SonicWall TZ Reviews

It is cloud-based. I am managing it from my HQ to centralize all the branches connected with it, point-to point. I'm using the SonicWall for the gateway. Certainly I'm using it for DLP and antivirus logging, and we are using SonicWall firewall for the mail filtering. Also, we can use SonicWall firewall just like on SD-WAN. We can manage all our branches through that central point from their patches.

We have a centralized firewall here and it will take some bandwidth just like a broadband connection, but with low bandwidth or mobility connection. Through that, we can connect from the HQ to all our branches on those devices, through that particular antennae. All the data transmitted from the corporate office to branch offices works smoothly on the low bandwidth.

Because it is a software-developed feature in SonicWall, we just maintain the main firewall. With the main firewall routing there, we can do connectivity point-to-point. On the low bandwidth we can connect to all the branches from my corporate office.

In terms of what needs to be improved, I would say better load balancing and data filtering. This way we have low utilization of the net from the corporate office to all the branches. This is the connectivity there. The traffic from the HQ to all the branches goes on the low latency so that connectivity is continuous and not dropped.

In the next release it should have both the failure and load balancing combined on there. Whenever there is a failure and whenever they are load balancing, it should auto-generate the traffic for any connectivity on there, so it will run smoothly. It should also generate the alert.

I have been using SonicWall TZ for the last 10 years. We're using the SD-WAN solution from SonicWall.

This solution is quite stable.

Scalability is more than fine.

We have around 500 users with connectivity on it.

We do have plans to increase usage.

Technical support is good, there is no issue.

I am comfortable with them all: SonicWall, Check Point, Palo Alto, Sophos. Right now, I'm using the Sophos 225 and 125 in my offices and have a XG 862 in all the branches connected from there. I work on that firewall installation and also the NetScaler on the Citrix. That's simply fundamental. There are some differences with the connectivity and ruling. The rule tab is the same.

I work on their Azure AD platform and also Exchange. On the Exchange, I am working on the O365.

I am also using Trend Micro, Symantec, and McAfee.

This technology comes with these different platforms and you go on the previous one from a couple years ago. The SD-WAN-only technology is not that common. It costs more from US, Canada and from that area of connectivity. It will drop the packet from there.

It has an easy setup. You can centralize all the connectivity. This OS is running with each and everything, and you can monitor it all from the centralized point.

I also give the support for Exchange, but this will take low bandwidth and low latency from any mobile connectivity, any internet, any low-bandwidth connectivity and work fine. But other products like McAfee and Symantec can support the Exchange.

It can take time for the synchronization of updating the devices. This depends on how many devices we have connecting from the portal and which devices they are working on. Sometimes, you have the scanning on there. So it will take that functionality and we can define for root causes on the other things. We can define according to policy. So this depends on the policy design. It also depends on that criteria.

On a scale of one to 10, I would give SonicWall TZ a nine.

We use SonicWall TZ for site-to-site VPN and as an NSa firewall. We have a mixture of SonicWall TZ devices that we use which are the TZ300, TZ350, and TZ400.

We have experienced some issues with SonicWall TZ and they are lacking some advanced features other vendors have.

I have been using SonicWall TZ for approximately nine years.

We have approximately 30 people using the solution in our organization.

The support for SonicWall TZ is good.

The installation is straightforward and took approximately 30 minutes.

We have one technician that does the maintenance for this solution.

I have evaluated Fortinet and we may have future plans to switch solutions.

I would recommend this solution to others.

I rate SonicWall TZ a seven out of ten.

We work based on a client's requirements. We don't maintain any segmentation information. We sell all types of solutions from SonicWall, such as their next-generation firewall, cloud solutions, and switching and routing solutions. 

Deployment is based on a client's requirements. If a client gives us the requirement for the cloud, then we do the cloud deployment. 

Its user interface and simplicity are the most favorite parts for our clients. They find it stable and easy to use. Its performance is also good. 

Our clients feel comfortable using SonicWall. It has all the facilities to block the threats.

