Forcepoint Next Generation Firewall vs SonicWall NSa comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Forcepoint Next Generation Firewall and SonicWall NSa based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Forcepoint Next Generation Firewall vs. SonicWall NSa Report (Updated: November 2022).
656,862 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The whole firewall functionality, including firewall policies and IPS policies, is valuable. It has all kinds of functionalities. It has IPS, VPN, and other features. They are doing quite a lot of stuff with their devices.""The configuration was kind of straightforward from the command line and also from the ASDM. It was very easy to manage by using their software in Java.""The management aspect of the product is very straightforward.""I'm a big fan of SecureX, Cisco's platform for tying together all the different security tools. It has a lot of flexibility and even a lot of third-party or non-Cisco integration. I feel like that's a really valuable tool.""The most valuable feature we have found to be the VPN because we use it often.""If you compare the ASA and the FirePOWER, the best feature with FirePOWER is easy to use GUI. It has most of the same functionality in the Next-Generation FirePOWER, such as IPS, IPS policies, security intelligence, and integration and identification of all the devices or hardware you have in your network. Additionally, this solution is user-friendly.""The integration of network and workload micro-segmentation helps a lot to provide unified segmentation policies across east-west and north-south traffic. One concrete example is with Cisco ACI for the data center. Not only are we doing what is called a service graph on the ACI to make sure that we can filter traffic east-west between two endpoints in the same network, but when we go north-south or east-west, we can then leverage what we have on the network with SGTs on Cisco ISE. Once you build your matrix, it is very easy to filter in and out on east-west or north-south traffic.""Cisco's technical support is the best and that's why everybody implements their products."

More Cisco Secure Firewall Pros →

"We like the scalability of Forcepoint because with the Forcepoint NGFW solution, we can scale anything. The solution has central management, so we can manage all the branches and devices centrally in one controller.""I found the initial setup process to be very simple and straightforward.""The people we deal with is a local partner in Cambodia and we can get good support from them.""Forcepoint's stability is satisfactory, for the most part.""Technical support has been quite helpful in the past.""The VPN is great.""Forcepoint is a good, stable solution.""I like the IPS. IPS is the master feature. I depend on the firewall and sandbox."

More Forcepoint Next Generation Firewall Pros →

"SonicWall NSa has a user-friendly firmware""I like the solution's configuration, interfaces, and user guides.""I like this solution because we are focused on VPN and have many brands that need to link a VPN and have security, like ransomware, spyware, and basic protection.""Deep packet inspection and intelligent application control are the most valuable features. It is a very updated solution. It is very current as compared to other brands and vendors.""The most valuable feature is the sandbox.""The most valuable features of this solution are the GUI pre-filtering and the ATP (advanced threat protection).""The most valuable feature of SonicWall NSa is the control aspect of the solution.""Compared to Cisco, SonicWall NSa is much easier to configure."

More SonicWall NSa Pros →

Cons
"Cisco Firepower NGFW Firewall can be more secure.""We cannot have virtual domains, which we can create with FortiGate. This is something they should add in the future. Additionally, there is a connection limit and the FMC could improve.""One of the few things that are brought up is that for the overall management, it would be great to have a cloud instance of that. And not only just a cloud instance, but one of the areas that we've looked at is using an HA type of cloud. To have the ability to have a device file within a cloud. If we had an issue with one, the other one would pick up automatically.""Maybe the dashboard could be a bit better.""The graphical interface should be improved to make the configuration easier, to do things with a single click.""The ASAs are being replaced with the new Firepowers and they have a different type of structure in the configuration to be able to migrate from one to the other.""The Firepower FTD code is missing some old ASA firewalls codes. It's a small thing. But Firepower software isn't missing things that are essential, anymore.""I would like it if they made the newer generation a bit simpler. You can do ASA code and FXOS. It is just a bit confusing with the newer generational equipment on what it can do."

