Gartner. Magic Quadrant for Unified Threat Management ‘Anaiyat(a: Jeremy ours, Adan a, Greg Young View SUMMARY LUnifies threat managament davies provide small and midsize businesses with multiple network secunty functens ina srg applance, uyers shoul focus en perfermance when many Securty functions ae tenable, and onthe sk st ofthe assodated channel partner Market Definition/Description Gartner cefias the united threat management (UTM) market 25 multfuncton netwotksecurty products Used by small or midsize usinesses (SMBS). Typical, miasize businesses nave 200 to 1,000 employees (see Note 3) UTM products must continaly aed new functions an trerefoe encampas the feature set of many other network securty solitons, including nest-generavon frewall secure Web gateway an Secure smal gatenay. While consoldation comes with compromises 0 performance ane capabley, ese fare compremaes that many Ste are wing to accept (ace "What You Should Expect From Unica ‘Three Manegement Soko) Many UTM products contain various other securty capabilites, uch as wireless options and modular Ethernet part censty, and, es Frequently, Web appeston firewall (WAP) and date loss prevention (OL®) software meds, Alcaton contol embedded in UTM is often bes, focused on Inteet applications (Facebook, Google applications, YeuTuse) andloosely integrates with the itarng poly through al of pplication bundledin apf and attaches tote tring rule Its used mostly to este Use of Web apacations and coud services (suchas sod! media le shang and soon). Features related tothe management of motile devees create a potently ltracive dferentator for this marke (see "How Unite Treat Management Tackles the Consumetizaton of 7) UTM opstances are use by midsize businesses to mest the requbements for secute Internet tonnectvity. For many smal businesses, those requirement are often eve by regulatory demands (uch asthe Pcl Data Securty Standard), mancatng rucmentar levels secunty conta. Brom se basea management, basic embedded reporting, and calze sftware and documentation, wich don Specialy appeals large enterpeses, are high valed by SM his markel. Gather Sees very fiferent demoncs fom the enterprise ond trench ofr frewall markets (ee "Magle Quaerent for Entorprise Network rowel"), whe generally require more-complex network sacury features, ané are coptimzee for very afferent section ereea, “The branch offes of larger companies nave vey diferent network securty demands fom midsize busmasses, eventhough they may be of slr sz, Gartner vews branch ofcesrawals as extensions ofthe central frewal strategy (see "Beng Branch Oftee Netware Scuty Up tothe Enterprise Standara. This dives large enterprises to often Use awed enterpse products at Ui branch offcas to ensure interoperably, ad to take advantage of scones of sae n geting lrger discounts from their firewall vendor Fortnese reasons, Gartner alliates brane ofce firewall revenue tothe enterpnse| frewall market, not the UTM market. For 2013, Gartner estimates thatthe UTM market grew at 14.1% to reach a total of approximately 51.54 Bilen (se “Marker Share Analyss: Untied Threat Management (SMB Mulefuncion Firewall), Wortwae, 2014 Update" and Nete 2}. Many UTt vendors, which put a strong focus on dstributed organtzations such as etal or managed Secuty service provide’ (MSPS), are now headng twaré pacing the management ang mantarng ‘ansols fl in the cloud. Garter beleves that, athoUgh ls convenient for the venders ao $0, a portion of the SMB market willnat acest this exclusively doud model or reasons of aency, and need to Bezss the console when under attaex. In some regions and industry vertical, Imited rus: naforegn "vppler and ener privacy cancers would be adsonal reasons to avo te claus model. Rezoning an tog retention are welrsuited tothe doud, but not excel, ‘MBs should be skeptal othe aspirational message fom UTM vendors about the exaggerated Benes tf feature consoldation, Sacurty buyers should instead evaluate UTM devices based onthe contol they ‘i actualy use, the performance they wil et fer thse features, andthe quay of vendor anid channel (and managed serves) suppor that avaiate “The market fr newark and securty solitons desgned to protect SMBS continues to devlop, and our expectations for UTM techncagy features crease with each new eon ofthis Megie Quadrant As @ Fesut, the Magle Quacrant depts a shit up ang tothe right wah each revision, Consequently, vendors Learn how aim Ee help you succeed [Beenie son sleet of UTM yt epee ai at {UTM devas wil overage doud- assed secu ar SMALL AND MIDSIZE MARKET DEFINITION are ner eines 385 y he amber of fever han 00 emplveen, we mae bateees, “roan, atc the apa that Cater nee ‘event af $100 milo t $500 millon (ee bois oom Uw og nara Produt/ Sere: Cre gots at seve fee by ercnons poole of prea Market Responsivaness/Recort: Abily reson,mus progress fo mantan thelr poston nach new Mag Quaant. Magic Quadrant Figure 