Firewall Software
Top Rated Products
(1-3 of 3)
WatchGuard Network Security is a network security and firewall software. WatchGuard includes secure Wi-Fi, multi-factor authentication, and network intelligence products and services designed for SMB’s.
Cisco Meraki MX Firewalls is a combined UTM and Software-Defined WAN solution. Meraki is managed via the cloud, and provides core firewall services, including site-to-site VPN, plus network monitoring.
Cisco Secure Firewall (formerly Cisco Firepower NGFW) is a firewall product that integrates with other Cisco security offerings. It provides Advanced Malware protection, including sandboxing environments and DDoS mitigation. Cisco also offers a Next Generation Intrusion Prevention…
All Products
(51-75 of 83)
VNS3 is a security and deployment / release management from Cohesive Networks (formerly CohesiveFT) in Chicago.
For industrial settings where reliability, flexibility and secure systems are critical, Belden’s GarrettCom family of routers boast a simplified solution with performance and security in one product. Compliant with IEC 61850, the routers are presented as ideal for large substation…
Controllo is a Firewall-as-a-Service (FWaaS) offering, from WannaGo Cloud. Stop viruses, spyware, worms, Trojans, key loggers, and more before they enter a network, to provide comprehensive network protection.
Explore recently added products
The SecPoint Protector is a next-gen firewall and UTM (Unified Threat Management) appliance designed to protect the whole network.
Cloud Firewall from Menlo Security is designed to ensure fast, reliable and secure access to cloud applications. Menlo states they bring next-gen firewall controls and advanced security to all users in all locations for all ports and protocols.
Allied Telesis Unified Threat Management (UTM) Firewalls are integrated security platforms for modern businesses: firewall and threat protection combined with routing and switching. The AR3050S and AR4050S are presented as an ideal choice for high speed Enterprise gateway applications.…
A managed next-generation firewall solution from Nitel enables applications, users and content to meet the needs of businesses while protecting against a growing threat landscape, by helping to ensure every threat is stopped dead in its tracks long before it reaches the business…
Secucloud boasts a proven SASE platform that combines a global private backbone, a network security stack, and support for cloud resources and mobile devices. Now from Aryaka (acquired May, 2021), Secucloud offers solutions for small business, homes, but also enterprises,including…
Juniper Secure Edge provides full-stack Secure Services Edge (SSE) capabilities to protect web, SaaS, and on-premises applications and provide users with consistent and secure access. When combined with Juniper’s AI-Driven SD-WAN, Juniper Secure Edge provides a SASE solution that…
A10 Networks offers A10 Thunder CFW (for Convergent Firewall), a combined firewall and secure web gateway. For mobile operators, the consolidation of multiple security features ensures protection against 4G/LTE threats as well as emerging 5G security threats. For data centers, Thunder…
Advanced Policy Firewall (APF) is a free and open-source iptables(netfilter) based firewall system designed around the Internet 's deployed servers and the unique needs of custom deployed Linux installations. The configuration of APF is designed to be informative and present the…
SonicWall E10000 Series is the company's high end next generation firewall (NGFW).
The Stormshield Network Security is the company's line of SN series Next-Generation Firewalls (NGFW). The SN series is based on the NETASQ Firewalls acquired and merged into Stormshield after that company was formed from the merger of the original companies Netasq and Arkoon.
The Tofino Xenon Security Appliance (Tofino SA) is presented as ideal for control professionals because it is a Plug-n-Protect™ product, designed to be installed in a live network with no pre-configuration, no network changes, and no plant downtime. It designed to be a simple and…
An industrial security appliance offered as a component of organizations' IoT/OT security journey. It bundles the security of Cisco Secure firewalls with the visibility and control of industrial protocols and applications from automation vendors such as Omron, Rockwell, GE, Schneider,…
3Com firewalls were acquired by Hewlett-Packard and then sold to H3C. The product line is now obsolete and discontinued.
Hillstone T-Series Intelligent Next-Generation Firewalls are capable of detecting unknown malware and abnormal behavior. With a rich forensic analysis and preemptive mitigation capabilities.
Sangfor NGAF is a combined NGFW and Web Application Firewall. It provides a full core suite of firewall services scaled for enterprises.
Mako Networks provides secure networking technology for multi-site distributed enterprises. Mako features next-gen firewall, wi-fi, IDS/IPS, cloud management, PCI Compliant networking and built-in cellular for both cellular failover or cellular-as-primary broadband applications.…
Netskope Cloud Firewall delivers Firewall as a Service (FWaaS) for egress traffic from a SASE architecture. Users and offices connect to NewEdge, the company's security private cloud, for firewall protection. The Cloud Firewall helps organizations to improve their security posture,…
Firewall Software TrustMap
TrustMaps are two-dimensional charts that compare products based on trScore and research frequency by prospective buyers. Products must have 10 or more ratings to appear on this TrustMap.
