Cisco Adaptive Security Appliance (ASA) Software vs. SonicWall NSA Series

We moved our operations entirely to the cloud a few years ago. We loved the stability and scalability of the ASA and wanted to, somehow, keep using it. We discovered that ASA was available in the cloud as well and it was branded ASAv. We tested it and noticed that it was equally robust and a perfect fit for us. During the entire migration period, we used ASAv for cloud operations and put a lot of load on it. ASAv performed very well and gave us an easy transition from on-prem to the cloud.

Incentivized

SonicWall NSA is best suited for small to mid-size companies or small to medium K-12 school districts. It's less appropriate for larger businesses and schools. This is due to their ease of use and well-rounded feature set but lacks in advanced configuration, performance, and reliability.

Incentivized

• How we can manage: ASDM the GUI is so much easier to manage it even for a new guy also.
• Traffic handling capacity
• More secure and the different features it gives.
• Support from the TAC team or from the community manages to handle issues very efficiently.

Incentivized

• Relatively inexpensive compared to some of the higher-end products, like Palo Alto Networks.
• Easy to set up, as the SonicWall NSA interface is consistent across all models.

Incentivized

• The Java based ASDM can botch commands and isn't compatible on some more locked down systems.
• Monitoring. Really the same complaint as above, the monitoring available through the ASDM is crappy at best. A much better solution is to send the logs and mirror packets to a SEIM, but that can create issues of its own when looking for realtime analysis.
• Compatibility across other ASA models. ASA 5520s don't play well with 5525X which don't play well with older 5510s. Each is great on it's own, but it's next to impossible to logically stack them or have them as layers of firewalls in an infrastructure.
• Lack of cloud based management. The Cisco Meraki security devices do this well, but the ASAs are still behind in this regard.

Incentivized

• Ideal with smaller businesses. Would have to examine for more complex needs of larger businesses.
• Scalability might be an issue for super large organizations.

To be honest there has been now great products out in the market compared to Cisco ASA. I beleieve Cisco has to do a lot of improvement in this area. The other defeiniete factors is the cost when it comes to renewals which is always a premium on Cisco products

Incentivized

The usability takes a bit of training, like any firewall, but I've found that showing even Tier 1 helpdesk how to do basic things has been easy. We have entry-level IT technicians performing white-listing, IP entries, VPN access and LDAP functions, to name a few tasks. The menus in the GUI are pretty straight forward.

Incentivized

I generally have not noticed the outages, however since it's a machine it can malfunction, we need to implement the firewall infrastructure in such a way that it is highly available with device failure, region failure etc. Else any solution will be having the issues if they are not build with resiliency.

Incentivized

The support is usually very good and gets back to you very quickly. However I had some instances of when two engineers will give me wildly different answers to what I thought was a simple question. Overall however I do rate the support highly and they are generally always very good.

Incentivized

Most of the time, calling SonicWall NSA Support, you get an expert who can help resolve your issues. RMAs are pretty easy once they determine there is an issue with the hardware. Support is available 24x7, which makes emergency calls easy. The only downside is the support engineers may have thick accents; however, their expertise more than makes up for any language barriers.

Incentivized

It was quite a good one, how ever requires an expertise to deploy hence the SMB segment would be finding it difficult to implement this product. The one good reason is that there are lot of ASA certified engineers in compared to the other certified engineers. Hence this resembles positively on the deployment as you have quite a lot of experienced engineer on your deployment

Incentivized

Cisco has made it easy to buy, set up, and manage all of our firewalls with the central FirePower Management Center. All licensing is done via one license portal too. Tech support is standardized for all ASA devices and like support engineers who know the different models to provide timely help for any issues. Cisco Talos is a premier could platform which scours the internet looking for threats and develops protections for the ASA's and as such provides zero second coverage when it best can detect global issues.

Incentivized

The SonicWall NSA is a lot more fluid and much less clunky than a Watchguard firewall. The Watchguard is ok for a small business-- you can buy them at retail outlets. But as you can see above, this model of Watchguard Firebox has been discontinued. The NSA classes are a more high-end and functional business-class firewall.

Incentivized

• I know a customer who is still using a Pix[.]
• The 5510 is still being used in one of our setups, and still doing its job this is a lot of Return on Investment.
• We have managed to turn around projects quickly because most of our engineers understand this firewall very well. We deploy them in a matter of minutes[.]

Incentivized

• It is a firewall appliance at an affordable price compared to other firewall vendors.
• It is reliable and thus, allows our business to operate without any hiccups.

Incentivized