IT Central Station is now PeerSpot: Here's why

Cisco ASA Firewall vs SonicWall TZ comparison

Cancel
You must select at least 2 products to compare!
Featured Review
Buyer's Guide
Cisco ASA Firewall vs. SonicWall TZ
May 2022
Find out what your peers are saying about Cisco ASA Firewall vs. SonicWall TZ and other solutions. Updated: May 2022.
608,010 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"When it comes to the integration among Cisco tools, we find it easy. It's a very practical integration with other components as well.""Provides good integrations and reporting.""I like the firewall features, Snort, and the Intrusion Prevention System (IPS).""We have not had to deal with stability issues.""It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS.""I have experience with URL filtering, and it is very good for URL filtering. You can filter URLs based on the categories, and it does a good job. It can also do deep packet inspection.""The most valuable feature is stability.""We get the Security Intelligence Feeds refreshed every hour from Talos, which from my understanding is that they're the largest intelligence Security Intelligence Group outside of the government."

More Cisco Firepower NGFW Firewall Pros →

"The product is quite robust and durable.""It has definitely improved our organization. It gives us remote connectivity, helps workers connect remotely, and also gives us good connectivity to our other branches.""One of the best features is the ease of use. It's also easy to teach new engineers to use the ASA CLI.""Cisco offers a great educational series to train users on their devices.""The interface is user-friendly.""The most valuable features for my client are the ASDM and monitoring.""It is extremely stable I would say — at least after you deploy it.""Even in very big environments, Cisco comes in handy with configuration and offers reliability when it comes to managing multiple items on one platform."

More Cisco ASA Firewall Pros →

"I like the firewall product, the security server, and the content filter.""The performance has been very good. Overall, the solution is quite stable.""It lets me monitor in live time if someone is 'hogging' bandwidth.""It's a very cost-effective solution.""Technical support is good.""It does exactly what it says on the tin. It is good for protecting the business from being compromised. Its port protection is very good.""Good site categorization and application controls.""User-friendly firewall solution which scales well, is stable, and has high availability."

More SonicWall TZ Pros →

Cons
"The ability to better integrate with other tools would be an improvement.""The only drawback of the user interface is when it comes to policies. When you open it and click on the policies, you have to move manually left and right if you want to see the whole field within the cell. Checkpoint has a very detailed user interface.""FirePOWER does a good job when it comes to providing us with visibility into threats, but I would like to see a more proactive stance to it.""We cannot have virtual domains, which we can create with FortiGate. This is something they should add in the future. Additionally, there is a connection limit and the FMC could improve.""The visibility for VPN is one big part. The policy administration could be improved in terms of customizations and flexibility for changing it to our needs.""Report generation is an area that should be improved.""On the VPN side, Firepower could be better. It needs more monitoring on VPNs. Right now, it's not that good. You can set up a VPN in Firepower, but you can't monitor it.""When you make any changes, irrespective of whether they are big or small, Firepower takes too much time. It is very time-consuming. Even for small changes, you have to wait for 60 seconds or maybe more, which is not good. Similarly, when you have many IPS rules and policies, it slows down, and there is an impact on its performance."

More Cisco Firepower NGFW Firewall Cons →

"I have used Fortinet, Palo Alto, and Check Point previously and I prefer the process of everything working together.""I have worked with the new FTD models and they have more features than the ASA line.""It doesn't have Layer 7 security.""Cisco ASA Firewall could improve by adding more advanced features such as web filtering, which is available in the next-generation firewalls. However, the Cisco ASA Firewall I am using could be old and these features have been updated.""The graphical interface could be improved. From what I have seen, Fortinet, for example, has a nicer GUI.""It needs to provide the next-generation firewall features that other vendors provide, like data analytics, telemetry, and deep packet inspection.""The stability is not the best.""I would like it if there was a centralized way to manage policies, then sticking with the network functions on the actual devices. That is probably the thing that frustrates me the most. I want a way that you can manage multiple policies at several different locations, all at one site. You then don't have to worry about the connectivity piece, in case you are troubleshooting because connectivity is down."

More Cisco ASA Firewall Cons →

"The interface and technical support are probably the two most important things that I would like SonicWall to improve.""The user support could be improved because you have to go outside to get that kind of support.""In an upcoming release, SonicWall could improve by adding cloud management for all devices for free or at a nominal cost. Currently, they have a cloud management platform but is not free. We have the MySonicWall portal for purchasing from them for software updates and renewals.""Its reporting can be improved. Currently, we cannot directly get the user names. It only shows the IP, which makes it a bit confusing because we need to use the IP to find the user. If we could directly get the name of the user, it would be better.""In general, the company needs to think contingently and integrate more security options.""There is a point I don't like about SonicWall in the past and now. Most of the destinations we look at when we're detecting some user using too much bandwidth or something like that, SonicWall just gave us destination IP address, instead of the full qualified domain name. I think that's the most important part that is still missing. I think that's the most important for us.""I would like to see a SonicWall integration with the DLP tool, this would be interesting. Data Loss Prevention integration.""It could be made more user friendly."

