What is our primary use case?
We have
SonicWall NSa models including
NSA 2600, NSA 3600, and 6600 firewalls in our environment.
We have used the Deep Packet Inspection feature of SonicWall NSa. We adopted a security package that included Deep Packet filtering and inspection, which helps us reduce unwanted traffic, spam, and attacks from the outside world.
We also used SonicWall NSa's Intrusion Prevention system. It was a complete solution on that box, functioning as a next-generation firewall and covering all features, including email security and every security parameter.
What is most valuable?
The automated breach prevention feature is very important for the overall security of our organization. I experienced this significantly when I was working with InterGlobe, a large organization that faced a malware attack involving ransomware. During that incident, two or three business units were attacked, and many servers and laptops became compromised. At that time, we were the only organization that remained secure with a zero infection rate. When we checked the log activities, that firewall had blocked many attacks. InterGlobe has been using that SonicWall product for almost ten to fifteen years because of this protection.
What needs improvement?
The CPU configuration for SonicWall NSa, based on my experience, is average. It should be increased somewhat because we are not always aware of the load under varying organizational working standards. Sometimes the workload is low, and sometimes it is high, with data flow increasing significantly inside the organization. At those times, the CPU spikes considerably, and due to that, the firewall response becomes slow. Based on my experience, SonicWall should increase the CPU level of that firewall.
For how long have I used the solution?
We have been using
SonicWall TZ for more than ten years because we deployed the firewall around 2013 or 2014. InterGlobe continues to use SonicWall firewalls to this day.
What do I think about the stability of the solution?
We experienced changes in network performance and latency with SonicWall NSa's SSL and TLS distributed decryption capabilities. When encryption was enabled with SSL, this caused some latency. However, configuration changes have been made that have reduced that latency.
What do I think about the scalability of the solution?
Technically speaking, SonicWall NSa is very supportive and capable of handling everything from smaller organizations to big enterprise-level organizations on a model-wise or configuration-wise basis. All aspects are quite manageable, and many things have improved. The only drawback I mention is that when there is a load on that firewall, the CPU performance should be increased somewhat.
How are customer service and support?
When we face any challenges or technical issues with the firewall, SonicWall support is always available to help us on an immediate basis.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We moved from Cisco to SonicWall. Before moving to SonicWall NSa, we evaluated numerous products, including POCs from Palo Alto, Cisco, and Juniper. We tested each firewall. Our first priority was looking for a high availability firewall with active standby configuration.
How was the initial setup?
Installing SonicWall NSa was very easy because we were previously using Cisco firewall and Cisco
ASA. We migrated from Cisco
ASA to SonicWall NSa. The migration took hardly three to four hours for manual configuration. I completed the configuration and migration without taking any support from anyone. SonicWall NSa is very easy to use; the GUI is lightweight, making it very much easy to create firewall rules, policies, NAT policies, and to update security settings such as IPS, email, and geo-filtering.
What about the implementation team?
We worked with SonicWall through a channel partner, specifically Dell India Services, which was our channel partner through which we procured it. We have a SonicWall account manager, and we are regularly in touch with them as well as with the Dell account manager.
What was our ROI?
SonicWall NSa has provided a return on investment in the long run, helping us achieve cost reductions. Our budget compared to Cisco and other products was significantly lower. We had budgeted about thirty lakhs, but after negotiating with SonicWall NSa, we saved almost ten lakh rupees in a year.
What's my experience with pricing, setup cost, and licensing?
I am overall satisfied with everything, including the price.
Which other solutions did I evaluate?
Before moving to SonicWall NSa, we evaluated numerous products, including POCs from Palo Alto, Cisco, and Juniper. We tested each firewall.
What other advice do I have?
I am familiar with
SonicWall TZ. I have done a POC of TZ but I have not worked extensively with it. I have worked with the 2600 firewall and then the 3600. These are the models which we have worked with.
SonicWall NSa was an on-premises solution. The two firewalls which were in production, in the data center and on the LAN side, were both on-premises solutions.
We had a pre-decided budget under which we would purchase the firewall. All parameters including security, high availability, and budget concerns were covered with SonicWall NSa being implemented at that time. SonicWall NSa is a user-friendly product that is easy to configure, and it is easy for network personnel and firewall administrators to work with. Even the L1 team captured and learned this firewall effectively, helping us resolve all parameters related to high availability firewalls within budget-friendly costs.
I rate this review a nine out of ten.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other