Nmap is a free, open source network discovery, mapper, and security auditing software. Its core features include port scanning identifying unknown devices, testing for security vulnerabilities, and identifying network issues.
$49,980
one-time fee
WatchGuard Network Security
Score 9.2 out of 10
N/A
WatchGuard Network Security is a network security and firewall software. WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services designed for SMB’s.
N/A
Pricing
Nmap
WatchGuard Network Security
Editions & Modules
Nmap OEM Small/Startup Company Redistribution License - Quarterly Term Maintenance Fee
$7,980
Every Three Months per license
Nmap OEM Mid-Sized Company Redistribution License - Quarterly Term Maintenance Fee
$11,980
Every Three Months per license
Nmap OEM Enterprise Redistribution License - Quarterly Term Maintenance Fee
$13,980
Every Three Months per license
Nmap OEM Small/Startup Company Redistribution License - Annual Maintenance Fee
$14,980
per year per license
Nmap OEM Mid-Sized Company Redistribution License - Annual Maintenance Fee
All perpetual licenses include a six-month trial period during which you can cancel for any reason and receive a full refund of all money paid (including maintenance). The term license is only a 3-month commitment and cal also be terminated with full refund during the first 30 days of the initial quarter.
If you're a sysadmin, or anyone who's had to deploy network services, you've almost certainly had to use Nmap at some point or other. Need to see what devices are on your LAN? Nmap can tell you that. Want to check which ports your web server has open to the internet? Nmap is your friend.
Nmap is a powerful command-line tool and has many options that require some reading of documentation to get the best out of (although generally straightforward). If the thought of working at the command-line scares you (presumably not if you're reading this review), then you may want a much simpler tool, or at least check out Zenmap GUI.
WatchGuard Network Security products are suitable for most situations. From securing small, low-budget VSEs to large enterprises and SMEs.It's just a pity that the firewalls in the M range (M290/M390) don't come with integrated SFP+ modules as standard. Such integration would enable inter-vlan 10Gbps traffic to be managed without the need for additional modules, and at no extra cost.
NMap provides a very fast and a very thorough network "sweep" that allows you to quickly map out exactly what's on your network.
NMap is highly configurable. The "canned" choices are very good in most instances, but using various switches and options, you can create a very specific scan and get exactly the results you're looking for.
NMap is easy to use. Even a new administrator will be able to use the graphical version (Zenmap) with efficiency right away.
Intrusion Prevention: provides an advanced Intrusion Prevention System (IPS) that uses real-time threat intelligence to detect and block known and unknown threats. The IPS inspects all network traffic, including encrypted traffic, to identify and block any malicious activity before it can enter the network.
Application Control: offers granular application control that enabled us to control which applications can access the network and how they are used.
Web Content Filtering: provides web content filtering capabilities that allow to control and monitor access to websites based on their content. This helps to prevent employees from accessing inappropriate or malicious websites, which can compromise the security of the network.
exporting, There's a serious lack of ability to export the information in a readable format to present to VPs and such. I always find myself doing a lot of data massaging to get it in a pretty format
some scans can trigger sensitive IDS/IPS
SYN scans can be particularly aggressive and cause problems on remote systems.
For those who would like top level security and deployment of their security and protection, I would recommend easier quicker to use interfaces for users at smaller companies that do not have the experience with the provided services, so they can better utilize and deploy the software/equipment.
Have easy to understand, easy to access tutorials from the web interface to help new users and non IT Professionals to use the services provided.
Streamline the interface more to allow for easier understanding for all users, appealing to others so they feel less intimidated by the interaction with your services goes far, especially with smaller companies who have owners who want to know, have basic understanding of managing it, especially if they do not have an IT Professional or IT Consultant readily on staff. Not every company even knows they need this kind of protection, and trying to explain it to them, with the very technical and unique lexicon of words Information Technology and Security provides does at times prove to be difficult.
I'm giving this note to WatchGuard Network Security due to its ease of daily support (after acquiring necessary knowledge in the solution), which allows agility in configuration changes, its integration of several reliable security features (such as SSL VPN, VPN Virtual Interfaces between companies, and others) and functional and stability in operation, with no downtime in the equipment due to problems or malfunctions
WatchGuard Network Security firewalls have a very convenient way of managing them. Their live logging makes it very easy to quickly monitor traffic and see what's going on and what changes might be needed to be done to get something to work. In most cases, it was the WatchGuard Network Security logging that helped us find an issue when getting the device to work with a competitor's device (i.e. setting up VPN) because the other side lacked easy-to-understand yet detailed debug information.
There is a very large support community and a robust selection of add-ons and scripts. Once you get the use down this is one of the most powerful tools and you can find anything you are looking for as far as examples on the web. While not having official support its not lacking by any means.
For something that is considered business critical they should be far more responsive. Security isn't something to take lightly in today's work environment and so long as its working you are happy. But when it doesn't and you need that professional assistance, they weren't always there and I ultimately resolved my issues with the help of Google.
We participate to a in person training and the three days of learning was really useful and complete to gain skill to solve the major part of the problem we encounter during our life. And more the in person training give us the opportunity to create a network with other WatchGuard partner.
I had my key information for setting up the firewall, and they assisted me in finding the settings and appropriate places to enter data. They also helped troubleshoot when I didn't understand some of their feature concepts, and we got it running.
Alternatives to Nmap (other IP scanners) are often much more limited in what they can do; They often only allow you to scan a specific subset of ports or a limited number of IP addresses in one command. Nmap is unrestricted in that regard. What makes Nmap stand out above the rest, is the complete network analysis package you get with it. It allows IP scanner, network deep-dives, hardware analysis, vulnerability analysis, encryption detailing, and so much more, in one free application
We use SonicWall TZ boxes in our small branch offices for their simplicity and low cost and Watchguard in our larger head office due to its scalability, we find both products work well together when configuring WAN's using branch office VPN's.