More SonicWall TZ Cons →

Pricing and Cost Advice
  • "Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed."
  • "This product requires licenses for advanced features including Snort, IPS, and malware detection."
  • "This product is expensive."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • "The price of Firepower is not bad compared to other products."
  • "The solution was chosen because of its price compared to other similar solutions."
  • "The price is comparable."
  • "It definitely competes with the other vendors in the market."
  • More Cisco Firepower NGFW Firewall Pricing and Cost Advice →

  • "Always consider what you might need to reduce your wasted time and invest it in other solutions."
  • "Cisco is considered to be an expensive solution."
  • "It's very competitive with other products."
  • "We pay about $200 yearly and we have two firewalls."
  • "I'd say it's probably well-priced."
  • "The product cost is a little high. It is a little bit on the high side, and it should be a little bit cost-friendly."
  • "We pay about €2,000 ($2,400 USD) per year for licensing."
  • "If we compare it with FortiGate and the co-existing ASA, FortiGate is better in price."
  • More Cisco ASA Firewall Pricing and Cost Advice →

  • "Its pricing is okay as compared to other solutions."
  • "The price is fair."
  • "The license that we purchased is good for three years."
  • "Its price is very high, which makes it difficult to convince the clients to buy this solution."
  • "The price is fair for the solution for the quality you receive."
  • "You need to purchase multiple licenses to manage multiple devices which is cost-prohibitive for the value you would receive."
  • "Customers are required to pay for a yearly subscription."
  • "It has a yearly subscription."
  • More SonicWall TZ Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    608,010 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer: The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
    Top Answer:It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer:One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet… more »
    Top Answer: Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports… more »
    Top Answer:When looking to change our ASA Firewall, we looked into Palo Alto’s WildFire. It works especially in preventing advanced… more »
    Top Answer:I’ll say it depends on your needs. Fortinet FortiGate and SonicWall TZ are both next-gen firewalls (NGFW) with similar… more »
    Top Answer:The general feature is the antivirus policy, followed by the ransomware protection, and these are the features I was… more »
    Top Answer:I find the licensing scheme of SonicWall TZ cost-effective for customers. SonicWall also has a secure upgrade promotion… more »
    Comparisons
    Also Known As
    Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
    Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv
    Dell SonicWALL TZ
    Learn More
    Cisco
    Video Not Available
    Overview

    Cisco Firepower Next-Generation Firewall (NGFW) is a firewall that provides capabilities beyond those of a standard firewall and delivers comprehensive, unified policy management of firewall functions, application control, threat prevention, and advanced malware protection from the network to the endpoint.

    Cisco NGFW Firewalls include advanced threat defense capabilities to meet diverse needs, from small offices to high-performance data centers and service providers, and are deployed in leading private and public clouds. Available in a wide range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Cisco NGFW firewalls are also available with clustering for increased performance, high availability configurations, and more.

    Key Features of Cisco NGFW Firewalls

    • Breach prevention and advanced security: Prevent attacks before they get inside. Cisco provides its firewalls with the latest intelligence to stop emerging threats and employs filtering to enforce policies on hundreds of millions of URLs. Cisco NGFW offers built-in sandboxing and advanced malware protection that continuously analyzes file behavior to quickly detect and eliminate threats.

    • Comprehensive network visibility: Constantly monitor your network so you can rapidly spot and stop bad behavior. Cisco NGFW provides a holistic view of all activity and provides a clear picture of threat activity across users, hosts, networks, and devices, as well as information on threats and website, application, and VM activities.

    • Flexible management and deployment options: Centrally deploy, customize, and manage all your appliances.

    • Fast detection: Detect threats in seconds and detect the presence of a successful breach within hours or minutes. Cisco NGFW allows you to deploy consistent policy that's easy to maintain, with automatic enforcement across all the different parts of your organization.

    • Automation and product integrations: Seamlessly integrate with Cisco tools and automatically share threat information, event data, policy, and contextual information with email, web, endpoint, and network security tools. Cisco NGFW automates security tasks like impact assessment, policy management and tuning, and user identification.

    Reviews from Real Users

    Cisco NGFW stands out among its competitors for a number of reasons. Two major ones are its extensive discovery abilities that enable you to constantly see what is happening on your network and take action when necessary, and the high level of protection it provides.

    Mike B., a director of IT security at a wellness & fitness company, writes, "It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective."

    Zhulien K., the lead network security engineer at TechnoCore LTD, notes, " The most valuable feature that Cisco Firepower NGFW provides for us is the Intrusion policy. Again, with that being said, I cannot shy away from giving kudos to all of the other features such as AVC (Application Visibility and Control), SSL Decryption, Identity policy, Correlation policy, REST API, and more. All of the features that are incorporated in the Cisco Firepower NGFW are awesome and easy to configure if you know what you are doing. Things almost always work, unless you hit a bug, which is fixed with a simple software update. "

    Cisco ASA Firewall is a security device that combines firewall, intrusion prevention, virtual private network (VPN), and antivirus capabilities. Its main purpose is to provide proactive threat defense to stop attacks before they spread through the network.

