Firewall Comparison Chart

FIREWALL REVIEW VENDOR COMPARISON SUMMARY

Call us: 866-661-6685 www.eSecurityToGo.com

SMB FIREWALLS Watchguard

Fortinet

SonicWALL

Astaro

NetGear

Cyberoam

CheckPoint

XTM 21 - 505 (Upgradable)

FG30-110C

TZ & NSA -2400 Series

Hardware, Software, VM

ProSecure UTM

15 - 35 Series

UTM-Edge

Cisco AS & ASA

Price Value

Relative to Category

Best Value

Best Value/High Feature

Best Value

Good value / Flex. Platforms

Low Price Entry Level

Good Value

Higher Cost

High Cost / Less Security

Target Bus. Size

Small Office/Branch

Small - Medium

Small - Medium

Small - Medium

Small - Medium

Small

Small - Medium

Small - Medium

Small - Medium

Firewall

110 - 850 Mbps

30-500 Mbps

100 - 775 Mbps

1,800 - 3,800 Mbps

90 - 900 Mbps

150 - 750 Mbps

190 - 1,000 Mbps

150 - 650 Mbps

UTM Mode

18 - 275 Mbps

5- 65 Mbps

25 - 150 Mbps

45 - 135 Mbps

15 - 90 Mbps

< 35 - < 200

Not Specified

3 - 6 Gbe

0 - 4 Gbe

0 - 6 Gbe

4 - 8 Gbe

15 - 130 Mbps 5 - 8 Gbe

0 - 4 Gbe

0 - 6 Gbe

FREE SSL (Tunnel) VPN ($$/Lic.)

FREE Portal (ex. FG30)

FREE SSL (Tunnel) VPN ($$/Lic.)

SSL Tunnel

SSL Tunnel

FREE Clientless Portal/Tunnel

VPN (PPTP, IPSEC)

Both

Both, FREE Clients

IPSEC only, $$ Clients

Both

IPSEC

Both

IPSEC

3G & WiFi Wireless

Yes

Yes

Yes, Model specific

3G USB, WiFi via APs

Yes

Yes

Ease of Setup Performance

Ports SSL-VPN

Features

3rd Party

Yes

Yes

Yes

3rd Party

3rd Party

3rd Party

Application Control

Yes

Yes

TZ210+ Only ...by user

Basic

VOIP QOS/Shaping

Yes

Yes

Yes

Basic Yes

Yes Yes

Yes Yes

Deep Packet ICSA

Layer 7 Stateful (+ User Level) ICSA

Wireless Access Points

NW Traffic Monitor

Security

Security Architecture (OS Design, App. Ctl, User Ctl, SSL traffic)

Yes

Yes

Yes

Yes

Application Proxy EAL4+

Transperent Limited Proxy EAL4+

Deep Packet ICSA

Deep Packet ICSA

Deep Packet ICSA

Add-on Security Features

Hardware

Yes

Desktop

Desktop

Desktop

Desktop & Rack

De' Desktop

Desktop

Desktop

Desktop

with XTMPro O/S

FG50B+

Yes

Yes

UTM 25 +

Yes

Yes

Yes 5520 +

5 Series Only (XTM Pro O/S)

Yes

Select Models

Management

Reporting Single Device Central Management

SALES NOTES

Rating Key Best Better Good

Advanced Features

Lifetime Warranty Included

Yes 5520 +

Opt. FortiAnalyzer

User Based Realtime plus Optional Viewpoint

Yes, Upgradable Realtime options

Basic

1 Yr Adv. User based

Web

Web

Web

Web

Web

Web

Option (Incl. on XTM 5+ Series)

Opt. FortiManager

Optional

Yes, SW or VM (& Reporting)

No

Option

Best Value

Best Value / High Feature

Best Value

Good Value / Multi-Platform

Low Price Entry Level

Good Value

Higher Cost

Wizard + GUI (Drag & Drop VPN)

Setup Wizard + GUI Interface

Setup Wizard + GUI Interface

Setup Wizard + GUI Interface

Easy to use and setup

Setup Wizard + GUI Interface

UTM - Edge Series limits users

Adv.Proxy based UTM Security

Adv. UTM Security Opts.

