Alert Logic Web Security Manager vs WatchGuard XTM - Discontinued Product

Likelihood to Recommend

Great at web-based attack protection.
Easy to add sites within a few minutes once familiar with the interface and process.

IT Security Infrastructure Coordinator

Northside HospitalHospital & Health Care, 10,001+ employees

WatchGuard XTM comes in different models, so you can choose the model best suited for your company size. I think it works well in small as well as very large networks. I have not used this feature, but you can create a "FireCluster" to connect member devices of the same model if you need to put multiple WatchGuard XTMs in your environment. Coming from command line, it took a little adjusting to learn which screen to use to set up the different rules. Once you understand how to set up policies, it is simple to create more. New firewall administrators would appreciate the ease of creating policies, and expert administrators should find everything they need plus extra features.

Read full review

Verified User

Analyst in Information Technology

Automotive Company, 501-1000 employees

View all 3 answers on this topic

Pros

Web-based attack protection
Site monitoring
Notification and alerting from the vendor

Read full review

Brian Hoadley

IT Security Infrastructure Coordinator

Northside HospitalHospital & Health Care, 10,001+ employees

View all 1 answers on this topic

GUI configuration.
Security features for the price point.
Consolidates management of VPN tunnels.

Read full review

Hyler C Cooper

Senior System Administrator

BrainSurfInformation Technology and Services, 11-50 employees

View all 3 answers on this topic

Cons

Initial professional services engagement for setup/implementation
Vendor change management without notification

Read full review

Brian Hoadley

IT Security Infrastructure Coordinator

Northside HospitalHospital & Health Care, 10,001+ employees

View all 1 answers on this topic

The UTM package has caused me some issues in the past, specifically IPS and AV at the edge. In my experience when AV at the edge is unable to sync with its third party database the rule fails and will block all traffic by default.
Some of the default global settings can cause issues. One common one is SYN packet not returning ACK. Turning off this setting will allow packets that don't complete the 3-way handshake to pass. Not the most ideal solution.
An area that I think could be improved is in application awareness. The only firewall that can do true layer 7 policying is PaloAlto firewalls, that I'm aware of. I think firewalls need to start moving to that and this is an area WatchGuard could add and improve.

Read full review

Verified User

Administrator in Information Technology

Electrical/Electronic Manufacturing Company, 201-500 employees

View all 3 answers on this topic