1. Mage Quadrant for Unified Threat Management one @ © serge tects ‘aL TO EXECUTE ‘COMPLETENESS OF VISION ‘Asotmugust 2014 soute! Garvan August2019), Vendor Strengths and Cautions Aker Security Solutions ‘Based In Bran, Aker Secutty Scutlon ea network sacurty vendor. Is portale has included UTM Salutions (ker Firewall UT) since 1997, as well os secure Web gateway and secre email gleway. Aker Frrewall UTM composed of 14 model, wth two models with wees capo, Icon a0 mn 9s 9 ‘tual applance on vware, Crp Xen and Miersof Hyper In the past 12 months, Aker renewed ts entire hardwere palace produit Ie and ded Kaspersky Antvnis aan option ‘Aker Firewall UTM i 8 goo shorts candidte fr smell and mide organizations Bra Strengths Aker Firewall UTM provides a camorenensve set of UTM Features, including apltion canta, ‘eles secur, SSk VPN, ond tw chokes each for an antveus engine aan con ‘rovertion system (PS) signature st. [Aker provides arentel option fr Rs UTM appliances, which redies capital expense (cope) costs. [Akos cents and its channel partners value the avaoity of 29/7 vendor support. [Akers one ofthe few vendors that prove graphical user Interface (GUY), documentation and ‘Suppot in Portuguese cautions _Aker Frewoll UTM lacks low-end aplience (ess than $2,000) that could be ens-ffecive for sal fies [Aker doesnot provide an embeded Web interface, but instead aways requies the nsaltion of & ent setware component (Aker Contrel Canter. Cents report that nstalabon could be _Aker not vile in lent shorts cutie of rsa a Ie not rey for ntenatonalztion yet Barracuda Networks. Based In Camp, Calfomi, Barracude Networks large vendor provng network secur, backup ‘egent ra cummrmects. Paes the ey Vertialindurry stratang infrastructure slutions, including, among other things, Web ané emall securty, Web application Frowat, ang data backup. Ithas a sang focus on SMBs, but unl reanaly was lacking @ celeatea UTE offesng In February 2013, Brracuca released a new product Ine, the Baraca Frewall (Xsees), £2 ‘amlement Barradisa NG Firewall (F sere) incumbent range a renal, whien are eriented toward Torgr entorprees needs, Baracuea Frewals composed of sven model, incising two with wireless capablces, uti not avaliable yet asa witualaplance. Ix embeds a Wie nter‘ace,cesgned fr simpler Use coe and leverage coud databases ang engine or key content erin, ‘tthe end of 2013, Barracuda executed an inal publ offering (IPO). Inthe past few ments, expanded the Barracuda Prewal product ranges toward smaller offices and added software feat fate the instalation proce, he Baracuda Prowl series is 2 good shartlstcanldate for SMBS that already use ctherSaracuda products, have an esting ust! eletlonship with resell of Barracuca sluts or have stinger Strengths Barracuda has strong market shave among SMEs, and customers Benet rom good alebal sales and Garver cents report that ty He the mpl eensing, and that untke many competitor, the brie for sotware options is reasndl. Barracuda Networks ofes a 30-day refund plan and a replacement program that includes 2 new ‘apple every four years cautions ‘The Barracuda X Seres was onl recently released some integrated modules andthe cud. based ervalzed management are yet unproven. Safracud's canna unevenly rane on te sokiton bs some regions The Sarracud X Ser has not been scrutizedby any major thré-paty testing labs and has 8 lente numberof orteatons ‘career boleves that, while Barracuda has crac assess that SMB and enterpse have Gfferent needs, customers and channel partners could be confused bacause te two firenal nes have more ovetas than aferences, Check Point Software Technologies ‘Check Pont Stare Technologies with headavarters in Tel Av, Ise and San Carbs Cloris lone e the largest pure-play sacurty companies, ang hasbeen presen nthe secury market fr more ‘han 20 years. Intaly exclswely focused an enterprises Chece Pont has ter ivasted i he UTM Segment, specially targeting SMB use eases, te SMB produc ne Includes 11 appllancs, cluding tireless and DSL models UTM ean eso be delivered eso virtual sppance or on amacon Web Serves (AWS), Funcamental to Cneck Pint frewalofengsf the set of sofware oztons refered to as Soft Blades that canbe grouped toether in bundles. ‘Once the hardaare and OS consoldation work was achieved in 2013, Chek Pint moved is efor back tomen threat prevention features and performance improvements. Iehas also recent made avaiable 2 Imarkatplace of threat fens frm ted paris that eens can purcnase separately ae software opens (TrreatCiou intetistore) (Check Ponts 2 good cole for SMB organizations that do nt consider low price as the most important Strengths ‘Check Point's reporting and management console consistently highly rates by mise companies. ‘Check Point manages to simply ts management console forts entry level applances without ‘compromising the Nexy and depth of potectan ‘Check Point's UTM saltons benef rm ts enterpseevelsecurty