bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
 ·SureWest Internet
| reply to jmpage2
Re: ZyWALL USG 100 v2.12(AQQ.0)C0 firmware is out
On a throughput spec basis the TZ210 looks similar to USG300, and therefore is cheaper on hardware alone vs USG300. I'm not counting subscription costs which add up fast with Sonicwall.
The SPI firewall is standard on all the low-end Sonicwalls. On paper the SSL VPN supports all Windows, Mac and Linux versions of interest. Their IPSec VPN has long supported DHCP over IPSec, which is sorely missed in ZyWALL. |
|
jmpage2
join:2005-02-24
Littleton, CO
| Actually it looks like the TZ200 is comparable to the USG 100 but lacks gigabit interfaces (which might not be much of a concern for many enterprises).
The TZ 200 does not have application firewall capability but I'm not sure if that's such a big deal.
It has 35mbps UTM throughput and actually looks like a pretty interesting product but Small Net Builder dinged Sonicwall TZ 190 for having weak hardware reliability. |
|
jmpage2
join:2005-02-24
Littleton, CO
| I've been reading more and more about the new Sonicwall TZ series (100/200/210) and I'm really liking what I am reading.
Aside from the sting of not having gig-e interfaces, these UTM routers look quite competent and surprisingly affordable. TZ 100 Wireless-N costs under $500 with a one year license to all UTM services, has zone support, includes one SSL VPN license, supports up to 5 VPN tunnel connections with other gateways, etc.
Starting to look pretty damn good to me. The user documentation and support forum kick the crap out of what I've seen so far of ZyXel too.
Only big downside I'm seeing at the moment is no free access to firmware support, although if you have current licenses for support contracts or UTM services it looks like they throw that in for free. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
 ·Comcast
2 edits | said by jmpage2  :I've been reading more and more about the new Sonicwall TZ series (100/200/210) and I'm really liking what I am reading. Only big downside I'm seeing at the moment is no free access to firmware support, although if you have current licenses for support contracts or UTM services it looks like they throw that in for free. Correct. And have you seen the fees that Sonicwall charges to keep support going? Can you say THIEVES?
And you have to get the Enhanced OS if you want dual WAN load balance. |
|
bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
·SureWest Internet
| Sure but I've got customers using ZyXEL, saving money and not getting what they really want. Its great to save money but if another vendor delivers the right features and the price is reasonable then its money well spent. I was pleasantly surprised to see that Enhanced OS is bundled with TZ100, TZ200 and TZ210. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
·Comcast
| Hmmm. Thanks for the clarification that the Enhanced OS comes with the new TZ products. I just confirmed that myself. I also see that the support pricing for the TZ series is a little less painful. Not too bad for Sonicwall. I guess the poor economy has gotten them to rethink their pricing strategies. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
·Comcast
1 edit | reply to bbarrera
said by bbarrera :Sure but I've got customers using ZyXEL, saving money and not getting what they really want. Its great to save money but if another vendor delivers the right features and the price is reasonable then its money well spent. I was pleasantly surprised to see that Enhanced OS is bundled with TZ100, TZ200 and TZ210. Can you share some of the issues your customers have with Zyxel USG series units? Is it mostly related to SSL VPN support on Windows Vista/7? |
|
jmpage2
join:2005-02-24
Littleton, CO
1 edit | reply to claykin
The prices are not bad at all. Buying a TZ 100 bundled with 1 year of full support, enhanced OS, updates, 24X7 tech support is under $320.
3 years of full support is only another $270.
That's actually very reasonable, especially as their full applications suite now throws in 24X7 support, content filtering, warranty extension all in addition to the standard AV, anti-spam, etc.
I like the fact that they bundle in an SSL and standard client license for VPN too so that both can be tried out.
I have gone ahead and ordered a TZ100 wireless from firewalls.com and they matched sonicguard prices. I will give this a shot in my wife's business and we'll see how it goes. I wish the box had dual gig-e interfaces so that I could put servers and workstations in different zones but I will live without that as I'm much more concerned with external threats anyway.