The marketing of SonicWall has to be increased. Currently, when it comes to firewalls, most people go for Cisco and Palo Alto. SonicWall should improve its marketing and branding policies to increase sales. Other than that, it is good. 

We have been selling this solution for about two years.

It is stable.

It is scalable. The entry-level companies are taking TZ 300, TZ 400, and TZ 600 from us, and they have 100 to 150 users. The bigger companies ask for the next-generation firewall such as NSA 2650 and NSA 3650.

We have about 50 customers who are using SonicWall. They include government organizations and corporates. We have lots of clients who have already taken SonicWall. They have the license, support, and subscription for two years. 

They are good enough.

We are selling solutions for most of the brands such as Cisco, Sophos, SonicWall, Fortinet, and Palo Alto. For email security, we are selling Barracuda. For those clients who have the financial capability, we recommend Palo Alto. 

The deployment duration depends on the transportation. If the installation site is far from our office, it takes time to transport it. In terms of installation, if a client's site is ready to deploy the firewall, then we don't need much time. We can do it instantly.

Sometimes, the licensing part can take some time. If someone wants a renewal, it can take some time to complete the procedure and receive the license via email, but it is bearable and not the problem.

For the setup, we have a good team, and there is no problem. We have five people in our technical team. We also get help from SonicWall's England team.

It has a yearly subscription.

I would recommend this solution to others. In every sector, SonicWall is doing good. Our clients do not have any complaints. They feel comfortable using it. It has all the facilities to block the threats, and it is quite good. 

SonicWall is able to provide a solution for the requirements of our clients. Only because of the lack of marketing and branding, SonicWall is not able to reach customer premises, and that's the reason why its sale is not much.

I would rate SonicWall TZ a seven out of 10.

The web security and IPsec VPN are both valuable aspects of the solution.

The NAT policies and port forwarding are great. 

We were initially actually using very basic features for my organization's requirements. It is a very simple model. There isn't much complexity to it.

It's been very easy to implement and deploy.

The solution is stable. 

Technical support is perfect.

We've found the pricing to be pretty good overall.

It would be nice if it was more user-friendly. The user interface is a bit difficult to navigate.

The technology in this particular version is very old. 

They have to improve their assistant client application.

In this particular SonicWall has a challenge with the SSL client. It provided NetExtender, a client application that is very challenging and is difficult to manage.

I've been working with the solution for about six years or so. 

I would say that it is 100% stable. Sometimes there's an issue, and we have to log a ticket, however, they will have it resolved. Rarely are there bugs or glitches. It doesn't crash or freeze.

Sometimes support is delayed, and sometimes we get items resolved within hours. Overall, it is okay. Overall it is okay. They are very helpful and responsive most of the time and we are quite satisfied with their level of attention.

We previously used a solution called AnexGATE. However, we had issues with port following and needed to switch.

The initial setup is very straightforward. It's not overly complex. A company shouldn't have too much trouble implementing it. This is especially true if you have a bit of a technical person implementing it.

For the most part, the solution is very economical.

Although we have been using it for the last six or seven years, it is now expired and we want to upgrade it with either Fortinet or Sophos, and so, we are looking into those.

We are a customer and an end-user.

We are using the TZ300 model at this time. We haven't used the latest version of the solution just yet.

I'd rate the solution at an eight out of ten.

Once we moved the units up to the Gen 6 platform, they could support SSL-DPI. We are huge fans of the DPI. That piece is incredibly easy to implement. I'd say probably the most powerful thing about the solution is that coupled with the captured functionality. 

We've turned the SSL inspection on, and it is a nightmare. It doesn't mean it doesn't work, but it will turn your world upside down for weeks until you tune it and get it right. That's an across the board problem. It's not just TZ. That's TZ's, NSA's, etc. Wherever you're using their implementation of SSL, where you've got to implement a certificate on every machine. Once you even get past that it's still going to be particular and finicky. Banking sites are driven crazy by it every time we turn it on.

