1

We need to upgrade to faster firewalls to keep up with a gigabit internet connection, and it will need to have tunnels to other office locations. Today we use Watchguard but another issues is the Watchguard products we use today reboot when we make user VPN changes and other minor configuration changes which disconnects our remote offices. Such minor changes should be able to be made mid-day without reboots.

Does anyone know of any cross-brand upgrade offers? Any input on experience with Watchguard vs Sonicwall vs Fortinet on devices in that speed class?

What Brand Do You Recommend?
  • Fortinet
  • Sonicwall
  • Watchguard
  • Sophos
  • Meraki
  • Cisco ASA
  • PAN
  • Palo Alto
  • pfSense
  • Untangle
  • IPtables
  • Barracuda
  • Global Technology Associates
  • Check Point
  • Ubiquiti EdgeRouter
  • Juniper SRX
  • Gateprotect
  • McAfee Web DA
  • Zywall
  • endian
  • opnsense
  • Stonesoft
  • Kerio Control
  • Smoothwall
  • Juniper
  • Infinity
  • Mikrotik
  • SOPHOS UTM
0 voters
73 Spice ups
2

Personally I like Fortinet, they do a good job and they are cost effective. They will also get aggressive on price for upgrades from other vendors. If you’d like a contact to speak to over there let me know and I’ll send you a PM with a salesperson I trust there.

8 Spice ups
3

Sounds like you are using older WatchGuard product(s). New WatchGuard firewalls do not do that any longer.

18 Spice ups
4

I did have a SonicWall and switched to Sophos SG (they now have XG). The interface was significantly better to me and I thought that Sophos was giving me the best bang for my buck in features.

I got an upgrade quote for my (then) current device and use that to negotiate a lower price from other vendors.

4 Spice ups
5

SonicWall is pretty sweet.

3 Spice ups
6

We use WatchGuard and I haven’t seen one reboot like that since 2013. The M-Series are great products.

The M400 is an amazing device that has 1.4Gb of UTM throughput. I am sure the other devices are great, but WG is my preference.

8 Spice ups
7

Sonicwall TZ and NSA Series are pretty awesome

5 Spice ups
8

We were using checkpoints, and swiched to sonicwall due to price. Sonicwall compaired to all other solutions we looked at were typically clost to 50% cheaper than Checkpoint and watchguard.
The sonicwall interface is very easy to navigate compaired to checkpoints IMO.

2 Spice ups
9

It really depends on what features you need. We are very happy at the library I work for with Fortigate (by Fortinet), but it can be overkill for a lot of people. It is handling twin gigabit feeds for us quite easily. I’ve seen a lot of good reports about many of the brands you listed in your survey.

If you don’t need tons of features, I’m happy as can be with SmoothWall Express, a free, Linux-based system that runs on a dedicated PC. Just be sure to give it a box that’s fast enough to process the gigabit traffic (a first-gen i5 @ 3.x GHz should do the trick - something you might retire elsewhere). You really should start by writing a list of features you can’t live without and another list of features that would be nice, ranked by importance. Then start shopping for something that best meets your price range and those lists from reputable manufacturers.

4 Spice ups
10

Given a choice with no budget restraints id be on Palo Alto Networks any day

But if Im budget contrainted Id be still tempted by the Sophis SG series. The XG still isnt as fully featured as the SG

11 Spice ups
11

Ciscos still do that if you do a clear ikev1 sa. And you have to do that sometimes.

4 Spice ups
12

Anything but Sonicwall. They have yet to earn back the trust that was trashed by their trip through Dell ownership. If you’re looking for a specific, I’m with Martin. We’ve been happy with our Sophos SG gear.

13 Spice ups
13

I can’t stand Sonicwalls, although I haven’t worked with one in a while, so they’re probably nicer to work with now. I prefer either Cisco or Meraki. We currently use Meraki firewalls at two locations and have been pretty happy with them.

7 Spice ups
14

Glad to see Meraki and Cisco ASA making the list. Thought I’d drop by and add in some links for anyone that may find them useful. Your fellow SpiceHeads are giving you some great advice already.

Cisco ASA (with Firepower): Cisco ASA 5500-X Series with FirePOWER Services - Cisco

Cisco Meraki: Enterprise Firewall | Network Security | Cisco Meraki

Best of luck, OP!

@Cisco @Cisco_Meraki_1

4 Spice ups
15

Dell SonicWall is amazing!! Nuf said!!

2 Spice ups
16

depending on your budget, my order preference would be:

Palo Alto, then cisco ASA.

lower budget, i would suggest SonicWall NSA series or Sophis SG series.

5 Spice ups
17

I’ve used Cisco ASA’s, Palo Alto, Juniper, Sonicwall, Watchguard, and Fortigates. My favorite by far are the Fortigates and the Junipers. If you are looking for a UTM product, I prefer Watchguard. I have heard good things about Meraki and Sophos though.

5 Spice ups
18

We’ve been using pfsense for about a year now. Switched over from a Cisco 5505 and so far loving it.

8 Spice ups
19

I have used mostly Sonicwalls…but starting to look at other solutions as well…

1 Spice up
20

Do you need UTM features or no?

3 Spice ups