
NW Traffic Monitor
Security
Security Architecture (OS Design, App. Ctl, User Ctl, SSL traffic)
Add-on Security Features (UTM, A/V, URL, IPS, Spam, etc.)
Data Loss Prevention (DLP)
OTHER ENTERPRISE LEVEL FEATURES Form Factor High Availability Data Link (WAN Failover+) Hardware
Support Reporting & Monitoring Management
Reporting Single Device Central Management
SALES NOTES
Option
Included
Option
Yes
Yes
Yes
Yes
Application Proxy EAL4+ SSL Inspect, Type Enforcement
App. Aware Stateful Packet EAL4+ SSL Inspect
Application Proxy EAL4+ SSL Inspect
Deep Packet, Stateful EAL4+
Layer 7 Stateful (+ User Level) ICSA
Deep Packet ICSA
Yes
Yes
Yes
Yes
Yes
Rack
Rack
Rack
Yes
Yes
Optional
Separate Appliance
Rack
Rack
Separate Appliance
Rack
Yes
Better Good
Dual Power & HW HA
Dual Power & HW HA
1 Yr
Option 4 Hour Onsite
Optional
Included
Yes
Yes
Dual & Hot Swap Power, HA
Single Power (Ex. 1050), HW HA
E7500 Dual Power, Unit HA
Dual Power 750ia+, HA
Select Models
Opt. FortiAnalyzer (HW)
Adv. User based
Realtime + Optional Viewpoint
Adv. User based
Yes, Upgradable Realtime options
High
Yes
Application
Web
Application
Web
Yes
Web
Optional
Opt. Cmd Center Appliance
Opt. FortiManager (HW)
4+ Licenses Included
Optional
Option
Yes, SW or VM (& Reporting)
Enterprise Leader
Enterprise Leader
Enterprise Leader
Enterprise Challenger
Enterprise Challenger
Enterprise New Entry
Enterprise New Entry
Good Value
Good Value
Good Value
Great Value, Upgradeable Units
Great Value
Great Value
Great Value
Adv. UTM (incl. SPAM) Security
Most Secure Enterprise FW
Better Security
Best UTM Security
Better Security
Better Security
Adv. UTM Security Opts.
NW Application Aware & Control
NW Application Aware & Control
NW Application Aware & Control
NW Application Aware & Control
NW Application Aware & Control
NW Application Aware & Control
Basic App. Control
User Aware, Rules, Visibility
User Aware, Rules, Visibility
User Aware, Rules, Visibility
User Aware, Rules, Visibility
User Aware, Rules, Visibility
PPTP, IPSEC, SSL (Tunnel) VPN
IPSEC VPN
PPTP, IPSEC, SSL-VPN
Strong HA Features
Strong HA Features
Strong HA Features
Multi-Gb Performance, GbE Ports
Advanced Features
Gigabit models Available
IPSEC VPN
PPTP, IPSEC, SSL-VPN Portal
Strong HA Features
eSecurityToGo
Rack with XTMPro O/S
Rating Key Best
Basic Yes
Deep Packet ICSA
Support Level Warranty Response
No Access Points
All models Gigabit + SW & VM
Basic Reporting/logging
Adv. Profiling, Log & Reporting
Opt. FortiAnalyzer HW
Advanced Logging/Reporting
Opt. Advanced Reporting
User Level Logging & Reporting
Good Support & Warranty
Great Support & Warranty
Slower Support Response
Great Support & Warranty
Good Support & Warranty
U.S. Support & Warranty
Basic -> Adv. Reporting Opts Good Support & Warranty
Inc. Traffic/Bandwidth Monitoring
FREE SSL-VPN Portal Mode
Inc. Traffic/Bandwidth Monitor
Inc. Traffic/Bandwidth Mgt
Realtime Device Monitoring Opt
Page 2 of 2
