Cisco Firepower 4100 Series vs. SonicWall TZ

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Incentivized

Based on my experience, this is a solid platform for a small to mid sized company, especially when there is someone who has IT experience, or can get outsourced IT help. I would not recommend for someone who is a technology novice. Also, this is a competent device for someone who is looking to add VPN services for remote workers.

Incentivized

• Packet filtering
• Great vpn client
• Integrates correctly with other vendors

Incentivized

• If you have multiple sites and you want the connect the sites through secure medium this is best firewall for you.
• There are very advanced features helps you to connect the device easily and securely.
• Easy to connect the sites through advanced routing protocols.

Incentivized

• Too much time to deploy changes
• When there are a lot of entries in the ldap mapping the device runs slow
• You can not make config changes via CLI, only via GUI

Incentivized

• There are Service Bundles in SonicWall TZ that are Unlicensed and do not know why they have not be Activated - would need help to further understand benefits
• Do not know why Standard Support is Unlicensed
• WiFi range of TZ270W is very limited - need to add Access Points or Extended to obtain adequate coverage

Incentivized

It not easy to understand the different features it offers. Sometimes you need to spend a couple of minutes to implement a change or even open a ticket with cisco tac to figure it out. Once support is on the phone with you they know how to resolve problems. But it's not an intuitive tool

Incentivized

Overall the new interface is very logical and easy to navigate. We did struggle at first coming from the older interface and finding our way around the new. But our new users found it very simple to find what they were looking for. One negative we do all struggle with is packet cpature not always being clear how its set/what is being monitored. this could do with more information on teh intial page instead of having to look for it

Incentivized

Once you get to a competent technician the support experience is better. But I have found that the lower tiers of support are very slow to respond (like 1 email per day) and you typically have to re-explain yourself a couple times before they get it. I have not used Phone support, and that may be a better experience.

Incentivized

As I mentioned before, the Fortigates have better failover. I think the Cisco interface is easier to use that that of the FortiGate. My only criticism would be that with multiple CLIs, it can get a bit confusing when you are trying to configure something or troubleshoot from the CLI.

SonicWall and WatchGuard are both fine appliances, but I am accustomed to the Barracuda NG. The Barracuda Control Center is so powerful and useful that it beats out the other two. SonicWall does a great job of dividing up firewall rules and NAT policies, but this is a preference among engineers.

• Very stable and does not cause major interruption.
• Supports most of the business requirements.
• Enhance security, risk and compliance.

• We have three SonicWall TZ devices and they are very helpful in a VPN set up.
• The subscription costs for the different features has a great return on investment. It is very well worth the money.
• The antivirus component has been very effective on the computers and servers the SonicWall TZ device protects.

Incentivized