FIREWALL REVIEW VENDOR COMPARISON SUMMARY

Call us: 866-661-6685 www.eSecurityToGo.com

SMB FIREWALLS
Watchguard
XTM 21 - 505 (Upgradable)

Fortinet
FG30-110C Best Value/High Feature

SonicWALL
TZ & NSA -2400 Series Best Value

Astaro
Hardware, Software, VM Good value / Flex. Platforms

NetGear
ProSecure UTM Low Price Entry Level

Cyberoam
15 - 35 Series Good Value

CheckPoint
UTM-Edge Higher Cost

Cisco AS & ASA

High Cost / Less Security

Price Value Target Bus. Size Ease of Setup

Relative to Category Small Office/Branch

Best Value

Small - Medium

Small - Medium

Small - Medium

Small - Medium

Small

Small - Medium

Small - Medium

Small - Medium

Firewall

110 - 850 Mbps 18 - 275 Mbps 3 - 6 Gbe FREE SSL (Tunnel) VPN ($$/Lic.) Both Yes 3rd Party Yes Yes Yes Application Proxy EAL4+

30-500 Mbps 5- 65 Mbps 0 - 4 Gbe FREE Portal (ex. FG30) Both, FREE Clients Yes Yes Yes Yes Yes Transperent Limited Proxy EAL4+

100 - 775 Mbps 25 - 150 Mbps 0 - 6 Gbe FREE SSL (Tunnel) VPN ($$/Lic.) IPSEC only, $$ Clients Yes, Model specific Yes TZ210+ Only ...by user Yes Yes Deep Packet ICSA

1,800 - 3,800 Mbps 45 - 135 Mbps 4 - 8 Gbe SSL Tunnel Both 3G USB, WiFi via APs Yes Basic Yes Yes Deep Packet ICSA

90 - 900 Mbps 15 - 130 Mbps 5 - 8 Gbe SSL Tunnel IPSEC 3rd Party Basic

150 - 750 Mbps 15 - 90 Mbps 0 - 4 Gbe FREE Clientless Portal/Tunnel Both Yes 3rd Party Yes Yes Yes

190 - 1,000 Mbps < 35 - < 200 0 - 6 Gbe

150 - 650 Mbps Not Specified 0 - 4 Gbe Optional Bundle

Performance

UTM Mode Ports SSL-VPN VPN (PPTP, IPSEC) 3G & WiFi Wireless Wireless Access Points Application Control VOIP QOS/Shaping NW Traffic Monitor

IPSEC Yes 3rd Party Yes Yes

IPSEC

Features

Security

Security Architecture
(OS Design, App. Ctl, User Ctl, SSL traffic)

Deep Packet ICSA

Layer 7 Stateful (+ User Level) ICSA

Deep Packet ICSA

Layer 7 Stateful (+ User Level) ICSA

Optional CSC UTM Bundle OR Optional IPS BUNDLE

Add-on Security Features

(UTM, A/V, URL, IPS, Spam, etc.)

Data Loss Prevention (DLP)

Yes

OTHER ENTERPRISE LEVEL FEATURES Form Factor High Availability Data Link (WAN Failover+)
Hardware

Desktop with XTMPro O/S 5 Series Only (XTM Pro O/S)

Desktop FG50B+ Yes

Desktop Yes

Desktop & Rack Yes Select Models

De' Desktop UTM 25 + Very good Lifetime Warranty

Desktop Yes Yes

Desktop Yes

Desktop Yes 5520 + Yes 5520 +

Support Reporting & Monitoring Management SALES NOTES

Support Level Warranty Response Reporting Single Device Central Management Included Web Option (Incl. on XTM 5+ Series) Best Value Wizard + GUI (Drag & Drop VPN) Adv.Proxy based UTM Security Opt. FortiAnalyzer Web Opt. FortiManager
Best Value / High Feature

1 Yr Adv. User based Web Option Good Value Setup Wizard + GUI Interface Optional Higher Cost UTM - Edge Series limits users
High Cost / Less Secure

User Based Realtime plus Optional Viewpoint Web Optional Best Value Setup Wizard + GUI Interface Adv. UTM Security Opts. High UTM Thruput IPSEC, SSL (Tunnel) VPN Gigabit model Available

Yes, Upgradable Realtime options Web Yes, SW or VM (& Reporting)

Good Value / Multi-Platform

Basic Web No
Low Price Entry Level

Setup Wizard + GUI Interface Adv. UTM Security Opts. High UTM on Newest Models PPTP, IPSEC, SSL-VPN Portal Gigabit model Available

Setup Wizard + GUI Interface Adv. UTM Security Opts. High UTM Thruput IPSEC, SSL Tunnel VPN All models Gigabit + SW & VM 3G & 802.11n Access Points Basic -> Adv. Reporting Opts Good Support & Warranty
Realtime Device Monitoring Opt

Easy to use and setup

Uses Good 3rd Pty UTM Too many models IPSEC & SSL tunnel Gigabit model Available no 3G or WiFi models Basic Reporting/logging Good U.S. Support/Warranty Value Pricing

Adv. UTM (incl. SPAM) Security Adv. UTM (incl. SPAM) Security Good UTM Performance PPTP, IPSEC, SSL-VPN Gigabit models Available High UTM Thruput IPSEC Gigabit models Available Basic Security All Pricing is Ala Carte

Rating Key
Best Better Good

High UTM Thruput

Advanced Features

PPTP, IPSEC, SSL (Tunnel) VPN Gigabit models Available 3G & 802.11n Models Available Advanced Logging/Reporting Great Support & Warranty Inc. Traffic/Bandwidth Monitor