More Cisco Secure Firewall Cons →

"Configuration is not easy because it has an old-fashioned interface. The configuration interface is highly complex, and it's been the same for years. They have to change the interface.""The initial setup of the Forcepoint Next Generation Firewall has areas that are difficult.""I would like to see more sizing in the next release, and the roadmap should be clear.""My team is looking for more throughput and better integration with our security framework.""The network interface could be better, and it could be cheaper.""When it comes to a complex deployment, the rules, firewall features, SD-WAN core features, and auto-scaling can cause the device to be not quite stable.""Forcepoint is a little difficult to configure compared to its competitors.""Next Generation Firewall's configuration could be improved."

More Forcepoint Next Generation Firewall Cons →

"The dynamics needs to be improved. The solution is not very compatible compared to the market products.""Potential improvement around the associated VPN cost""The cost could be lower. There could also be more flexibility for smaller companies.""We're not particularly fond of the way it generally performs. We are finding ourselves rebooting often. There are freeze-ups and that kind of thing. The stability needs to improve exponentially.""It would be useful to have an application firewall that prevents the outside world from seeing your private IPs. You don't need to publicize your private IPs to the outside world, and you can create a barrier, like a proxy server.""Overall, Im satisfied with SonicWall NSa, but it would be better if they could add a small terminal to each device. This would help me deal with certain issues by running a small bot onto any PC.""The stability is not there. The features are there, but they are not stable. They need to improve on this product because I feel that they have launched this product without much R&D.""I would like to see better integration."

More SonicWall NSa Cons →

Pricing and Cost Advice
  • "They seem to be at the top end in terms of pricing, but they are worth the price. They are probably a little bit lower than Palo Alto. If the customers are relying on Cisco products and they are thinking more in terms of scaling to another layer in a year, it is pretty much in a good price range."
  • "We're using the smart license for this firewall. The models that we have require licensing for remote access."
  • "There are licensing costs."
  • "I just bought it off the shelf, and I'm using it with my previous one, so I have not spent that much."
  • "The price is fair. It's not the cheapest, but it's not bad."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • "The product is very expensive."
  • "This is an expensive product, although when you buy this solution, you can do many things so it provides good value for the investment."
  • More Cisco Secure Firewall Pricing and Cost Advice →

  • "Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
  • "We have found the price could be reduced. It is a little expensive."
  • "The pricing of the solution is normally competitive with other products."
  • "The pricing should be more competitive against other vendors in the market."
  • "The cost is fair, but it could be improved."
  • "It could be cheaper like Fortinet."
  • "I consider Forcepoint Next Generation Firewall's price to be good."
  • "We have just a subscription for the cloud, and this license is great. The license is so good."
  • More Forcepoint Next Generation Firewall Pricing and Cost Advice →

  • "When implemented properly, the total cost of operation is very low."
  • "Licensing fees are paid on a yearly basis, and we are happy with the pricing."
  • "Its price is okay."
  • "Normally, when we buy any product, we buy it with a five-year service built into it. Later on, depending on the growth of the organization, we go for a new one or an upgrade."
  • "It would be better if it has a better price, but its price is okay considering the benefits that you receive."
  • "SonicWall still is only a dollar or Euro per gigabit. This means, of the IPsec, it's the cheapest solution."
  • "While I don't know the exact amount off the top of my head, I would estimate the licensing package was about $15,000 to $20,000 a year."
  • "We are on a three-year license for the solution. The price is inexpensive compared to other solutions."
  • More SonicWall NSa Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    656,862 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer:One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet… more »
    Top Answer:It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer:I like the IPS. IPS is the master feature. I depend on the firewall and sandbox.
    Top Answer:We have just a subscription for the cloud, and this license is great. The license is so good.
    Top Answer:Management could be better. They can improve the management. I think all our customers can't accept firewalls that have… more »
    Top Answer:The antivirus and items of that nature were quite helpful to have.
    Top Answer:Our organization would pay for a license every two to three years.
    Top Answer:Sometimes I found the GUI and some of the features a little bit hard to navigate, as opposed to Fortigate, which is much… more »
    Comparisons
    Also Known As
    Cisco ASA Firewall, Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall
    Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
    NSA 250M, NSA 2600, NSA 3600, NSA 4600, NSA 5600, Dell SonicWALL NSA
    Learn More
    Overview