It is trying to lock down outbound traffic so tightly that you get to sites that are already very security conscious. It's just a battle to get the traffic through. Intentional traffic, the traffic you want to get through, seems to be a problem. It will stop almost everything. Too much in fact. I understand the concept. It's just a little threatening. We just had a client sign off on a 6650. Then we send them a scope of work for implementing it. We specifically put a note in there in enormous bold type: "Note does not include SSL-DPI implementation". That is additional. The client responded that  "That's the one piece I wanted you guys to do. I'm scared of it."

He said, "We're scared of it," and I told him, "We're scared of it too." I said, "I don't know how long it's going to take. And it's going to turn your universe upside down for a week to 10 days to maybe two weeks." He said that he heard that this would be the case. 

My fear is that the client thinks that we'll say it will take four hours and then, when it turns into 40, try to make us give them the submission for free. 

Even tiny environments, for example, 10 user environments, once you turn it on, you will spend days tuning it. The last one we did took us 22 hours to get it perfect. We learned our lesson. We slotted in four to eight hours to do it and it took us 16 to 20.

From a support perspective, if we're talking tech support I think Silver Partners, Gold Partners, Platinum, whatever level, should have a different number to call. End users can call tech support over at SonicWall if they've paid for support as part of their AGSS or whatever services they bought. The end-user can call, or we can call, however, I don't want to be calling the same line that an end user's calling. I don't want the same response time. I need a different level of expertise.

We've been a SonicWall dealer for 21 years approximately. We've been handling the solution since 1999. I personally didn't start using the solution until 2004.

Once you get past all the configuration issues, If you are on a rock-solid GA (Generally Available firmware), I don't know if I want to say it's bulletproof, however, the stability is really, really good. I don't sit and worry, thinking, "Oh, God. We know another one's going to fail today." We never think that way about that type of stuff. It's the odd time where we might get hardware failures or random reboots. We've had a couple of SMA units go sideways. Even SonicWall couldn't solve the problem. However, that said, it's rare.

There's a couple of different ways to answer the question of scalability. They've built the TZ line wide enough so that we've got enough of a selection to be able to fit most bandwidth and user count situations. It's never going to fit everybody and it's not meant to. It shouldn't. It is a little challenging to try to get one of the boxes to do full wire speed. I'm not so sure inside that box, at the price point, you're going to solve that problem.

That's why we sold the 6650. One client has got a one gig fiber line and they're in a school. On an NSA 3600, he can't get over 400 on it. I told him he never would. Some days I'd be surprised to get 400, depending on the user count. The TZ lineup is pretty good, however, I'm not so sure I'd use the word scalable. 

If what we mean by scalable is, "oh, well, I buy a 300 and I buy it for 10 users, but I can scale up to 30 users with that box," the answer to that is no you can't. If you ask "could I scale up to 25 users and move to 200 or 300 or 400 meg?" You can't. We've got somebody in that situation right now and we're quoting a box replacement because it just can't scale that way.

You can't necessarily scale on the appliance. You've got to get the right size. That's the easiest way to scale. If it's the right-sized appliance for the environment with some headroom then I think most situations users are going to be fine. There's going to be some issues where somebody cheaps out. For example, we worked with a law firm. They bought a TZ 300 because they didn't want to spend the money for the 500. Now they're going to have to spend the money for the 500 anyway because they need to scale up. 

I don't think they really separate support from line to line. Maybe if you get all the way up into supermassive issues they do. Between NSA and TZ, it's the same level of service that you get on the other end of the phone. To be quite honest, level one support is not sparkling. Level two is usually really good. Level three is usually a combination. You get to level three, and you're almost talking to development or a combination of a crew that's dealing with development and senior technical expertise. Those guys rarely fail us.

That's a typical support story. The level one guys will read the scripts and don't necessarily fix anything. We've already run through level one through three on our end with my staff. If they can't fix it, talking to a level one script reader is definitely not going to get it fixed. You should be able to bypass those guys if you're a reseller and a long-standing Silver Partner, like we are.

