FIREWALL REVIEW VENDOR COMPARISON SUMMARY Call us: 866-661-6685

www.eSecurityToGo.com

SMB FIREWALLS
Watchguard Fortinet SonicWALL Astaro NetGear Cyberoam CheckPoint Cisco AS & ASA
XTM 21 - 505 (Upgradable) FG30-110C TZ & NSA -2400 Series Hardware, Software, VM ProSecure UTM 15 - 35 Series UTM-Edge

Price Value Relative to Category Best Value Best Value/High Feature Best Value Good value / Flex. Platforms Low Price Entry Level Good Value Higher Cost High Cost / Less Security

Target Bus. Size Small Office/Branch Small - Medium Small - Medium Small - Medium Small - Medium Small Small - Medium Small - Medium Small - Medium

Ease of Setup
Firewall 110 - 850 Mbps 30-500 Mbps 100 - 775 Mbps 1,800 - 3,800 Mbps 90 - 900 Mbps 150 - 750 Mbps 190 - 1,000 Mbps 150 - 650 Mbps
Performance UTM Mode 18 - 275 Mbps 5- 65 Mbps 25 - 150 Mbps 45 - 135 Mbps 15 - 130 Mbps 15 - 90 Mbps < 35 - < 200 Not Specified
Ports 3 - 6 Gbe 0 - 4 Gbe 0 - 6 Gbe 4 - 8 Gbe 5 - 8 Gbe 0 - 4 Gbe 0 - 6 Gbe 0 - 4 Gbe

SSL-VPN FREE SSL (Tunnel) VPN ($$/Lic.) FREE Portal (ex. FG30) FREE SSL (Tunnel) VPN ($$/Lic.) SSL Tunnel SSL Tunnel FREE Clientless Portal/Tunnel Optional Bundle
VPN (PPTP, IPSEC) Both Both, FREE Clients IPSEC only, $$ Clients Both IPSEC Both IPSEC IPSEC
3G & WiFi Wireless Yes Yes Yes, Model specific 3G USB, WiFi via APs Yes Yes
Features
Wireless Access Points 3rd Party Yes Yes Yes 3rd Party 3rd Party 3rd Party
Application Control Yes Yes TZ210+ Only ...by user Basic Basic Yes Yes
VOIP QOS/Shaping Yes Yes Yes Yes Yes Yes
NW Traffic Monitor Yes Yes Yes Yes Yes

Security Architecture Layer 7 Stateful (+ User

Application Proxy Transperent Limited Proxy Deep Packet Deep Packet Deep Packet Layer 7 Stateful (+ User Level) Deep Packet
Security (OS Design, App. Ctl, User Ctl, SSL
EAL4+ EAL4+ ICSA ICSA ICSA ICSA ICSA
Level)
traffic) ICSA
Add-on Security Features Optional CSC UTM Bundle OR
(UTM, A/V, URL, IPS, Spam, etc.) Optional IPS BUNDLE

Data Loss Prevention (DLP) Yes

OTHER ENTERPRISE LEVEL FEATURES

De'
Form Factor Desktop Desktop Desktop Desktop & Rack Desktop Desktop Desktop Desktop

High Availability Data Link (WAN Failover+) with XTMPro O/S FG50B+ Yes Yes UTM 25 + Yes Yes Yes 5520 +
Hardware 5 Series Only (XTM Pro O/S) Yes Select Models Yes Yes 5520 +
Support Support Level Very good
Warranty Response Lifetime Warranty 1 Yr

Reporting & User Based Realtime Yes, Upgradable

Reporting Included Opt. FortiAnalyzer Basic Adv. User based
Monitoring plus Optional Viewpoint Realtime options

Single Device Web Web Web Web Web Web

Management
Central Management Option (Incl. on XTM 5+ Series) Opt. FortiManager Optional Yes, SW or VM (& Reporting) No Option Optional