    The Cisco Secure Firewall portfolio delivers greater protections for your network against an increasingly evolving and complex set of threats. With Cisco, you’re investing in a foundation for security that is both agile and integrated- leading to the strongest security posture available today and tomorrow.

      From your data center, branch offices, cloud environments, and everywhere in between, you can leverage the power of Cisco to turn your existing network infrastructure into an extension of your firewall solution, resulting in world class security controls everywhere you need them.

      Investing in a Secure Firewall appliance today gives you robust protections against even the most sophisticated threats without compromising performance when inspecting encrypted traffic. Further, integrations with other Cisco and 3rd party solutions provides you with a broad and deep portfolio of security products, all working together to correlate previously disconnected events, eliminate noise, and stop threats faster.

      Forcepoint Stonesoft Next Generation Firewall protects enterprise networks with high-performance "intelligence aware" security supported by real-time updates. This enables Stonesoft to deliver the industry's best defense against advanced evasions, alone with complete next-generation firewall protection when and where you need it - at remote sites, branch offices, data centers, and the network edge.

      SonicWall NSa dispenses advanced threat protection using a high-performance security platform. The NSa series implements intuitive deep learning technologies in the SonicWall Capture Cloud Platform to dispatch the automated real-time threat detection and deterrence enterprise organizations need today. SonicWall Network Security appliance (NSa) series is best for mid-sized organizations to distributed enterprises and data centers.

      SonicWall NSa series next-generation firewalls (NFGWS) combine two very robust security ideologies to deliver advanced threat protection to keep users’ networks safe. Boosting SonicWall’s multi-engine advanced threat protection (ATP) is their Real-time Deep Memory Inspection (RTDMI™). The RTDMI intuitively identifies and stops aggressive zero-day threats and vicious malware by investigating memory directly. This real-time process allows SonicWall RTDMI to be accurate, lessen false positives and discover and alleviate malicious threats and attacks. SonicWall’s single-pass Reassembly-Free Deep Packet Inspection (RFDPI) will audit every byte of each and every packet by investigating both outbound and inbound traffic on the firewall. By combining the SonicWall Capture Cloud Platform along with on-box offerings such as intrusion prevention, web/URL filtering, and anti-malware, the NSa series is able to block the most malicious and dangerous threats at the gateway.

      Additionally, SonicWall firewalls supply absolute protection by executing complete inspection and decryption of SSH and TLS/SSL encryption connections - no matter the port or protocol. The firewall takes a deep dive into each and every packet (the header and data) routing out any anomalies, zero-day intrusions, threats, and protocol non-compliance. Users can also define unique criteria specific to their organization to ensure their networks remain safe. This aggressive deep packet inspection is able to identify and block malicious attacks, stop dangerous malware downloads, prevent the spread of infections, and defeat command and control (C&C) communications and data exfiltration. Protocols involving inclusion and exclusion allow users complete control to decide, based on specific governance policies, organizational policies, or government or legal compliance, which traffic is to be investigated for decryption or inspection.

      SonicWall Nsa offers enterprise organizations the network control and fluid flexibility they desire using an intrusion prevention system (IPS), VPN, real-time visualization, and other advanced powerful security features, making it a popular firewall solution in today's marketplace.

