Cisco 1000 Series Aggregation Services Routers (ASR 1000) vs. Untangle NG Firewall

- It is well suited for companies that have a big WAN environment, this devices can fit in there easily and have multiple provider circuits. - Well suited for private cloud environments where multi tenancy is required, - Device can be used as IPN/ISN device as it supports jumbo frames for an ACI multi-site/remote leaf deployment. - Device is well suited for branches that have their own DIA and MPLS circuits.

Untangle is very strong in the "traditional" sense of security. That means an edge appliance that either works with an existing router or is the router itself (recommended). This approach has also been adapted well to cloud environments in order to protect virtual servers and VDI workstations. As mentioned earlier, many schools are using cloud-based filtering for their 1:1 solutions for their students. This is an area where Untangle is unable to serve. Some have used an instance of Untangle in the cloud with VPN to serve their remote needs, but it is not the same as solutions that are designed for cloud-based filtering of devices without VPN.

Incentivized

• These routers are very good at performing 24x7! This is key to running an organization where employees are working 24x7.
• The ZBFW feature works especially well to help lockdown and protect your network.
• Having the ability to perform in-service upgrades is a key feature in keeping your network up at all times.

Incentivized

• Web Filtering is strong, and can also do application fingerprinting to allow Facebook, but not Facebook games. Secondly, a separate partition called a "rack" can be set up to give one subnet or group of users different web filtering policies than another. For example, teachers would get more freedom to browse the web than students at a school.
• Built-in SD-WAN connectivity as part of your license. IPSEC tunnel creation is also amazingly easy.
• Will install on any x86 hardware created in the last 5-10 years. Ram and processor requirements per user are very low.
• Reporting is phenomenal, however you can get death by details very easily.

Incentivized

• The ASR 1000 series routers can, as with most devices, improve with additional memory capacity and upgraded chip sets for faster processing.
• There seems to be limitations on the number of routing sessions the smaller ASR devices can handle, which can be overcome with proper planning and placement within the network.

Incentivized

• The full suite can be expensive for business but will be powerful enough.
• The full suite for home or small office isn't that bad of a price but may be out of reach for most home users but remember the basics are FREE so anyone can get started with it.
• I would like to see it promoted for mid to large businesses as I think it can handle it.

Incentivized

The device without a doubts performs at the level required and expected, we can renew it and use it as we have been using it for years. The device can be used as DCI, IPN/ISN, or even private cloud for customer circuit handoff, it also supports IPSec properly. The device is well suited in multiple segments of the network.

Service renewal is in Feb 2021. We will be renewing!

All our modular contingency service exercises use this equipment, it allows us to perform this type of exercises very easily, in a controlled and effective way. It is used at least once a month for these types of events. It also allows configuration replication in computers that are under the same model.

Incentivized

We have received training on the equipment, which has made us add more networks on our own, we provide first level support, we validate the publication of the equipment and we can satisfy the needs of our internal clients in terms of the prompt recovery of the affected services

Incentivized

I haven't used them much, but they did answer my question quickly.

Incentivized

Implementation was as per design and all best practice configuration was followed.

Incentivized

Before standardizing on the Cisco ASR 1000 we had explored the idea of using Juniper routers. Ultimately we felt the Cisco ASR 1000 was a better fit at the time. We have been very happy with this decision, but it might not be the right decision for everyone. It fit our environment and our needs very well, Juniper is also a very good choice.

NG Firewall was much more friendly in terms of layout and ease of use, the apps section is familiar to anyone and the config while in a sort of odd order is very clearly laid out. I also appreciate Untangle's endless educational videos and the support can't be beat. Overall it was more of a complete package

Incentivized

• It is a healthy return on investment with planned packed size data. Average unicast latency is low and consistent with small and large packets (barring mid-sized).
• Cisco devices last longer and also have a decent trade-in policy to recover some value when equipment is replaced.
• Higher concurrent IPSec tunnels are offered, we tested for 1500+, fielding both encrypted and a mix of encrypted and cleartext traffic.

Incentivized

• The positive is the savings in time the IT department has recouped by not having to continuously clean and maintain end point computers. Not to mention helping end user use their time more wisely by not wasting time on non-work related web activities.
• The only negative is complaints from end users about the restrictions.

Incentivized