Adv. UTM Security Opts.

Adv. UTM Security Opts.

Uses Good 3rd Pty UTM

Adv. UTM (incl. SPAM) Security Adv. UTM (incl. SPAM) Security

High UTM Thruput

High UTM on Newest Models

High UTM Thruput

High UTM Thruput

Too many models

PPTP, IPSEC, SSL (Tunnel) VPN

PPTP, IPSEC, SSL-VPN Portal Gigabit model Available

IPSEC, SSL (Tunnel) VPN

IPSEC, SSL Tunnel VPN

IPSEC & SSL tunnel

PPTP, IPSEC, SSL-VPN

IPSEC

Basic Security

Gigabit model Available

All models Gigabit + SW & VM

Gigabit model Available

Gigabit models Available

Gigabit models Available

All Pricing is Ala Carte

Gigabit models Available 3G & 802.11n Models Available

3G & 802.11n Models Available 3G & 802.11n Models Available

Good UTM Performance

Optional High Cost / Less Secure

High UTM Thruput

3G & 802.11n Access Points

no 3G or WiFi models

Advanced Logging/Reporting

Opt. FortiAnalyzer HW

Viewpoint (opt)

Basic -> Adv. Reporting Opts

Basic Reporting/logging

User Level Logging & Reporting

Basic Reporting/logging

Great Support & Warranty

Slow Support Response

Good Support & Warranty

Good Support & Warranty

Good U.S. Support/Warranty

U.S. Support & Warranty

Good Support & Warranty

Realtime Device Monitoring Opt

Value Pricing

Inc. Traffic/Bandwidth Mgt

Inc. Traffic/Bandwidth Monitor

eSecurityToGo

Yes Very good

Support Level Warranty Response

Reporting & Monitoring

Layer 7 Stateful (+ User Level) ICSA Optional CSC UTM Bundle OR Optional IPS BUNDLE

Data Loss Prevention (DLP)

Support

IPSEC

Yes

(UTM, A/V, URL, IPS, Spam, etc.)

OTHER ENTERPRISE LEVEL FEATURES Form Factor High Availability Data Link (WAN Failover+)

0 - 4 Gbe Optional Bundle

3G & 802.11n Models Available 3G & 802.11n Models Available Some Options Mutually Exclusive

Page 1 of 2

FIREWALL REVIEW VENDOR COMPARISON SUMMARY

Call us: 866-661-6685 www.eSecurityToGo.com

Medium & Enterprise CheckPoint

McAfee

Fortinet

Watchguard

SonicWALL

Cyberoam

Astaro

UTM-1, Power

Enterprise Firewall

FG200 - Blade Series

XTM 5, 8 & 10 Series

NSA & E Series

200-1500 Series

Hardware, Software, VM

Price Value

Relative to Category

Enterprise Leader

Enterprise Leader

Enterprise Leader

Best Value

Best Value

New Entry

New Entry

Target Bus. Size

Small Office/Branch

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Ease of Setup Performance

Firewall

1.5 - 50 Gbps

1 - 12 Gbps

1 - 264 Gbps

1.4 - 10 Gbps

1.5 - 5.6 Gbps

1 - 10 Gbps

1.8 - 10 Gbps

UTM Mode

Not Specified

500 - 6,000 Mpbs

.240 - 1,700 Mbps 6 - 9 GbE

135-350 Mbps

8-26 GbE

400 - 1,400 Mbps 6 - 12 GbE

150 - 1,200 Mbps

10-18 Gbe

150 - 7,000 Mbps 4-12 GbE

6 - 20 Gbe

8-18 Gbe

n/a

FREE SSL-VPN

FREE SSL (Tunnel) VPN ($$/Lic.)