      Reviews from Real Users

      “The features that I have found most valuable are the firewalling, which is very good, and the GUI which is very intuitive. It is easy to use and provides great security.” - Network Engineer at a maritime company

      “What's valuable in SonicWall NSa is the ATP (advanced threat protection). It can protect users from malicious links. SonicWall NSa also has a Sandboxing service that is very helpful for us, especially when end users accidentally click on malicious links. Another valuable feature of this solution is that it is very useful for site-to-site VPN connectivity issues. SonicWall NSa has very good hardware. I also love that SonicWall has very good technical support, who are very knowledgeable, provide good suggestions, and they're easy to reach.” - Mohammed M., Network Administrator at Transgulf Readymix

      Offer
      Learn more about Cisco Secure Firewall
      Learn more about Forcepoint Next Generation Firewall
      Learn more about SonicWall NSa
      Sample Customers
      There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
      California Department of Corrections and Rehabilitation (CDCR)
      Orange County Rescue Mission, First Source, Michaels & Taylor, Green Clinic Health System, Aspire Chiltern Skills and Enterprise Centre, UnitedStack, Faith Lutheran College Redlands, Celtic Manor Resort, Star Kay White, Air Works, Unimat Life, NHS Yorkshire and Humber Commissioning Support (YHCS), Hutt City Council, Mato Grosso do Sul, Nspyre
      Top Industries
      REVIEWERS
      Financial Services Firm16%
      Comms Service Provider13%
      Computer Software Company9%
      Government8%
      VISITORS READING REVIEWS
      Comms Service Provider20%
      Computer Software Company19%
      Government7%
      Educational Organization5%
      REVIEWERS
      Comms Service Provider29%
      Computer Software Company21%
      University14%
      Integrator7%
      VISITORS READING REVIEWS
      Computer Software Company20%
      Comms Service Provider20%
      Government9%
      Manufacturing Company6%
      REVIEWERS
      Manufacturing Company18%
      Educational Organization10%
      Construction Company10%
      Healthcare Company8%
      VISITORS READING REVIEWS
      Computer Software Company20%
      Comms Service Provider16%
      Government7%
      Retailer6%
      Company Size
      REVIEWERS
      Small Business36%
      Midsize Enterprise24%
      Large Enterprise40%
      VISITORS READING REVIEWS
      Small Business28%
      Midsize Enterprise19%
      Large Enterprise53%
      REVIEWERS
      Small Business56%
      Midsize Enterprise22%
      Large Enterprise22%
      VISITORS READING REVIEWS
      Small Business25%
      Midsize Enterprise19%
      Large Enterprise56%
      REVIEWERS
      Small Business57%
      Midsize Enterprise20%
      Large Enterprise23%
      VISITORS READING REVIEWS
      Small Business40%
      Midsize Enterprise18%
      Large Enterprise42%
      Buyer's Guide
      Forcepoint Next Generation Firewall vs. SonicWall NSa
      November 2022
      Find out what your peers are saying about Forcepoint Next Generation Firewall vs. SonicWall NSa and other solutions. Updated: November 2022.
      656,862 professionals have used our research since 2012.

      Forcepoint Next Generation Firewall is ranked 21st in Firewalls with 18 reviews while SonicWall NSa is ranked 15th in Firewalls with 32 reviews. Forcepoint Next Generation Firewall is rated 7.8, while SonicWall NSa is rated 7.8. The top reviewer of Forcepoint Next Generation Firewall writes "A good and simple solution, but becomes unstable when more features, like auto-scaling are introduced". On the other hand, the top reviewer of SonicWall NSa writes "Easy to scale advanced threat protection solution with knowledgeable technical support, but has occasional bugs". Forcepoint Next Generation Firewall is most compared with Fortinet FortiGate, Palo Alto Networks Threat Prevention, Check Point NGFW, Cisco SD-WAN and Sophos XG, whereas SonicWall NSa is most compared with Fortinet FortiGate, Meraki MX, SonicWall TZ, Sophos XG and pfSense. See our Forcepoint Next Generation Firewall vs. SonicWall NSa report.

      See our list of best Firewalls vendors.

      We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.