"The most important feature is the intensive way you can troubleshoot Cisco Firepower Firewalls. You can go to the bit level to see why traffic is not handled in the correct way, and the majority of the time it's a networking issue and not a firewall issue. You can solve any problem without Cisco TAC help, because you can go very deeply under the hood to find out how traffic is flowing and whether it is not flowing as expected. That is something I have never seen with other brands."
"I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is valuable."
"I have experience with URL filtering, and it is very good for URL filtering. You can filter URLs based on the categories, and it does a good job. It can also do deep packet inspection."
"The feature set is fine and is rarely a problem."
"The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable."
"The most valuable feature is the access control list (ACL)."
"The implementation is pretty straightforward."
"Provides good integrations and reporting."
"I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed."
"The system in general is quite flexible."
"We have found pretty much all the features of the solution to be valuable."
"The most valuable features in OPNsense are reporting and visibility."
"The VPN server feature is the most valuable. It is integrated with Radius and AAA for doing accounting and authentication. Insight view is also an important feature for me at this time. It allows me to assess our network traffic. I also like the firewall feature. The BSD kernel has a packet filter. It is one of the most solid frameworks for firewalls. Its user interface is one of the best interfaces I have used."
"OPNsense is easy to scale when running on the hardware."
"The initial implementation process is simple."
"The interface and the dashboard are the most valuable features of this solution."
"We are able to block whatever we want to block by using this product. It provides all required security features, such as content filtering, VPN, in one box. Before switching to SonicWall, we had specified all required features."
"Most of the features are useful. It is easy to configure and easy to troubleshoot. I can see the utilization of different networks, and there are also App control features."
"The installation is straightforward and took approximately 30 minutes."
"It's a very cost-effective solution."
"With the main firewall routing there, we can do connectivity point-to-point. On the low bandwidth we can connect in all the branches with my corporate office."
"SonicWall TZ is a stable product."
"The feature with SonicWall that I have found most valuable is that all the models have the same interface. We don't need to learn different interfaces in the smaller or bigger models."
"It's been very easy to implement and deploy."
"Web filtering needs improvement because sometimes the URL is miscategorized."
"Cisco makes horrible UIs, so the interface is something that should be improved."
"The price and SD-WAN capabilities are the areas that need improvement."
"The initial setup can be a bit complex for those unfamiliar with the solution."
"The performance should be improved."
"Report generation is an area that should be improved."
"The visibility for VPN is one big part. The policy administration could be improved in terms of customizations and flexibility for changing it to our needs."
"FlexConfig is there as a bridge for features that are not yet natively integrated into Firepower. It is a way of allowing you to be able to configure things that wouldn't otherwise be possible until the development team can add them into Firepower's native capability. There is still some work that needs to be done around FlexConfig. There are still quite a few complex things, like policy-based routing, that have to be done in FlexConfig, and it doesn't always work perfectly. Sometimes, there are some glitches. It is recommended that you configure FlexConfig policies with Cisco TAC. It would be good to see Cisco accelerate some of those configurations that you can only do in FlexConfig into the platform, so that they are there natively."
"I would like to see better SD-WAN performance."
"The only thing that I would like to see improved is the Insight or the NetFlow analysis part. It would be good to have the possibility to dig down on the Insight platform. Right now, we can easily do only a few analyses. If this page becomes more powerful, it surely will be a well-adopted platform."
"The interface needs to be simplified. It is not user-friendly."
"There should be more technical documentation."
"The interface isn't so friendly user. But we have some technicians here who are quite confident with this tool. OPNSense could maybe add sets of rules so it's simpler to manage different groups with particular needs."
"The solution could be more secure."
"The solution would not be suitable for anything large-scale."
"The logging could improve in OPNsense."
"The technology in this particular version is very old."
"Its pricing can be better. It is very expensive."
"We have experienced some issues with SonicWall TZ and they are lacking some advanced features other vendors have."
"Needs more robust self-help documentation along with examples and things to watch out for."
"The areas we would like to see improvement include more features available similar to the equivalent FortiGate appliance, e.g. SSL encryption and inspection. Two-factor authentication capability would be another additional feature that could be included in the next release."
"The stability could be a lot better."
"There is a point I don't like about SonicWall in the past and now. Most of the destinations we look at when we're detecting some user using too much bandwidth or something like that, SonicWall just gave us destination IP address, instead of the full qualified domain name. I think that's the most important part that is still missing. I think that's the most important for us."
"The marketing of SonicWall has to be increased. Currently, when it comes to firewalls, most people go for Cisco and Palo Alto. SonicWall should improve its marketing and branding policies to increase sales. Other than that, it is good."
More Cisco Firepower NGFW Firewall Pricing and Cost Advice →
OPNsense is ranked 13th in Firewalls with 11 reviews while SonicWall TZ is ranked 11th in Firewalls with 36 reviews. OPNsense is rated 8.0, while SonicWall TZ is rated 8.4. The top reviewer of OPNsense writes "A solution that detects and blocks malicious content with good reporting and visibility, but the reliability needs improvement". On the other hand, the top reviewer of SonicWall TZ writes "Easy to implement, fairly stable, and supports SSL-DPI". OPNsense is most compared with pfSense, Untangle NG Firewall, Sophos XG, Sophos UTM and Kerio Control, whereas SonicWall TZ is most compared with Fortinet FortiGate, Cisco ASA Firewall, Sophos XG, Meraki MX and Juniper SRX. See our OPNsense vs. SonicWall TZ report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
