Untangle NG Firewall Reviews

We are an authorized partner of Untangle, and we primarily work with small businesses that have limited needs. We have deployed Untangle NG Firewall z4 Plus to the majority of our clients. With simple hardware and a monthly service fee, it's very affordable for our clients. 

The software versioning is 16.5. We have deployed them primarily on-premises. We have a couple virtualized and on ESXi servers, and that's pretty much it. They're fully managed from our cloud database directly on untangle.com/cmd.

Its ease of use, variety of available features, and low pricing have enabled us to improve the security for a lot of our very small business clients at a price that they are happy to pay for. The big thing for us is that we're providing a good quality security service to them without spending thousands of dollars per year on hardware and licensing, which we would spend with something like SonicWall, Palo Alto, etc.

It is very easy to use. The user interface is very straightforward. It may not be as fancy as some of the ones I've seen, but it's very straightforward. It's very easy to find what you need, and it's very easy to get things done.

The majority of our clients are very small businesses, and Untangle devices have been fantastic for these small clients. We've basically standardized our stack to just simply use Untangle. We include the hardware and the service option, which makes it very easy and affordable for us to just simply push that into the monthly per-user costing that we provide as a managed services provider. It's really a no-brainer. They're easy to use, and they're easy to set up and configure. Support is generally good about resolving any issues that we have. We haven't had any real complaints.

I've heard other people saying that other firewalls have better detection rates, so better security. If they can improve the security of the device, I'm always for that, but at the moment, we've been happy with the service that we're getting out of them. 

It does have multi-factor authentication in some areas, but I would love to see a more widely implemented version of that on the devices themselves. 

It could use some improvement for Azure Active Directory Connections. It does exist, and it is available, but it needs work to be able to fully authenticate.

I know there are some advanced features that other firewalls have that aren't present in Untangle, but we've never noticed any feature that we need but isn't there. 

I also know a lot of people have complained about the cost per device because they license by device counts. So, once you get over a certain number of devices, it is not really a cost-effective solution.

We have been using this solution for the past three years.

We have had one device go down in three years. I've never been certain if that was an issue with Untangle themselves or with the client location. I know for a fact that the client did unplug the device repeatedly because they did not want to listen to their tech support. They unplugged it repeatedly. They left it disconnected from the internet completely for several months. It was disconnected and turned off, and it came to a point where we were never able to remotely restore that connection. So, we had to go in and physically factory reset the device. That's the only issue that I've had in terms of stability, but I don't know if that's an issue with Untangle or an issue with the client themselves. We dropped that client shortly after.

It is easy to scale. I ordered 10 of them in bulk just a month ago. We have about a hundred clients. 

We pretty much standardized it across our client base. We also provide some email services, Microsoft 365, and tech support to people who literally just work from their laptop from a Starbucks. They are the only clients who aren't using it. Any of our clients that have an office or home office have Untangle Firewall. We serve a lot of residential customers, and we've stuck the unlicensed version of the Untangle Firewall on their network. We manage those, and it's been great for the most part. The only way we would really increase that in our client base is by just increasing our client base.

I would really like phone support for emergencies. I'm not sure if there is one. I don't think I've ever had to actually utilize it if there was. Having a direct line of contact or support, especially being a partner, would definitely be an improvement, but their tech support has been able to resolve every issue that we've had with them.

Originally, we tested Untangle many years ago, but it wasn't a fantastic solution then. So, we didn't really utilize it and always stuck with pfSense, but over the past three years, we've been using, almost exclusively, Untangle devices for our clients.

Our clients were using a variety of solutions. They have been utilizing SonicWall. We have replaced a couple of WatchGuard firewalls. We've had people with pfSense, and we've had people with Cisco Meraki. We've seen most of the firewalls in the business, and I like Untangle.

It was straightforward. You can basically set up a demo device with the settings that you want, take the config file, and export those configs and policies to any new device you deploy. So, the initial setup is not that complex. It is very simple and straightforward because the user interface is very simple and straight. 

When you get to whatever you like and how you want to configure it, you just save it as a policy set, save the config file, and deploy it within minutes. We order the device, get the serial number, apply the serial number to our portal, and then apply the policies, and we're done.