    Cisco ASA Firewall Features

    Cisco ASA Firewall has many valuable key features, including:

    • Intrusion prevention system (IPS): Cisco ASA Firewall’s IPS provides contextual awareness.
    • Advanced threat protection: Gain protection against zero day threats (based on using global threat intelligence) .
    • Rapid threat containment: With Cisco ASA Firewall, you can proactively mitigate risks. If a threat is detected, additional security policies are applied to other network devices for increased protection.
    • High availability: Cisco ASA Firewall offers high availability for high resiliency applications
    • Integrated IPS, VPN, and unified communications capabilities
    • Multi-node clustering
    • Multi-site
    • High performance

    Cisco ASA Firewall Benefits

    Some of the benefits of using Cisco ASA Firewall include:

    • Superior protection from threats through CSC, IPS, and the like.
    • Better pricing means that TCO is reduced. 
    • High performance levels that can be scaled to achieve 10+ Gbps.
    • You can deploy new applications easily over secured layers.
    • Identity-based access helps you access business resources.
    • Identity-based access can be integrated with other services, such as LDAP and Microsoft Active Directory.
    • By implementing Cisco ASA Firewall, IT resources are freed up.
    • Because Cisco ASA Firewall offers effective prevention, your spyware cleanup costs decrease.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by Cisco ASA Firewall users.

    A Cisco Security Specialist at a tech services company says, “All the features are very valuable. Among them is the integration for remote users, with AnyConnect, to the infrastructure. All the security through that is wonderful and it's very easy. You connect and you are inside your company network via VPN. Everything is encrypted and it's a very good solution.” He goes on to add, “The intrusion prevention system, the intrusion detection, is perfect. But you can also integrate Cisco with an IPS solution from another vendor, and just use the ASA with AnyConnect and as a firewall. Cisco ASA also provides application control. You can block or prevent people from going to certain applications or certain content.”

    Jonathan M., Head of Information Communication Technology at National Building Society, comments, "The benefits we see from the ASA are connected to teleworking as well as, of course, having the basic functionality of a firewall in place and the prevention of attacks. The standard reports allow us to constantly monitor our environment and take corrective steps.

    Eric H., CEO at NPI Technology Management, explains, “The command-line interface is really useful for us. We script basic installations and modifications through the command-line, which is considered sort of old school, and yet it allows us to fully document the changes that we're making due to the fact that we can save the exact script that was applied and say, "Here are the changes that we made."

    The secure, sophisticated SonicWALL TZ is widely deployed at small businesses, retail, government, remote sites and branch offices. It combines high-performance intrusion prevention, malware blocking, content/URL filtering and application control.
    Offer
    Learn more about Cisco Firepower NGFW Firewall
    Learn more about Cisco ASA Firewall
    Learn more about SonicWall TZ
    Sample Customers
    Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
    There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
    AeroM_xico Delta TechOps, Unimat
    Top Industries
    REVIEWERS
    Comms Service Provider19%
    Financial Services Firm17%
    Government13%
    Manufacturing Company6%
    VISITORS READING REVIEWS
    Comms Service Provider28%
    Computer Software Company21%
    Government7%
    Manufacturing Company4%
    REVIEWERS
    Financial Services Firm15%
    Comms Service Provider12%
    Computer Software Company9%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Comms Service Provider35%
    Computer Software Company20%
    Government5%
    Manufacturing Company4%
    REVIEWERS
    Construction Company13%
    Non Profit10%
    Financial Services Firm10%
    Healthcare Company10%
    VISITORS READING REVIEWS
    Comms Service Provider25%
    Computer Software Company19%
    Retailer5%
    Government4%
    Company Size
    REVIEWERS
    Small Business40%
    Midsize Enterprise26%
    Large Enterprise34%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise20%
    Large Enterprise55%
    REVIEWERS
    Small Business34%
    Midsize Enterprise24%
    Large Enterprise42%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise22%
    Large Enterprise51%
    REVIEWERS
    Small Business64%
    Midsize Enterprise21%
    Large Enterprise15%
    VISITORS READING REVIEWS
    Small Business39%
    Midsize Enterprise19%
    Large Enterprise42%
    Buyer's Guide
    Cisco ASA Firewall vs. SonicWall TZ
    May 2022
    Find out what your peers are saying about Cisco ASA Firewall vs. SonicWall TZ and other solutions. Updated: May 2022.
    608,010 professionals have used our research since 2012.

    Cisco ASA Firewall is ranked 6th in Firewalls with 69 reviews while SonicWall TZ is ranked 11th in Firewalls with 38 reviews. Cisco ASA Firewall is rated 8.0, while SonicWall TZ is rated 8.4. The top reviewer of Cisco ASA Firewall writes "Packet inspection with ASDM works well, but upgrading requires notable planning and effort". On the other hand, the top reviewer of SonicWall TZ writes "Easy to implement, fairly stable, and supports SSL-DPI". Cisco ASA Firewall is most compared with Fortinet FortiGate, Palo Alto Networks WildFire, Meraki MX, pfSense and WatchGuard Firebox, whereas SonicWall TZ is most compared with Fortinet FortiGate, Sophos XG, pfSense and Meraki MX. See our Cisco ASA Firewall vs. SonicWall TZ report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.