The SSL license, DHCP over VPN, etc, at these prices, not to mention running 1.5X faster than USG 100 clinches it for me. |
|
bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
·SureWest Internet
1 edit | reply to claykin
said by claykin :Can you share some of the issues your customers have with Zyxel USG series units? Is it mostly related to SSL VPN support on Windows Vista/7? Yes, Vista/7 along with Mac OS X. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
·Comcast
| reply to jmpage2
said by jmpage2 :The prices are not bad at all. Buying a TZ 100 bundled with 1 year of full support, enhanced OS, updates, 24X7 tech support is under $320. 3 years of full support is only another $270. That's actually very reasonable, especially as their full applications suite now throws in 24X7 support, content filtering, warranty extension all in addition to the standard AV, anti-spam, etc. I like the fact that they bundle in an SSL and standard client license for VPN too so that both can be tried out. I have gone ahead and ordered a TZ100 wireless from firewalls.com and they matched sonicguard prices. I will give this a shot in my wife's business and we'll see how it goes. I wish the box had dual gig-e interfaces so that I could put servers and workstations in different zones but I will live without that as I'm much more concerned with external threats anyway. The SSL license, DHCP over VPN, etc, at these prices, not to mention running 1.5X faster than USG 100 clinches it for me. Please let us know how it works for you. I'm very interested. |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Yes, please post back. |
|
jmpage2
join:2005-02-24
Littleton, CO
2 edits | I will report back in about a week and a half assuming that the unit ships out on time.
I ordered this device;
»www.firewalls.com/sonicwall-soni···ear.html
Which they were kind enough to PM against this;
»www.sonicguard.com/TZ100Wireless.asp
So we paid $371.95 for the wireless TZ 100 with a full year on all services as well as content filtering, reporting engine, etc. This gives us the added benefit of a much needed upgrade from the weak sauce WRT54GL wireless access point currently deployed and eliminates two devices from our management pool in one go (we also will retire the Linksys RV042 that I want to hit with a hammer as I hate it so much). If things work out I will add another 3 yrs of support for $266 which is pretty reasonable as it includes all services and 24/7 tech support.
I have a lot of experience with routers and switches (I do VoIP/SIP stuff for a living) but very little security/UTM type experience so this will be an interesting test. I have heard good things about the Ehanced OS for Sonic so we will see how it goes with this new TZ series UTM.
I will let you all know how it goes. |
|
jmpage2
join:2005-02-24
Littleton, CO | reply to idolclub
Some initial thoughts, unpacking video of TZ 100 N and photos posted to this DSL Reports Thread;
»Sonicwall TZ 100 Wireless N Photos and Unboxing Video |
|
jmpage2
join:2005-02-24
Littleton, CO
| Okay, I can't compare to the USG series of ZyXel routers, but I can say that my experiences with the Sonic are quite good. Set up was a snap and other than some wireless issues and a few minor interface bugs I would highly recommend this UTM.
The manual is well written and easy to understand. Enhanced OS programming is very easy to do through their web interface. Logging works very well and can be seen on the Web interface or you can have the logs dropped to you via email automatically.
Most important for me is that the SSL based VPN works perfectly. I have used it with two XP computers, Mac OS X machine and a Vista VMWare session and it works in every case. Only thing I had to do is for the VMware, which for some reason could not do Netbios resolution I had to put some HOSTS entries in for the servers we were using.
The only problems I've had with the unit revolve around the Wireless-N capability. I'm hoping future FW updates fix these, but in the mean time I've thrown a Wireless G bridge onto my network and turned off the wireless on the SonicWall.
I would give the product 4 out of 5 stars based on my experiences to date. |
|
jmpage2
join:2005-02-24
Littleton, CO | One more notable fact, the boot time on the TZ 100 is about 45 seconds. |
|
