Most Helpful Review
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
From a protection perspective, it provides a network perimeter security function for our company.
We use it as a firewall at our head office and branches.
It integrates well with Fortinet and Palo Alto.
It uses many applications, like antivirus blocking and web filtering.
The high availability of the application is good.
It protects the data behind our switches.
It helps us perform our daily jobs.
We mostly use the Layer 4 firewall functions: Access rules, NAT, and site-to-site IPsec VPN.
I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site.
I could still keep the data rates really high, up near the two gigahertz data speeds, without compromise on the security perimeters being acted simultaneously.
We have used technical support for WatchGuard many times and overall, we are satisfied with it. They are always listening and there is a good reaction time to our findings. When there are issues, they really try to resolve them.
Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular.
Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process.
They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time.
It is stable and does not require you to reboot all the time.
It configures in all-in-one place.
This solution needs to update for "Next Generation" needs.
It did not improve our safety because the IDS does not detect some attacks, but our anti-virus software did.
We tried configuring the IDS for more than four months, but it did not work properly.
The CLI is verbose. You have to say a lot to do a little. I don't like that part of it. Cisco's command syntax seems to be a good bit more concise. When you're trying to get something done, you don't want to have to type a bunch.
Juniper needs to focus more on their perimeter firewalls.
The GUI needs to be easier to handle.
I would like to see endpoint control and endpoint testing security.
I would like them to add a dashboard because it's difficult to operate.
The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic.
Setup of this solution is complex, it's not plug and play.
Sometimes we have had issues with stability of the product.
WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure.
The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out.
Cloud-based central administration of all devices from one point would be nice
Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer).
The VPN errors are not helpful when troubleshooting.
Pricing and Cost Advice
It has a low price.
It is not that expensive.
Pricing is good. Most of the costs are in the UTM (IDS/IPS, virus scanning, etc) subscription.
Palo Alto was nice, but much more expensive.
We were able to lower our overall operating costs over a three year period by 25%, mostly recovered from maintenance/support costs.
Small enterprises or telco have variant licenses, and this licensing should be improved.
I would say about $20,000 for a SRX650 with IDP licence.
Pricing is very good, not expensive.
The licensing and renewal is very expensive.
Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative.
Very competitive pricing regarding throughput compared to other alternatives.
It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use.
Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network.
out of 48 in Firewalls
out of 48 in Firewalls
Compared 29% of the time.
Compared 21% of the time.
Compared 8% of the time.
Compared 27% of the time.
Compared 14% of the time.
Compared 13% of the time.
Also Known As
|High-performance security with advanced, integrated threat intelligence, delivered on the industry's most scalable and resilient platform. SRX Series gateways set new benchmarks with 100GbE interfaces and feature Express Path technology, which enables up to 1 Tbps performance for the data center.||Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection Ð but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.|
Learn more about Juniper SRX
Learn more about WatchGuard XTM
|7-Eleven, AARNet Pty Ltd, Allegro Networks, alltours GmbH, Apollo Hotel Papendrecht, Armstrong Atlantic State University, Atlantech Online, Availity, Bajaj Capital, Baloise Insurance, BancABC, BAS Group, Black Lotus, Blue Box, Borealis, Carilion Clinic, Catholic Health System, CATV, Champlain College, Chinas Ministry of Railways, China University of Mining and Technology (CUMT), Cloud Dynamics, CloudSeeds, Cloudwatt, CODONiS, Colt Technology Services, Cork Internet Exchange, CSS Versicherung AG, CyrusOne, Danish Crown, Deloitte Belgium, Department of Energy, Divona Telecom, DQE Communications, DreamHost, European Government Agency, Expedient, Financial Market Information Services Provider, Fluidata, Fonality, Fox Sports, Global Financial Institution, Global Investment Bank, Global Investment Company, Energy Sciences Network (ESnet), Goethe University, HEAnet, High Performance Networks Inc., Hillenbrand||AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense|
Comms Service Provider40%
Financial Services Firm20%
Comms Service Provider38%
Venture Capital & Private Equity Firm8%
Financial Services Firm36%
Import And Exporter7%