Cisco Firepower 4100 Series vs. SonicWall TZ

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Incentivized

Based on my experience, this is a solid platform for a small to mid sized company, especially when there is someone who has IT experience, or can get outsourced IT help. I would not recommend for someone who is a technology novice. Also, this is a competent device for someone who is looking to add VPN services for remote workers.

Incentivized

• VPN Site to Site
• High Availability / Failover
• Ldap mapping to vpn connections

Incentivized

• If you have multiple sites and you want the connect the sites through secure medium this is best firewall for you.
• There are very advanced features helps you to connect the device easily and securely.
• Easy to connect the sites through advanced routing protocols.

Incentivized

• The failover process is clunky. When out Fortigate firewalls failed over, we lost 1 ping. When our Firepowers failover, whether it is on purpose or not, we experience a 2.5 minute complete outage.
• Cisco could stand to improve their support documentation. I have found it difficult to find good directions for configuring these, especially when it comes to NAT and IPSEC tunnels.

• management is confusing has many items that could be improved to facilitate the work to the network administrator
• in the diagnostic tool I would improve the response times, that is, if a ping test is required, it should be quick, since in cases of failures it is sought to minimize the impact as much as possible.
• each function has a different license item, I would place a single license package for all team functions

In general, the Cisco Firepower 4100 Series works well, great performance, support a high volume of traffic, configuration, users, the device is powerful and once you have something configured you can be sure that it will rarely fail but for day to day troubleshooting or modifications needed can be a little complicated due to you have to deploy every change you make in the device and is not as fast as other devices, in general a deploy takes 5 minutes.

Incentivized

Very easy to use and setup. The VPN features just work without having to fuss with them. The ability to use IPSEC or SSL VPN types is nice.

Incentivized

I have used the SonicWall TZ 350 for years and I can say that it is an excellent and complete firewall. It is easy to configure and administer because it has a friendly interface. It is safe, it offers several types of security features, VPN, and also protection against malware. Support and warranty also recommended. It's fast and the problem was solved in less than 1 day.

Incentivized

Cisco Firepower 4100 Series deployment is straightforward and easy to implement. It is also can support high availability and able to achieve redundancy. Besides, firmware upgrade is quite simple and the process does not take much effort as the upgrade will be automatically done by itself. Cisco Firepower 4100 Series is also very cost effective compared with other similar ranges of firewalls.

SonicWall and WatchGuard are both fine appliances, but I am accustomed to the Barracuda NG. The Barracuda Control Center is so powerful and useful that it beats out the other two. SonicWall does a great job of dividing up firewall rules and NAT policies, but this is a preference among engineers.

• Positive impact would be our increased security network wide.
• Another positive would be the increased processing power, saving us time and [from] needing more equipment.
• A negative impact would be the increased need for having to learn a new interface.

Incentivized

• VPN access allowed employees to be more flexible and being able to get internal resources from anywhere.
• Lower licensing price compared to competitors saved some money.
• Protecting from unnecessary connections increased performance and uptime.
• One of the firmware versions caused CPU performance degradation that slowed down the Internet speed which caused issues in the call center.

Incentivized