FREE SSL (Tunnel)

FREE Clientless Portal/Tunnel

FREE SSL (Tunnel) Both

Ports SSL-VPN

Features

VPN (PPTP, IPSEC)

IPSEC

3rd Pty IPSEC Client

Both, FREE Clients

Both

IPSEC only, $$ Clients

Both

3G & WiFi Wireless

No

No

No

No

No

No

Yes

Access Points Yes

Yes

Yes

Yes

Yes

Wireless Access Points Application Control

Yes

Yes

Access Points Yes

VOIP QOS/Shaping

Yes

Yes

Yes

NW Traffic Monitor

Security

Security Architecture (OS Design, App. Ctl, User Ctl, SSL traffic)

Add-on Security Features (UTM, A/V, URL, IPS, Spam, etc.)

Data Loss Prevention (DLP)

OTHER ENTERPRISE LEVEL FEATURES Form Factor High Availability Data Link (WAN Failover+) Hardware

Support Reporting & Monitoring Management

Reporting Single Device Central Management

SALES NOTES

Option

Included

Option

Yes

Yes

Yes

Yes

Application Proxy EAL4+ SSL Inspect, Type Enforcement

App. Aware Stateful Packet EAL4+ SSL Inspect

Application Proxy EAL4+ SSL Inspect

Deep Packet, Stateful EAL4+

Layer 7 Stateful (+ User Level) ICSA

Deep Packet ICSA

Yes

Yes

Yes

Yes

Yes

Rack

Rack

Rack

Yes

Yes

Optional

Separate Appliance

Rack

Rack

Separate Appliance

Rack

Yes

Better Good

Dual Power & HW HA

Dual Power & HW HA

1 Yr

Option 4 Hour Onsite

Optional

Included

Yes

Yes

Dual & Hot Swap Power, HA

Single Power (Ex. 1050), HW HA

E7500 Dual Power, Unit HA

Dual Power 750ia+, HA

Select Models

Opt. FortiAnalyzer (HW)

Adv. User based

Realtime + Optional Viewpoint

Adv. User based

Yes, Upgradable Realtime options

High

Yes

Application

Web

Application

Web

Yes

Web

Optional

Opt. Cmd Center Appliance

Opt. FortiManager (HW)

4+ Licenses Included

Optional

Option

Yes, SW or VM (& Reporting)

Enterprise Leader

Enterprise Leader

Enterprise Leader

Enterprise Challenger

Enterprise Challenger

Enterprise New Entry

Enterprise New Entry

Good Value

Good Value

Good Value

Great Value, Upgradeable Units

Great Value

Great Value

Great Value

Adv. UTM (incl. SPAM) Security

Most Secure Enterprise FW

Better Security

Best UTM Security

Better Security

Better Security

Adv. UTM Security Opts.

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

Basic App. Control

User Aware, Rules, Visibility

User Aware, Rules, Visibility

User Aware, Rules, Visibility

User Aware, Rules, Visibility

User Aware, Rules, Visibility

PPTP, IPSEC, SSL (Tunnel) VPN

IPSEC VPN

PPTP, IPSEC, SSL-VPN

Strong HA Features

Strong HA Features

Strong HA Features

Multi-Gb Performance, GbE Ports

Advanced Features

Gigabit models Available

IPSEC VPN

PPTP, IPSEC, SSL-VPN Portal

Strong HA Features

eSecurityToGo

Rack with XTMPro O/S

Rating Key Best

Basic Yes

Deep Packet ICSA

Support Level Warranty Response

No Access Points

All models Gigabit + SW & VM

Basic Reporting/logging

Adv. Profiling, Log & Reporting

Opt. FortiAnalyzer HW

Advanced Logging/Reporting

Opt. Advanced Reporting

User Level Logging & Reporting

Good Support & Warranty

Great Support & Warranty

Slower Support Response

Great Support & Warranty

Good Support & Warranty

U.S. Support & Warranty

Basic -> Adv. Reporting Opts Good Support & Warranty

Inc. Traffic/Bandwidth Monitoring

FREE SSL-VPN Portal Mode

Inc. Traffic/Bandwidth Monitor

Inc. Traffic/Bandwidth Mgt

Realtime Device Monitoring Opt

Page 2 of 2