One person can handle the deployment. As a matter of fact, the end-user can handle the deployment, as long as the tech just tells them where to plug it in. The end-user doesn't need to do anything. As soon as it's connected to the internet, as long as it's plugged into the right place on the network, the deployment takes minutes, and we manage them all from the command center.

I'm not a financial type of person, but I can say that configuring a pfSense firewall is a couple of hours per location, and managing other firewall solutions is definitely more costly and time-consuming from what I've seen previously. We've definitely saved time in deployment, and we have also saved time in management. We save time and money in a variety of ways. So, we have definitely seen an increase in ROI. In addition, the fact that we're able to just simply include it in our monthly costs for what we charge our clients makes it all the better.

Untangle is open-source software. So, you can get it for free. That has been a benefit, especially for the residential users because it is free. The license costs start at $25 a month for some additional features, including higher tiers of security intrusion prevention. The free version comes with intrusion detection, and then the license version has intrusion prevention. It also has some additional things for active directory connectors, etc.

It starts at $25 a month to cover 12 devices. Then it goes up from $25 to $50 a month for 12 to 25 devices. That's where it really doesn't scale out per site. If you have a site that has more than 50 devices on it, then Untangle quickly becomes cost prohibitive in comparison to several other competitors. They have a weird per-device licensing model, whereas most firewall vendors simply tell you that this is how many devices we expect you to cover and this is what your licensing costs. They don't tier it by the device. Firewalls have different costs and different licensing. So, in a way, it is the same, but Untangle is more upfront about it. They tell you that if you have X amount of devices, this is what your licensing cost is, whereas other firewall vendors tell you that if you're covering this amount of devices, you need this type of firewall that they make, and it's going to cost you this amount a month, which is going to be more, but the price comparison is definitely not favorable for Untangle once you go over 50 devices.

There is an additional cost of the hardware, which you can purchase upfront. You can pay for hardware as a service, or you can deploy it to your own hardware at no additional charge. We can deploy this for free, completely and utterly free and clear, just by simply running a VM and installing the free version of the software on it. So, there are literally no costs to it. The additional costs are basically just completely optional, except in the cases of industries where certain of these other security features are a requirement, but the only costs that you have to pay are the licensing costs. You can choose not to buy their hardware at all and just deploy it in a VM.

We evaluated pfSense, WatchGuard, and Sophos, and ultimately went with Untangle.

I would definitely advise going for z4 Plus. The base z4 is good if you're going with the free licensing. It is a little bit lower powered. So, it's only good for the free tier licensing or very small offices with only a couple of devices. z4 Plus has been fantastic. We can turn on every feature that Untangle has, and it runs right along for months at a time.

I would rate it a solid nine out of ten. It has been fantastic for the uses that we put it to, which are primarily small clients. It does its job, and it does it well. I've had almost no issues in the past three years of running them except for one, and I'm pretty sure it was the client that caused the issue.

We use this solution for small offices with 12 users. 

Most of our clients are small businesses with approximately four to fifteen users. We have one customer with approximately 20 users.

We do a lot of Voice over IP, which is one of the features that I like about it. The firewall works really well with Voice over IP.

They have a command center that makes it easy to log into and see all of your appliances nationwide.

The reporting is wonderful. You can run reports and they are very helpful.

The alerting is great. It will send you alerts when there is any nonsense going on. For example, you will get alerts on DDoS types of attacks.

It has wonderful content filtering built into it. They also have a cap portal feature that is pretty good. It has several useful interesting features included.

The VPNs are great too, they are wonderful.

We set up RDP on our clients, but it's Atlanta LAN, the LAN RDP. If you get on the VPN, then the allow group, you can actually RDP, you make the VPN connection to it. You can also then do a site-to-site VPN and they make it very simple. Overall, the VPN features are wonderful.

The zero deployments are wonderful with this. With Zero deployment, you don't have to touch the firewall. When the firewall arrives on-site, you have a smart hands technician to unplug the old one and you plug in the new one. It automatically downloads the configuration offline. No technician will ever have to physically touch that firewall. It can all be done through the command center once the firewall connects to it. Everything is automatically added once you purchase it and it will download the proper configuration for that site.

They don't have any feature that allows you to drop the session. If you log in and you see your ARP table with many connections and you want to drop one for some reason or another, such as troubleshooting, or It's an employee that shouldn't be online and you want to remove them, you don't have the ability to click on a session and terminate it.