SALES NOTES Best Value Best Value / High Feature Best Value Good Value / Multi-Platform Low Price Entry Level Good Value Higher Cost High Cost / Less Secure

Wizard + GUI (Drag & Drop VPN)
Adv.Proxy based UTM Security
Rating Key High UTM Thruput
Best Advanced
Better Features PPTP, IPSEC, SSL (Tunnel) VPN
Good Gigabit models Available
3G & 802.11n Models Available
Advanced Logging/Reporting
Great Support & Warranty
Inc. Traffic/Bandwidth Monitor
Setup Wizard + GUI Interface Setup Wizard + GUI Interface Setup Wizard + GUI Interface Easy to use and setup Setup Wizard + GUI Interface UTM - Edge Series limits users
Adv. UTM Security Opts. Adv. UTM Security Opts. Adv. UTM Security Opts. Uses Good 3rd Pty UTM Adv. UTM (incl. SPAM) Security Adv. UTM (incl. SPAM) Security
High UTM on Newest Models High UTM Thruput High UTM Thruput Too many models Good UTM Performance High UTM Thruput
PPTP, IPSEC, SSL-VPN Portal IPSEC, SSL (Tunnel) VPN IPSEC, SSL Tunnel VPN IPSEC & SSL tunnel PPTP, IPSEC, SSL-VPN IPSEC Basic Security
Gigabit model Available Gigabit model Available All models Gigabit + SW & VM Gigabit model Available Gigabit models Available Gigabit models Available All Pricing is Ala Carte
3G & 802.11n Models Available 3G & 802.11n Models Available 3G & 802.11n Access Points no 3G or WiFi models 3G & 802.11n Models Available 3G & 802.11n Models Available Some Options Mutually Exclusive
Opt. FortiAnalyzer HW Viewpoint (opt) Basic -> Adv. Reporting Opts Basic Reporting/logging User Level Logging & Reporting Basic Reporting/logging
Slow Support Response Good Support & Warranty Good Support & Warranty Good U.S. Support/Warranty U.S. Support & Warranty Good Support & Warranty
Realtime Device Monitoring Opt Value Pricing Inc. Traffic/Bandwidth Mgt

eSecurityToGo Page 1 of 2
 FIREWALL REVIEW VENDOR COMPARISON SUMMARY Call us: 866-661-6685
www.eSecurityToGo.com

Medium & Enterprise

CheckPoint McAfee Fortinet Watchguard SonicWALL Cyberoam Astaro
UTM-1, Power Enterprise Firewall FG200 - Blade Series XTM 5, 8 & 10 Series NSA & E Series 200-1500 Series Hardware, Software, VM

Price Value Relative to Category Enterprise Leader Enterprise Leader Enterprise Leader Best Value Best Value New Entry New Entry

Target Bus. Size Small Office/Branch Med. - Enterprise Med. - Enterprise Med. - Enterprise Med. - Enterprise Med. - Enterprise Med. - Enterprise Med. - Enterprise

Ease of Setup
Firewall 1.5 - 50 Gbps 1 - 12 Gbps 1 - 264 Gbps 1.4 - 10 Gbps 1.5 - 5.6 Gbps 1 - 10 Gbps 1.8 - 10 Gbps
Performance UTM Mode Not Specified 500 - 6,000 Mpbs 150 - 7,000 Mbps 400 - 1,400 Mbps .240 - 1,700 Mbps 150 - 1,200 Mbps 135-350 Mbps
Ports 10-18 Gbe 8-26 GbE 4-12 GbE 6 - 12 GbE 6 - 9 GbE 6 - 20 Gbe 8-18 Gbe

