Next Generation Firewall (NGFW) Security Value MapTM

Cisco (2)

Cisco (3)

100%

Cisco (1)

Dell SonicWALL
Check Point

WatchGuard
Fortinet (1)
McAfee

95%

Fortinet (2)

Average
Barracuda

90%

Cyberoam

85%

80%

75%

Product Legend
Barracuda F800b
Check Point 13500

70%

Cisco (1) FirePOWER 8350

Cisco (2) ASA 5525-X
Cisco (3) ASA 5585-X SSP60
Cyberoam CR2500iNG-XP
Dell SonicWALL SuperMassive E10800
Fortinet (1) FortiGate-3600C
Fortinet (2) FortiGate-1500D
McAfee NGF-1402

65%

Palo Alto Networks PA-3020

WatchGuard XTM1525

60%

Average

Palo Alto Networks

$70

$60

$50

$40

$30

$20

September 2014

$10

55%

$0

TCO per Protected-Mbps

About the NSS Labs Security Value Map

Empirical data from our individual Product Analysis Reports (PARs) and
Comparative Analysis Reports (CARs) is used to create the unique Security
Value MapTM (SVM).
The SVM provides a quick, clear overview of the relative value of security
investment options by mapping security effectiveness and value (TCO per
protected Mbps) of tested product configurations.
The SVM depicts the value of a deployment of twenty NGFW devices and
the appropriate central management console for each vendor.

How To Use The SVM

Mapping the data points against the Average Protection and Average Value
results in four quadrants on the SVM.
Further up and to the right is the best. Quadrant 1 contains those products
that are Recommended for both security effectiveness and value. These
devices provide a very high level of protection, manageability and value for
money.
Further down and left is poor, and Quadrant 3 would comprise the NSS
Labs Caution category these products offer poor value for money given
the 3 year TCO and measured security effectiveness rating.
The remaining two quadrants comprise the NSS Labs Neutral category.
These products may still be worthy of a place on your short list based on
your specific requirements.