I have been using Untangle NG Firewall for two years.

We use the most up-to-date version. 

All of our firewalls are always up-to-date through the command center. We always update them as soon are they are released.

Untangle NG Firewall works great. I have no issues with the stability and I have yet to replace a box.

It's fully scalable. It's great for large corporations and it's great for small businesses.

They even make a version of their Untangled box for residential use.

Overall, scaling is pretty easy.

The technical support is wonderful. They are all US-based out of Colorado.

When you need help, you are not talking to a level-one technician; you are speaking with an engineer.

They don't have to remote into your computer, they can enable the back end. They have the ability to enable a remote session to where they can remote inject to the firewall and see what is going on and try to help you.

We used SonicWall. The reason why we stopped using SonicWall is that it is expensive to get a single pane of glass with SonicWall to have the heads-up on issues.

I like the licensing model and the pricing model that Untangle has compared to SonicWall.

I like the hardware as a service feature that Untangle has. SonicWall didn't have it at the time that I was using it but they may have it now.

I like the general use of the appliances. It is a little easier to navigate through, in my opinion, than it is with SonicWall.

The site-to-site VPN is just as easy to set up between SonicWall and Untangle. They both make it easy to do site-to-site VPN.

They both make it easy to set up regular VPNs.

The difference between Untangle and SonicWall is, SonicWall has an SSL VPN, where you go to a website versus Untangle that has an application installed on the PC for VPN. If you have a lot that you need to deploy, you have to touch the client's machines and set it up for them, versus just having a website to go to, to sign in. That's one of the major differences between the two.

You can have templates that simplify the process.

They will back up the firmware for you to configure. Your firewall is backed up all of the time on the command center. If you make a change and it's bad, you can push the bad config down, and put the old one back into it. Or before you make a change, you can back up the config into the cloud and the controller, then you can make the change.

With Zero deployment, so you can have a general template that you push onto all of the devices. If you need to dropship one to somebody somewhere that's not local, just get a smart hands tech. They can plug it in and once it hits the internet, it automatically downloads its config off of the server.

We maintain this solution ourselves, but technical support will help if we need help with anything.

One person can maintain a whole fleet. You can have thousands of them out there and one person could easily maintain them because it's all in one portal, and all of the alerts get generated.

If there is an issue then you get an email with an alert or a text message letting you know that there is something wrong. It makes it easy to deal with.

The pricing model is better than with SonicWall.

I am not able to discuss the pricing specifically because pricing with every partner is different.

The reason we chose this solution is because of their support. It is hands down the best support that I have had with a firewall. I don't have to open a case first. With SonicWall, you have to call a level one, they open a case, and they transfer you to an engineer.

With Untangle, you can call or email support, or the community. They have wonderful community support for everything. They have a log of knowledge-based articles.

I would rate the support a ten out of ten.

It doesn't matter what company you go with for our firewall. They're all going to have their caveats that somebody isn't going to like.

There are features that you might like on one that you may not like on the other, but I look at the overall simplicity of it, the overall usability and ease of use, and also that it's easy to train a technician on how to set them up. They are not that difficult.

I would rate Untangle NG Firewall a ten out of ten.

We are a reseller of their product. We use their appliances and their firewall software. Normally, we've got most of our clients from referrals that had been hacked before, and we told them to migrate to stop that from happening again. That's the main reason for the firewall and for the software that goes along with it.

We are using its most recent version. We always keep it up to date.

The web blocking for my clients and the application control are valuable.

Their tech support has been wonderful when we needed it. That's one reason we stuck with them for so long.

On their low-end appliance, they could have more memory and the largest storage space. The low-end appliance comes with a too-small hard drive, and it could use a little extra room. It only comes with about 4 gigs or 8 gigs of memory, and the hardware space is only 40 gigs, which is really small.

All my other complaints about it have all been fixed with the latest addition. There is not much more that I can see that they need to do at the moment.

I have probably been using this solution for 10 years.

So far, it has been excellent. Untangle can be run on our own computer. You can build a dedicated computer and learn, and that's how we used to do it until they came out with their appliances.