Learn More About Firewall Software
What are Firewall Software?
Firewall software are filters that stand between a computer or computer network and the Internet. Each firewall can be programmed to keep specific traffic in or out. All messages passing through the firewall software are examined. Those messages that do not meet pre-defined security criteria are blocked.
For example, on the outbound side, firewall software can be configured to prevent employees from transmitting sensitive data outside the network. On the inbound side, firewalls can be configured to prevent access to certain kinds of websites, like social media sites.
Types of Firewalls
Firewalls use several methods to control traffic flowing in and out of a network:
- Packet filtering: This method analyzes small pieces of data against a set of filters. Those that meet the filter criteria are allowed to pass through, while others are discarded.
- Proxy service: In this method, computers make a connection to the proxy which then initiates a new network connection based on the content of the request. In this way, there is no direct connection or packet transfer on either side of the firewall. Network addresses are effectively hidden.
- Stateful inspection: Stateful inspection is the new standard firewall security method that monitors communications packets over a period of time. Outgoing packets that request specific types of incoming packets are tracked. Only incoming packets that are an appropriate response are allowed to pass. Firewalls using this method are often referred to as next-generation firewalls (NGFW).
There are also more specific firewall software beyond network-level firewalls. For instance, Web Application Firewalls sit between externally-facing applications and the web portal that end-users connect to the application through.
Firewall Software Features & Capabilities
Firewall software should have most or all of these features:
- Application visibility and control
- Identify and control evasive app threats
- Intrusion Prevention integration
- Physical and virtual environment support
- Integration with LDAP and Active Directory
- "Sandbox," or isolated, cloud-based threat emulation
Firewall vendors are beginning to bundle firewall offerings with other security or privacy features, although this is not a universal practice. The most common example is support for Virtual Private Networks (VPN), and load-management is often featured as well.
Firewall Comparison
To compare different Firewall software, you likely want to consider evaluating these aspects of the software:
- Managed Service Provider vs. In-House Focus: Are you looking for a firewall software to sell to and manage for your clients, or do you need something for your own business? Software tailored to the former context will emphasize centralized management and customizability, while the latter will be more accessible for line of business users without IT security backgrounds.
- Physical vs. Cloud Deployments: The standard deployment method for firewalls is via hardware appliance deployed on-premise. Alternative deployments on virtual machines, or hosted in the cloud on 3rd party infrastructure, have become frequent options among leading vendors. Cloud deployments frequently operate on a subscription pricing model, while physical appliances are more likely to be a one-time purchase, with additional costs for software updates varying by product.
- Multi-Location vs. Single-Location: Providing a firewall across multiple locations will require specific features. The most relevant feature differences will be VPN support (for securely connecting to remote offices), central management support, and native SD-WAN capabilities.
- Support: Reviewers frequently mention customer support and service, both positively and negatively depending on the software. Given a convergence of capabilities towards market parity, the extra support and services vendors provide can become a key differentiator between products.
Pricing Information
The cost of firewalls can vary from free (for personal use) to significant sums of money for enterprise firewalls. Firewalls are often on-premise appliances, but can also be purchased as software which must be installed on a server, or as a cloud service. The range of pricing models is broad making it difficult to compare across vendors. However, an enterprise firewall may cost upwards of $30,000, depending on capability and type.
Cisco ASA 5500-X Starting Price: $400.00 / Maximum Price: $20,000.00
SonicWall TZ Starting Price: $300.00 / Maximum Price: $2,300.00
Fortinet Fortigate Starting Price: $250.00 / Maximum Price: $300,000.00
pfSense Starting Price: $179.00 / Maximum Price: $2,649.00
Cisco Firepower Starting Price: $500.00 / Maximum Price: $200,000.00
Cisco Meraki MX Starting Price:$595.00 / Maximum Price: $19,995.00
More Resources
Related Categories
Frequently Asked Questions
What is a firewall?
What are the main types of firewall?
There are four major types.
- Packet Filtering: Small pieces of data are analyzed against a set of filters and are either allowed to pass through or are discarded.
- Proxy Firewall: A proxy firewall serves as the gateway from one network to another. Computers make a connection to the proxy which then initiates a new network connection based on the content of the request.
- Stateful Inspection: Stateful inspection monitors the state of active connections and uses this information to determine which network packets to allow through. Decisions on what to allow through are based on a combination of defined rules and context.
- Next-Generation Firewall (NGFW): Next-generation firewalls go beyond packet filtering and stateful inspection. They have additional capabilities in order to help combat more modern threats like malware.