3G & 802.11n Models Available 3G & 802.11n Models Available Opt. FortiAnalyzer HW Slow Support Response Viewpoint (opt) Good Support & Warranty

3G & 802.11n Models Available 3G & 802.11n Models Available Some Options Mutually Exclusive User Level Logging & Reporting U.S. Support & Warranty Inc. Traffic/Bandwidth Mgt Basic Reporting/logging Good Support & Warranty

eSecurityToGo

Page 1 of 2

FIREWALL REVIEW VENDOR COMPARISON SUMMARY

Call us: 866-661-6685 www.eSecurityToGo.com

Medium & Enterprise

CheckPoint
UTM-1, Power

McAfee
Enterprise Firewall Enterprise Leader

Fortinet
FG200 - Blade Series Enterprise Leader

Watchguard
XTM 5, 8 & 10 Series Best Value

SonicWALL
NSA & E Series Best Value

Cyberoam
200-1500 Series New Entry

Astaro
Hardware, Software, VM New Entry

Price Value Target Bus. Size Ease of Setup

Relative to Category Small Office/Branch

Enterprise Leader

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Med. - Enterprise

Firewall

1.5 - 50 Gbps Not Specified 10-18 Gbe

1 - 12 Gbps 500 - 6,000 Mpbs 8-26 GbE n/a

1 - 264 Gbps 150 - 7,000 Mbps 4-12 GbE FREE SSL-VPN Both, FREE Clients No Access Points Yes Yes Option App. Aware Stateful Packet EAL4+ SSL Inspect Yes

1.4 - 10 Gbps 400 - 1,400 Mbps 6 - 12 GbE FREE SSL (Tunnel) VPN ($$/Lic.) Both No Yes Yes Yes Application Proxy EAL4+ SSL Inspect Yes Separate Appliance

1.5 - 5.6 Gbps .240 - 1,700 Mbps 6 - 9 GbE FREE SSL (Tunnel) IPSEC only, $$ Clients No Access Points Yes Yes Yes Deep Packet, Stateful EAL4+ Yes

1 - 10 Gbps 150 - 1,200 Mbps 6 - 20 Gbe FREE Clientless Portal/Tunnel Both No Yes Yes Yes Layer 7 Stateful (+ User Level) ICSA Yes

1.8 - 10 Gbps 135-350 Mbps 8-18 Gbe FREE SSL (Tunnel) Both No Access Points Basic Yes Yes Deep Packet ICSA Yes

Performance

UTM Mode Ports SSL-VPN VPN (PPTP, IPSEC)

IPSEC No Yes Yes Option Deep Packet ICSA Yes Optional

3rd Pty IPSEC Client No Yes Yes Included Application Proxy EAL4+ SSL Inspect, Type Enforcement Yes Separate Appliance

Features

3G & WiFi Wireless Wireless Access Points Application Control VOIP QOS/Shaping NW Traffic Monitor

Security

Security Architecture
(OS Design, App. Ctl, User Ctl, SSL traffic)

Add-on Security Features

(UTM, A/V, URL, IPS, Spam, etc.)

Data Loss Prevention (DLP)

OTHER ENTERPRISE LEVEL FEATURES Form Factor High Availability Data Link (WAN Failover+)
Hardware

Rack Yes Dual Power & HW HA 1 Yr Optional Yes Optional Enterprise Leader Good Value Adv. UTM (incl. SPAM) Security

Rack

Rack

Rack with XTMPro O/S

Rack

Rack Yes

Rack Yes Select Models

Dual Power & HW HA High Option 4 Hour Onsite Included Application Opt. Cmd Center Appliance Enterprise Leader Good Value Most Secure Enterprise FW

Dual & Hot Swap Power, HA

Single Power (Ex. 1050), HW HA

E7500 Dual Power, Unit HA

Dual Power 750ia+, HA

Support Reporting & Monitoring Management SALES NOTES

Support Level Warranty Response Reporting Single Device Central Management

Opt. FortiAnalyzer (HW) Web Opt. FortiManager (HW) Enterprise Leader Good Value Better Security

Adv. User based Application 4+ Licenses Included Enterprise Challenger Great Value, Upgradeable Units Best UTM Security Multi-Gb Performance, GbE Ports

Realtime + Optional Viewpoint Web Optional Enterprise Challenger Great Value Better Security

Adv. User based Yes Option Enterprise New Entry Great Value Better Security

Yes, Upgradable Realtime options Web Yes, SW or VM (& Reporting) Enterprise New Entry Great Value Adv. UTM Security Opts.

Rating Key
Best Better Good

Advanced Features

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

NW Application Aware & Control

Basic App. Control All models Gigabit + SW & VM

User Aware, Rules, Visibility Gigabit models Available

User Aware, Rules, Visibility IPSEC VPN Strong HA Features PPTP, IPSEC, SSL-VPN Portal

User Aware, Rules, Visibility PPTP, IPSEC, SSL (Tunnel) VPN Strong HA Features Opt. FortiAnalyzer HW Slower Support Response FREE SSL-VPN Portal Mode Advanced Logging/Reporting Great Support & Warranty Inc. Traffic/Bandwidth Monitor

User Aware, Rules, Visibility IPSEC VPN Strong HA Features Opt. Advanced Reporting Good Support & Warranty

User Aware, Rules, Visibility PPTP, IPSEC, SSL-VPN Strong HA Features User Level Logging & Reporting U.S. Support & Warranty Inc. Traffic/Bandwidth Mgt Basic -> Adv. Reporting Opts Good Support & Warranty
Realtime Device Monitoring Opt

Basic Reporting/logging Good Support & Warranty

Adv. Profiling, Log & Reporting Great Support & Warranty Inc. Traffic/Bandwidth Monitoring

eSecurityToGo

Page 2 of 2