Enterprise NGFW Comparison Guide

Enterprise Data
Center Firewall
Solutions

Relevant Products/
Modules

Price

Firewall
Throughput

IPS/NGFW
Throughput

Antivirus
Throughput

Switch Ports

Certifications

FortiGate 1500D

$$$

80 Gbps

11 Gbps

13 Gbps

18x 1GE ports,

NSS Labs NGFW 2014 | Virus Bulletin VB100,
16x 1GE SFP ports VBSPAM | AV Comparatives Top Rated |
8x 10GE ports
ICSA Labs: IPsec, IPS, Antivirus, SSL-VPN | IPv6
Ready Phase 2 Logo | CVE-Compatible
Products and Services | Common Criteria EAL2+
and EAL4+ certifications | FIPS 140-2 | ISO
9001:2008 | DISA UC APL | NIST SCAP Validation

ASA 5555-X

$$$

4 Gbps

1.3 Gbps

Up tp 4 Gbps

8x 1GE Ports

Certifications Pending (Per Product Data Sheet)

CheckPoint 4800

$$$

5.8 Gbps

1.1 Gbps

Vendor does
not disclose

Up to 4x 1GE or
2x 10GE ports

NSS Labs 2013 | ICSA Labs | FIPS 140-2

VPN Consortium

PA-3060

$$$$

500 Mbps

2 Gbps

1 Gbps

8x 1GE Ports
2x 10GE Ports

ICSA Labs | Common Criteria EAL4+

FIPS 140-2 | USGv6 | C APL | NEBS
ANSSI Top-Level Certification

FEATURE

DEFINITIONS

Firewall Throughput

Rate at which the firewall can support traffic.

IPS/NGFW Throughput

Rate at which the firewall can inspect incoming traffic with NGFW features enabled.

Antivirus Throughput

Rate at which the firewall can inspect incoming traffic with Antivirus enabled.

Switch Ports

Number of 1GE & 10GE Ports.

Certifications

Industry third-party certifications for security awarded to the product.

All data compiled from solution provider data sheets and websites by Might Guides Industry Analysts.

Footnotes:
1. Available expansion/extensible through
Cisco ASA 5500-X Series 6-Port GE Interface
Cards.

$ < $ 5,000
$$ between $5,000 to $20,000
$$$ between $20,000 to $ 30,000
$$$$ > $30,000

Contact Us: david@mightyguides.com, David Rogelberg, Publisher of Mighty Guides, Inc.