features, such as ThreatCloud ‘and Ant-ot softwere opting in adtion to the strong TPS more, which areal Backed up by ‘Check Point's ge threat esearch team. check Point srovdes en option for sandboxing Thre Fmlton), and recenty released & couse based secunty sorte for mete and remote users, n adsten to having exsting partnerships with moble devee management (MDM) scion. ‘check Point strong, table organization with ¢ consistent strategy andproven aby to exeevte con Rs road map. cautions “Gartner sees Check Pant mostly ling to sexing base of detributad enterprises, but does fg Bein oer Leaders in butang a dedieated channel of purely SMB resellers. {Garter clans atten te pie asthe primary reason fr rot Selecting Check Point salutlen. ‘cartror SMB clnts report thatthe quay of Level 1 suppor from channel varies, and Gartner has tbesrved that SMB customer problem aacalton take more te to resove than those from large ‘check Point offers many Software Blades and keeos adding naw enes. It has made goed progress in ‘Smplvng the sales ofaring with bunles, but reals and lant report that they fe cfu to ‘asses the overalimpact of enaiing mare than a few options simultaneously Cisco(sz, based in San se, Caloris the largest network Inastructure provider: For along time, used is glbal presence to cross-sell ecurty Sluions to ts exsting customer base isa now dedeates renee efforts tothe enterprse secunty market, wth the aceutin of Soursfie in 2013, and focuses fon secuty fer dstrbuted SMBs with ceucrmanaged Merak MX appliances (seven rol), Is portfolio. Stllprovd the ISASUO Series fr small businesses (four mecel,incang two with wireless capabilites), and the ASA'5500-X Seres for midsae companies (ve modal). Cco Adapelvty Secury Applance (ASA) IS ao avaleble asa Vrtual appliance (ASA) In adion Lo tne ceceaed security solutions, Gsco has large posto of network slitons that ean provide security eatres, such as Integrated Services Rosters (15), During the past 12 months iso predominantly promoted and improved ts Merak MX product Ine wth the integration of Source IPS andthe abston of user Monty Seng cabs. sco a good choice for exsting SMB customers Using other Cisco tecnelogy, and for dtribsted organizations in Nth Ameri. Strengths Ciscss Grtner customers generally ofr postive reviews of Cisos hardware robustness ‘The karing curve fr Cisco trained stat on ts securytechnoleay i shor, especialy for customers ako fio withthe Caco command ne interfoce. co Marah MX ncudes contextual feed rom Source, integrated VI-FY4G management, and Integration wth MDM slutions for moble users sco Merah MX cloud-tasedcentralzed management fers a united iw for managing UTS, Merak's wireless AP and snitch, Customers can create configuration templates to add ew batons and to create ste-torste VPN more easy cautions ‘lsoo Mera MX lacks ermal sacurty, SSL VPN fr remote users and SSL decryption for HTTP that are avaiable many os competitors UTM. ‘isexs dual produc ne strategy forthe UTM market might create complet for some clents that could leverage thar Osco know with isco ASA onthe core network, but could abo benefit ‘tem some ofthe Merak! MX feature for datrbutesofces (ison does not generate many inquis fm SMB canes, and when it does is otan the Ineumbentsdution that considered fr replacement. Clavistor Cvster, eadavarteren Sweden, primarly targets enterorises and TSP5 wih ts apotances and cloud Serves, The vender adresses S¥vBs through its Brande secuty applaness the Eagle Seres ang the Wal Sere, that can be devered as viral apolances, 0 Its operating system (COS) sarovied exer 2352 flliieged software stack (cOS Cae) oF asa steambed version focused an NetWork needs (OS Stream). Gvister abo ofers 0 cedcaed portl to MSSPs fr the monagerent os UTM 1n 2024, the company apoointed anew CEO and shied strategy even more toward telecom operators ith LTE eel scurty- I May 2014, Clavier entered the Stockholm stock marke. Ccavster i 2 good shorttst canada for municpalies and dstrbutedpuble administration n Northern Europe, o for rganzatlon in need of rugged UTM applances, Strengths ‘Gents ct very funcional securty modules and qualty vendor support as reason fr remaining ‘aul to Coit ‘Tre 150 90012008 certcation anda two-year standard return-and-epar warranty appzal to specte mise vertical industries a a dlents that heve experienced haraware sues wih other UTM providers in the post ‘The lavster XB Seres of rugged applances Is 2 good alternative for xgorization from specie vertical inet, such of defense, or when the exemaleandons where the UTM azolance needs tote cate are adverse cautions ‘hits Cavite continues o serve tne SMB market wih sofware features that were developed in the paste current go-to-market aporeach fe now primary focused on carrie and enterprise seeds. Casters sae, suppor and channel partner resources are focused predominantly on Northern Europe, end might be uneven avaiable