SSL-VPN n/a FREE SSL-VPN FREE SSL (Tunnel) VPN ($$/Lic.) FREE SSL (Tunnel) FREE Clientless Portal/Tunnel FREE SSL (Tunnel)
VPN (PPTP, IPSEC) IPSEC 3rd Pty IPSEC Client Both, FREE Clients Both IPSEC only, $$ Clients Both Both
3G & WiFi Wireless No No No No No No No
Features
Wireless Access Points Access Points Access Points Access Points
Application Control Yes Yes Yes Yes Yes Yes Basic
VOIP QOS/Shaping Yes Yes Yes Yes Yes Yes Yes
NW Traffic Monitor Option Included Option Yes Yes Yes Yes

Security Architecture Application Proxy App. Aware Stateful Packet Application Proxy
Deep Packet Deep Packet, Stateful Layer 7 Stateful (+ User Level) Deep Packet
Security (OS Design, App. Ctl, User Ctl, SSL
ICSA
EAL4+ EAL4+ EAL4+
EAL4+ ICSA ICSA
traffic) SSL Inspect, Type Enforcement SSL Inspect SSL Inspect
Add-on Security Features
Yes Yes Yes Yes Yes Yes Yes
(UTM, A/V, URL, IPS, Spam, etc.)
Data Loss Prevention (DLP) Optional Separate Appliance Separate Appliance

OTHER ENTERPRISE LEVEL FEATURES

Form Factor Rack Rack Rack Rack Rack Rack Rack

High Availability Data Link (WAN Failover+) Yes with XTMPro O/S Yes Yes
Hardware Dual Power & HW HA Dual Power & HW HA Dual & Hot Swap Power, HA Single Power (Ex. 1050), HW HA E7500 Dual Power, Unit HA Dual Power 750ia+, HA Select Models
Support Support Level High
Warranty Response 1 Yr Option 4 Hour Onsite

Reporting & Yes, Upgradable

Reporting Optional Included Opt. FortiAnalyzer (HW) Adv. User based Realtime + Optional Viewpoint Adv. User based
Monitoring Realtime options

Single Device Yes Application Web Application Web Yes Web

Management
Central Management Optional Opt. Cmd Center Appliance Opt. FortiManager (HW) 4+ Licenses Included Optional Option Yes, SW or VM (& Reporting)

SALES NOTES Enterprise Leader Enterprise Leader Enterprise Leader Enterprise Challenger Enterprise Challenger Enterprise New Entry Enterprise New Entry
Good Value Good Value Good Value Great Value, Upgradeable Units Great Value Great Value Great Value
Adv. UTM (incl. SPAM) Security Most Secure Enterprise FW Better Security Best UTM Security Better Security Better Security Adv. UTM Security Opts.
Rating Key Multi-Gb Performance, GbE Ports
Best Advanced NW Application Aware & Control NW Application Aware & Control NW Application Aware & Control NW Application Aware & Control NW Application Aware & Control NW Application Aware & Control Basic App. Control
Better Features User Aware, Rules, Visibility User Aware, Rules, Visibility User Aware, Rules, Visibility User Aware, Rules, Visibility User Aware, Rules, Visibility
Good Gigabit models Available IPSEC VPN PPTP, IPSEC, SSL-VPN Portal PPTP, IPSEC, SSL (Tunnel) VPN IPSEC VPN PPTP, IPSEC, SSL-VPN All models Gigabit + SW & VM
Strong HA Features Strong HA Features Strong HA Features Strong HA Features
Basic Reporting/logging Adv. Profiling, Log & Reporting Opt. FortiAnalyzer HW Advanced Logging/Reporting Opt. Advanced Reporting User Level Logging & Reporting Basic -> Adv. Reporting Opts
Good Support & Warranty Great Support & Warranty Slower Support Response Great Support & Warranty Good Support & Warranty U.S. Support & Warranty Good Support & Warranty
Inc. Traffic/Bandwidth Monitoring FREE SSL-VPN Portal Mode Inc. Traffic/Bandwidth Monitor Inc. Traffic/Bandwidth Mgt Realtime Device Monitoring Opt

eSecurityToGo Page 2 of 2