Untangle NG Firewall vs. WatchGuard XTM - Discontinued Product

Untangle is very strong in the "traditional" sense of security. That means an edge appliance that either works with an existing router or is the router itself (recommended). This approach has also been adapted well to cloud environments in order to protect virtual servers and VDI workstations. As mentioned earlier, many schools are using cloud-based filtering for their 1:1 solutions for their students. This is an area where Untangle is unable to serve. Some have used an instance of Untangle in the cloud with VPN to serve their remote needs, but it is not the same as solutions that are designed for cloud-based filtering of devices without VPN.

Incentivized

WatchGuard XTM comes in different models, so you can choose the model best suited for your company size. I think it works well in small as well as very large networks. I have not used this feature, but you can create a "FireCluster" to connect member devices of the same model if you need to put multiple WatchGuard XTMs in your environment. Coming from command line, it took a little adjusting to learn which screen to use to set up the different rules. Once you understand how to set up policies, it is simple to create more. New firewall administrators would appreciate the ease of creating policies, and expert administrators should find everything they need plus extra features.

Incentivized

• Web Filtering is strong, and can also do application fingerprinting to allow Facebook, but not Facebook games. Secondly, a separate partition called a "rack" can be set up to give one subnet or group of users different web filtering policies than another. For example, teachers would get more freedom to browse the web than students at a school.
• Built-in SD-WAN connectivity as part of your license. IPSEC tunnel creation is also amazingly easy.
• Will install on any x86 hardware created in the last 5-10 years. Ram and processor requirements per user are very low.
• Reporting is phenomenal, however you can get death by details very easily.

Incentivized

• Proxy filter.
• Link redundancy.
• Security.

• The full suite can be expensive for business but will be powerful enough.
• The full suite for home or small office isn't that bad of a price but may be out of reach for most home users but remember the basics are FREE so anyone can get started with it.
• I would like to see it promoted for mid to large businesses as I think it can handle it.

Incentivized

• Support can be hard to work with. While they are typically knowledgeable, there can be a language barrier. Also, most troubleshooting seems intrusive which is a problem in a production environment.
• The throughput of the cheaper models leaves something to be desired.
• Have had some issues running VOIP behind these, but have not been able to narrow down the issues to the phone provider or WatchGuard yet.

Incentivized

Service renewal is in Feb 2021. We will be renewing!

Generally works well but seeing more and more bugs with the OpenVPN app.

Incentivized

The phone support reps are highly competent and native-English speakers. big plus vs some other vendors with difficult to understand or less knowledgable support engineers.

Incentivized

Untangle NG Firewall has a partnership with third parties to provide an amazing suite of applications. You pay for those. With free software, you have to wait for it to be updated. With Unifi, the hardware was too underpowered to do anything meaningful. I don't mind the monthly fees because these companies update quickly; they have a reputation to maintain.

Incentivized

Again, WatchGuard is priced much lower than other vendors in its space. It may not have some of the bigger features such as Layer 7 awareness. It's more simple to manage and provides IT staff the time to work on other tasks versus time spent to create complex rule sets.

Incentivized

• It's allowed us to be PCI compliant which we need to do business.
• It's allowed us to not only be PCI compliant but follow best practice to be actually as secure as we can be.
• It's really presented us with a lot of flexibility in terms of how we connect to other services.
• There is some maintenance, but it's very minimal.

Incentivized

• Easy to set up and connect firewalls
• Easy to set up branch tunnels
• Less time spent training