or cstomers rom other regions. Clavier rarely appears on Gartner cant’ shorts. cyberoam Based in Ina, ero4”, now a Sophos company, i pure-play vendor fr the UTM marke, primary focusng on Stas and attempting to expand toler enterprises, Cyberoam provides 18 ferent UTM haroware mocels and fwe wual applances Cybrcam markets s Layer 8 user icant contol features 352 kay otterentiator to other UTM pcaucts, and over the years has bul several feturesIveragng this concept 1p Fetruary 2014, cyeroam was acqued by Sophos. The company announces that Cybercam would cartnue tases UTM produc ne without any shor-term aruplon. Recent Cybeream™ Updates Includefeatures targeting the Industral sacunty use case. Cyteraam ia goad choice for SHB organizations inthe Asi Poiic and Miele East regions. SMB buyers from other regons shoul frst evaluate local nannel expertise on UTM and customer references with Smiar use cates, Strengths ‘cyberoam invests heavly on ts channel, provides a comprehensive knowledge base, and allows (erect acces to chat and phone support fr is partners that should ote be transite nto aul solution of suport sues for is dents. ‘cyberoam consistently executes on 5 road map. ‘cyberoamindudes mature embeded reporting and use ident contro that are atractve to midsize orpaniatons ‘cyberoam's fering poy enbacs download and upload statisti for each ul, which hebs etermine duplete and unused rules. also proves a flxble way to restric recreational Internet Usage with te ably to St up quotas for Uses or groups a users. {cyberoam has low visit inthe Americas and appears less aten tn lebsng UTM vendors in Europe in compentive shorts om Gorter dent. Garter betewes that, while no major change has been observe ye, Cyberosm's hanna might fuer the future rom the offensive postaequiekion messaging rom competition in Eurepe ann {the US, and might be challenged in some country by cal UTM vendors Tis could translate in bea support sruponsi'some crannel partners switch 20 other brands ‘SMB cients should frst obtain clarfeation rom Cyberoam on overlaps between Sophos and (yberam's UTM product ines Dell Del wih headquarters Round Rack, Texas, ie # kedng computer manufacturer that has vested ts actu in ifasiructure and secunty, Its UTM portfolio branded Del Son WALL and Incides 13 ‘Models tis composod of two produt ines that are sold tothe SMB markt: the SOSIWALL TZ Sens for {he smallest busresses and the SonicWALL NSA Seis for small and midsize compares. Despce he Feeent change n name, Dlls UTM preduct hasbeen onthe market for along time, and berets om festenced sales and support chess. Dell targets the enterprise maret wit ts Sok WALL Superissve Sere. Dell ale provides other network secuntysokions, such 9s St VPN ane ema securty gateway: Delis # good shorts candidate for US-based SMBs ane for curren Dell customers in other regions. Strengths DellSonieWALt 12 appliances continually get goad scores tem small xgoizatins fr ther abit to combine securty moduler and wireless connect, im addon to other network estes Cents report that low ce and a comprehensive set of estes are diferentistors for Del SoncWALL in competiive evaluations Del kverages ts broad ogi eapabities to asi with degloymentsinvaling mute ‘seoaraphies. Del eats to investi ts Sect dion, and De SonicWALL has substantial RAD team, Inducing large in-house scary hb thet erestes all ts IPS sgneture. cautions Des road map forshe past 24 manths demonstrates a switch n priory toward entersse usecase tthe expanse of SMB neads for consolaated netwerk and escurty festures ‘carter has observed that since the acqistion of SonicWALL by Del any UTM vendors exploit Des recent market focus switch and aggressvaly target Das reelars ana gve them strong ‘meantive to switch. Clans eulé be affected by @ changing elstlonship between the local channel partner andthe UTM technology vendor. Del stl halds 2 good share of tne UTM market, but the Dell SonicWALL produc ne appears much ‘Garter clans report that the management interface can be cofusin Because of 00 many salable options Fortinet Fortinet i trge secuty vendor with headquarter in Sunnyvale, Calera 1 offers more than 40 afferent UTM apslance mecels (orate) aimed at Ue small and midsize market, nduang wreless, DSL and POE versions. Foruate i aso avalable as a vetual applance with five models that are priced based on CPU core court On-pemises centralized management (FortManeger) and rearing, (Fortaraizer) slutions complement the UTM offering. The comprehensive securty product portol, composed of tokens and host agents (FortClent, ls designed to appealto VARS ard MSSPs asthe route tones. Fortinet’s road map continues to be driven by regular harcware and software updstes, wth 10 new ForeGate spaces n 2013 and already 12 moalen 2014, Fornet seo mace Forcare, Forevanager, Fortinalyzer and Forweb avaableon the AWS platform. if was aso one ofthe st vendors to fer Te sanaboxing on a UT