We have about 14 or 15 clients who use this solution. We usually work with small businesses with about 3 and 50 machines, and it has scaled perfectly. We don't usually go over 50. If a company has more than 50 employees, they are ready to hire someone full-time. In fact, we've interviewed for companies to hire an IT person because the others have no idea what to look for. We only had one client with 130 machines, and there was no problem with scalability.

Their technical support has been excellent. When I first got the solution, I didn't know much about it, and they walked me through everything. I've had a couple of difficulties or problems, and they were able to resolve them with me. So, they tend to support that. I don't think they have what I see as a technical support department because every time I've called them, I've gotten one of two or three people, and all of them were good.

Usually, our clients switch from SonicWall. The reason for switching is that 
they are going to have to buy a new appliance because it's so old. It is not going to be supported anymore. There is also the cost difference with Untangle. Untangle is a much better buy for the money than SonicWall. SonicWall is a lot more complicated to use for somebody not familiar with its interface than Untangle. The same is true for WatchGuard. WatchGuard is easier than SonicWall, but it still has a learning curve. Untangle also has a learning curve, but it is the easiest one for somebody who doesn't know.

It is one of the easiest ones to set up for first-time use as compared to SonicWall and WatchGuard, which are two of the other firewalls I deal with the most. If you plug in the client, it just works. You can make your adjustments but it's mostly for novices. For some of our small businesses, you just plug it in, and it starts working and then we make the adjustments. The nice thing is you can adjust everything remotely.

It takes about an hour to get it set up perfectly. It starts working out of the box, but we need to add some rules to it.

Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source.

You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old.

It is very easy, and if you have any questions, their tech support will help you in a heartbeat. They have excellent documentation on the web. You can even get Untangle free for home use.

I would rate this solution a nine out of ten.

We have discussed areas of improvement with the vendor in the past and over time. The good thing is they regularly give us updates and each time one comes, it includes some of the changes that we discussed.

This is a product that improves day by day, with the addition of features that are being demanded in the market. We have applications hosted locally that this has a positive effect on. One example is that they have improved their email security, which is something we have configured in our environment. 

At times, the vendor has given us notifications on zero-day attacks and information about things we need to do.

This firewall has a lot of features and we are using all of them.

What I like about this product, which is the reason that we continue to use it, is that you can install the software version on your own hardware. In case there is a problem with the hardware, we can just install the firewall in another machine and restore the configuration. This is unlike using a device with hardware that is vendor-specific. We had such a problem one time, and it required that we had to purchase more hardware.

They do not offer 100% of the features that we need.

The biggest challenge that we have with this solution is local support. The local support is a problem in our area.

I have been working with Untangle NG Firewall for approximately seven years, since 2014.

Nowadays, stability is good. In the past, there were problems with stability but this is something that the vendor has worked on to improve.

We have still had issues but when we looked at the details, we found that it was a problem with our hardware. It wasn't optimized to work in that environment. Once we increase the hardware to match the requirements, it was fine and started working well.

This is a scalable solution. We are using the Complete version, which means that we automatically receive any new feature that comes out. Furthermore, if we want to add more users or devices, it is just a matter of communicating that, and the system automatically adjusts to the capacity that we need.

The local technical support does not understand the product very well. It's very hard to find a technical support person that can fully configure the system. At times, we find it easier to learn it ourselves and improve it internally.

In terms of configuration, it's straightforward. It's not complex, except when a new solution comes out because you really need to have time to learn it.

This is not an expensive product. It is affordable and there are different packages available depending on the features that you need, or the sector that you are in.

We use a version for the public sector. There is a version specific to the education sector as well as other industries. Feature-wise, you can choose what you need. For example, if you want only to handle a gateway or maybe an SD-WAN, as a package, then that is an option. If you want to handle web filtering, you'll only handle web filtering. The package that we use is Next Generation Complete. We chose this because we use all of the features, including bandwidth control, in terms of load balancing.

Untangle NG Firewall is something that I recommend, although we have only tried the software version. We have not tried the hardware appliance. That said, we have used the software version for approximately seven years and it has worked well. It is flexible, and if you want to choose to upgrade automatically then it will do the updates by itself, as long as it's connected.

This is a good product but in the security field, you can't simply just say that everything is fine. There is always room for improvement.  Although they do not offer 100% of the features that we need, we are not interested in changing to another solution at the moment.