We've also used Cisco previously. A while back, we used to have Cisco as our primary choice, with SonicWall being our second. That changed when I came to the company in 2004, where SonicWall became our solution of choice. We've got 400 or 500 firewalls out there and we don't plan on changing over to anything else.

We're a Silver Partner.

I'm not an engineer. I was a field engineer for nine years a long, long time ago. However, I'm not typically the one that gets my fingers into stuff, and it would be my engineering and senior engineering staff that do that. That said, I can say that I don't think any of our guys have touched the virtual platform yet.

We use TZ and traditional NSA tech every day. That's our bread and butter.

The current version we're using right now is the 600 series, although we do still have some 350 series. 90% of what we use are Gen 6. They're either TZ 300, 400, 500, 600 or NSA 2600, 3600, 4600. 

We've got a smattering of 2650s that we've rolled out, which have been really, really good. Those are powerful units.

I'd rate the solution eight out of ten. It doesn't warrant more than that. There's plenty of products I'd give a five to out there, however, for the quality of the product offering, I think an eight is a fair mark.

We use the solution to control and protect access between our various locations.

With this solution, our facilities are able to act as one, easily sharing resources. 

It protects against intrusion while allowing needed access. 

It needs more robust self-help documentation along with examples and things to watch out for. 

We have been using the solution for more than ten years.

The stability is great.

The solution works well.

Positive

Nothing is as robust and complete as SonicWall devices.

The initial setup was fairly straightforward and is particularly straightforward when upgrading.

Our implementation was done in a combination due to locations.

We have seen a 100% ROI. There are no intrusions. 

It was chosen by an IT support company.

Try it, you'll be glad you did, as you'll find a new peace of mind.

The solution is used for firewall protection with our customers.

Stability is the most valuable feature of the solution.

The cost of the solution has room for improvement.

I have been using the solution for ten years.

The solution is stable.

The solution can be used for small, and medium companies as long as the organization has the budget for it. I recommend Cisco Meraki for enterprise companies because it works on the cloud and is more scalable.

The solution is expensive.

I give the solution an eight out of ten.

I recommend the solution.

The primary use case for this solution is as a Network Firewall.

This solution protects the network. It lets me monitor in live time if someone is 'hogging' bandwidth. It lets me block websites, and the list goes on.

It is a very nice tool to have on the school network.

The most valuable features are for the protection of data, and IE Intrusion on the network.

I would like to see lower antivirus pricing.  So far I haven't found any situation that I needed anything else added/included.

I have been using this solution for five years.

The stability is good.

The scalability is good.

The customer service is always very good!

I did not use any other solutions. I only ever used SonicWall.

The setup was straightforward.  We had an existing SonicWall.

We implemented the solution in house.

This solution has an easy setup, good support, and reasonable pricing.

I did not evaluate any other options.

I am very satisfied with the solution.

SonicWall TZ is used for network security.

SonicWall TZ can improve the UI application and when you create any net policies or any new policy, it will not sync or work properly.

I have been using SonicWall TZ for approximately three months.

SonicWall TZ is stable. However, sometimes we have some issues.

The scalability of SonicWall TZ is good and easy to add users. 

I have contacted the technical support from SonicWall TZ and their support is good.

I have previously used UiPath and FortiGate firewalls and FortiGate is my favorite because it is consistent and has a good configuration. UiPath has a good interface and is user-friendly.

The price of SonicWall TZ is good for medium-sized companies.

My advice to others is this is a good solution but sometimes it is not working properly. I would recommend this solution for a home setup and I would recommend FortiGate firewalls for companies.

I rate SonicWall TZ a six out of ten.

I was a technical consultant, and I was helping clients out. I've had two clients. Both of them have had SonicWall, and both of them have gone through upgrades.

It does what it says it is going to do.

The user support could be improved because you have to go outside to get that kind of support.

I have been using this solution for five years.

We haven't used it. We've had to go outside and get technical support through a third party.

I would rate it an eight out of 10.