We performed a comparison between Cisco Secure Firewall and Sonicwall TZ based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Of the two solutions, Sonicwall TZ seems to be the more desirable product because of its easy deployment, great set of features, and affordable price.
"Some of the key features of the solution is that it has good reporting, you can receive many details from the connection, for example, clients and website information."
"It increases security posture and is helpful for firewall reporting, intrusion protection, web filtering, and SD-WAN implementation."
"The simplicity of the configuration and the stability of the product are most valuable. The VPN concentrator is very useful."
"I have found Fortinet FortiGate to be scalable."
"The inspection and web security features are most valuable."
"It's a user-friendly firewall. Most of the tasks are very simple. It's simple to configure and troubleshoot this firewall."
"The stability and scalability of this solution are satisfactory. Its SD-WAN, VPN, and URL filtering features are very useful."
"There are great templates, so you don't have to customize them if you don't want to. You do have the option to custom create some folders and some reports, however, with what is there, you don't really need to go through extra effort, as they already give you a lot of predefined views of reports and so forth."
"FMC is very good in terms of giving a lot of visibility into what the firewall is seeing, what it's stopping, and what it's letting through. It lets the administrator have a little bit of knowledge of what's coming in or out of the device. It's excellent."
"If we look at the Cisco ASA without Firepower, then one of the most valuable features is the URL filtering."
"The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable."
"I like the way Firepower presents the data. It gives you two classifications for the evidence, something based on the priority of the evidence and another classification based on the impact of the evidence in your environment. This makes it very easy to spot the evidence that is most impactful to my environment. Instead of having to go through all the evidence based on that priority, I can focus on the evidence that has the most impact on my environment."
"One of the best features is the ease of use. It's also easy to teach new engineers to use the ASA CLI."
"Protecting our landscape in general and being able to see logging when things aren't going as set out in policies are valuable features. Our security department is keen on seeing the logging."
"For our very specific use case, for remote access for VPN, ASAs are very good."
"The primary benefits of using Cisco Secure solutions are time-saving, a robust API, and convenience for the security team."
"The product is easy to deploy."
"The stability is very nice."
"From our point of view, the most valuable feature was the ease of deployment."
"The most valuable features have been content filtering, and the interface is easy to navigate and to use."
"The most valuable feature is the protection available, and then ease of use and flexibility."
"We like the unified threat management for defense-in-depth. We can terminate our site-to-site and remote access VPNs with it."
"It's a very cost-effective solution."
"The performance has been very good. Overall, the solution is quite stable."
"Its filtering is sometimes too precise or strict. We sometimes have to bypass and authorize some of the sites, but they get blocked. We know that they are trusted sites, but they are blocked, and we don't know why."
"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"The product does need better support in the cloud environment. It's not exactly cloud-native right now."
"Compared to some other products, the DLP is not at par for the moment."
"A lack of integration between our data centers."
"The firmware needs improvement because there are bugs when a new release comes through. Sometimes, the configuration changes, and it's a bit harder to see where the fail is. The first time that you have the firmware, it tends to have some issues, and it's better to wait a bit to update the equipment."
"Performance and technical support are the main issues with this solution."
"The cloud management and automation capability could be improved."
"There is room for improvement in the stability or software quality of the product. There were a few things in the past where we had a little bit of a problem with the product, so there is room for improvement."
"Cisco missed the mark with all the configuration steps. They are a pain and, when doing them, it looks as if we're using a very old technology — yet the technology itself is not old, it's very good. But the front-end configuration is very tough."
"It should be easier for the IT management or the admin to configure products. For example, the firewall products are not very straightforward for many users. They should be easier to configure and should be more straightforward."
"They should improve their interface."
"Lacks a good graphical user interface."
"<p>If there is old hardware, or appliances, it does not necessarily work with the new Cisco generation firewalls."
"The user interface for the Firepower management console is a little bit different from traditional Cisco management tools. If you look at products we already use, like Cisco Prime or other products that are cloud-based, they have a more modern user interface for managing the products. For Firepower, the user interface is not very user-friendly. It's a little bit confusing sometimes."
"The licensing needs simplification."
"The solution should provide some additional ports."
"It could be made more user friendly."
"The log sections could be done more clearly."
"If the operation increases and the bandwidth consumption increases, it does not perform as per the expectations."
"Support for SonicWall TZ needs improvement, particularly the time it takes before you're able to speak to a support person, e.g. you have to wait for at least 30 minutes on the phone."
"I would like them to make the interface a little bit easier to use so you can find out where in the heck you're going instead of having to go to 15 different places to get something installed."
"It needs more robust self-help documentation along with examples and things to watch out for."
"We require centralized monitoring of the network features, which they have but they are not to the level that we require."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while SonicWall TZ is ranked 12th in Firewalls with 78 reviews. Cisco Secure Firewall is rated 8.2, while SonicWall TZ is rated 8.0. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of SonicWall TZ writes "Has efficient user access control feature and good technical support services ". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Azure Firewall, whereas SonicWall TZ is most compared with Sophos XG, Netgate pfSense, Meraki MX, SonicWall NSa and WatchGuard Firebox. See our Cisco Secure Firewall vs. SonicWall TZ report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.