I am somewhat hesitant to discuss features that this product needs because we have not learned the entire solution. We do not understand all that it has to offer and as such, we might suggest that it needs a feature that is already there.

My advice for anybody who is implementing Untangle is to fully understand their needs. Then, compare their requirements against what the solution is offering. It works well for us but our needs may not be the same as someone else. Companies and business entities are always different.

I would rate this solution an eight out of ten.

This solution has been great for our use case, and we deploy it on-premises.

We find the web filter very valuable. In this part of the world, bandwidth is expensive, and we don't have too much bandwidth. So, the web and application filters are used a lot to block these torrents.

The primary issue we have is the two-week wait time for replacement hardware parts when we need to replace them. The hardware barely crashes, but when it does crash, it is because we do not have stable electricity in this part of the world. Secondly, the storage is minimal, so we have to set the system to delete data after seven days. This may not be ideal because we will have issues if we want to analyze for an extended period, as some of the clients we deployed the solution for use the data that is derived from Untangle NG Firewall for part of their bonus payment. For example, they analyze staff visiting R&D-related sites and how often they spend on them to see whether the individual is progressing. However, due to storage limitations, these clients have problems properly analyzing. Additionally, the package's branding and documentation can be improved as the interface is a lot easier to allow less script because we've been trying to use fewer script certificates and continue to face difficulty.

We have been using the solution for approximately four years.

The solution is stable. I rate the stability a nine out of ten.

I rate the scalability a six out of ten. We have 13 users utilizing the solution in our organization.

Customer service and support are not very helpful. I rate them a three out of ten.

Negative

The initial setup is straightforward. It can be set up in less than an hour.

We are resellers, and we also do the integrations and monitoring for our users. So, for example, Untangle NG Firewall has a way of connecting remotely. We do the remote management for the Untangle NG Firewall, review their locks, and then send them a lodge if we believe they need to pay attention to certain things.

Depending on the market you are in, the pricing may be expensive. We consider it expensive, so I rate the pricing a five out of ten. However, not every company will go for it because we don't have many big companies here.

We made a comparison with one of our clients that is running Sophos. However, Untangle NG Firewall had better ease of maintenance, configuration and deployment.

I rate the solution a ten out of ten. The solution is good, but its storage and documentation can be improved. Nevertheless, I recommend the solution to people considering implementing it.

We use Untangle for most of our clients, which include law offices and some unions. Our clients are usually small offices with about 12 users. We do hardware-as-a-service and charge $32 a unit, including replacements.

NG Firewalls allow us to permit or deny applications we don't want to run. We also use content filtering, SSL inspection, and all the other things we run on the firewall to keep our clients protected and ensure they're not going where they shouldn't. It's a great firewall that works as intended. 

We have a minor issue when assigning IP addresses in the ARP tables. You should be able to go into the ARP tables, look at the IP address and say, "Nope, they need to be on this side on this IP address." The ability to set a DHP reservation from the ARP tables would be great. It's no big deal, but it would be nice to have. 

I've been working with Untangle NG Firewall for about three years.

Untangle is highly stable. We have several appliances out there, and I've only had to replace one because of a surge issue that was unrelated to Untangle. It was a problem with the electrical company, and we didn't have it on an APC backup system.

The scalability is great. You purchase the license you need for the number of users. When you're onboarding a new client, you need to know what they need in their office. They have multiple sizes. It isn't a one-size-fits-all solution. 

The setup is easy. Untangle ships you the firewall, and you add it to the dashboard. It backs up the config every night. You can do a zero deployment with it. It's endless. It's one of the easiest firewalls to deal with.

Our business philosophy is to give clients what they need, and they can grow into it. They have a firewall for every size of the business, whether it's 1 to 5 employees, 12 to 24 employees, or more. It's endless. You quote the right firewall for the right situation.

I rate Untangle nine out of 10 for affordability. The pricing model is based on the number of users. The license tiers are 12, 24, 50, and unlimited. 

I rate Untangle NG Firewall 10 out of 10. Give Untangle a shot if you're tired of overpriced firewalls like SonicWall. I used to sell nothing but SonicWall. The price point is high. Untangle can scale for nearly any business, and it gets the job done.