Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON
 ·TekSavvy Solutions..
| reply to bbarrera
Re: ZyWALL USG 100 v2.12(AQQ.0)C0 firmware is out
Although the ZLD development is too slow for my taste, it's good to see it's moving and bugs are fixed and new features introduced.
I just wish ZyXel would more listen to community and pick up the pace on critical issues. ...competition is not asleep.
--
openSUSE 11.1, KDE 4.2 |
|
jmpage2
join:2005-02-24
Littleton, CO | The reality is that there is no other $500 SSL UTM, at least not one that has any kind of real market support.
Despite the numerous shortcomings the USG family is still the most competitive UTM in class if you require SSL VPN. |
|
idolclub
join:2003-12-24
| said by jmpage2  :The reality is that there is no other $500 SSL UTM, at least not one that has any kind of real market support. Despite the numerous shortcomings the USG family is still the most competitive UTM in class if you require SSL VPN. Draytek VigorPro 5300 SSL VPN UTM Router, bundled with 30 SSL VPN Tunnels, also a good choice. |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Indeed, Draytek routers are quite good and feature rich for decent money.
--
openSUSE 11.1, KDE 4.2 |
|
jmpage2
join:2005-02-24
Littleton, CO | reply to idolclub
The Draytek routers with SSL VPN that I found cost over $800, so the USG 100 at $480 is a heck of a lot cheaper. |
|
mozerd
Light Will Pierce The Darkness
Premium,MVM
join:2004-04-23
Nepean, ON
| said by jmpage2 :The Draytek routers with SSL VPN that I found cost over $800, so the USG 100 at $480 is a heck of a lot cheaper. The VigorPro 5300n provides a remarkable value proposition in view of the fact that it also includes outstanding wireless 'N' [utilizing highend Ralink 'N' tech].
»www.guideband.com/product_info.p···s_id=131
--
David Mozer
IT-Expert on Call
Information Technology for Home and Business |
|
bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
·SureWest Internet
| reply to jmpage2
said by jmpage2 :The reality is that there is no other $500 SSL UTM, at least not one that has any kind of real market support. Despite the numerous shortcomings the USG family is still the most competitive UTM in class if you require SSL VPN. Curious if anyone has looked at new Sonicwall lineup and pricing:
»www.sonicwall.com/us/products/13281.html
I still have an old SOHO3 at my brother-in-laws, and do understand that Sonicwall charges for access to firmware updates and of course they have various subscriptions if you want added features. Wondering how these stack up against ZyWALL USG series. |
|
jmpage2
join:2005-02-24
Littleton, CO
| The Sonicwall TZ210 would be the closest thing to the ZyXel USG 100 (2 GigE ports, USB ports, 2 SSL clients, etc)... it does have the added benefit of integrated 802.11G/N.
It requires extra $$$$ though for features that are standard on the ZyXel box, such as an SPI firewall, which carries an annual subscription charge of around $150.
The box itself costs $850 or almost double what USG 100 costs.
I do believe that Sonicwall has far better phone support, etc, than ZyXel, but the boxes cost a LOT more. |
|
bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
·SureWest Internet
| On a throughput spec basis the TZ210 looks similar to USG300, and therefore is cheaper on hardware alone vs USG300. I'm not counting subscription costs which add up fast with Sonicwall.
The SPI firewall is standard on all the low-end Sonicwalls. On paper the SSL VPN supports all Windows, Mac and Linux versions of interest. Their IPSec VPN has long supported DHCP over IPSec, which is sorely missed in ZyWALL. |
|
jmpage2
join:2005-02-24
Littleton, CO
| Actually it looks like the TZ200 is comparable to the USG 100 but lacks gigabit interfaces (which might not be much of a concern for many enterprises).
The TZ 200 does not have application firewall capability but I'm not sure if that's such a big deal.
It has 35mbps UTM throughput and actually looks like a pretty interesting product but Small Net Builder dinged Sonicwall TZ 190 for having weak hardware reliability. |
|
jmpage2
join:2005-02-24
Littleton, CO
| I've been reading more and more about the new Sonicwall TZ series (100/200/210) and I'm really liking what I am reading.
Aside from the sting of not having gig-e interfaces, these UTM routers look quite competent and surprisingly affordable. TZ 100 Wireless-N costs under $500 with a one year license to all UTM services, has zone support, includes one SSL VPN license, supports up to 5 VPN tunnel connections with other gateways, etc.
Starting to look pretty damn good to me. The user documentation and support forum kick the crap out of what I've seen so far of ZyXel too.
Only big downside I'm seeing at the moment is no free access to firmware support, although if you have current licenses for support contracts or UTM services it looks like they throw that in for free. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
 ·Comcast
2 edits | said by jmpage2 :I've been reading more and more about the new Sonicwall TZ series (100/200/210) and I'm really liking what I am reading. Only big downside I'm seeing at the moment is no free access to firmware support, although if you have current licenses for support contracts or UTM services it looks like they throw that in for free. Correct. And have you seen the fees that Sonicwall charges to keep support going? Can you say THIEVES?
And you have to get the Enhanced OS if you want dual WAN load balance. |
|
bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
·SureWest Internet
| Sure but I've got customers using ZyXEL, saving money and not getting what they really want. Its great to save money but if another vendor delivers the right features and the price is reasonable then its money well spent. I was pleasantly surprised to see that Enhanced OS is bundled with TZ100, TZ200 and TZ210. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
·Comcast
| Hmmm. Thanks for the clarification that the Enhanced OS comes with the new TZ products. I just confirmed that myself. I also see that the support pricing for the TZ series is a little less painful. Not too bad for Sonicwall. I guess the poor economy has gotten them to rethink their pricing strategies. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
·Comcast
1 edit | reply to bbarrera
said by bbarrera :Sure but I've got customers using ZyXEL, saving money and not getting what they really want. Its great to save money but if another vendor delivers the right features and the price is reasonable then its money well spent. I was pleasantly surprised to see that Enhanced OS is bundled with TZ100, TZ200 and TZ210. Can you share some of the issues your customers have with Zyxel USG series units? Is it mostly related to SSL VPN support on Windows Vista/7? |
|
jmpage2
join:2005-02-24
Littleton, CO
1 edit | reply to claykin
The prices are not bad at all. Buying a TZ 100 bundled with 1 year of full support, enhanced OS, updates, 24X7 tech support is under $320.
3 years of full support is only another $270.
That's actually very reasonable, especially as their full applications suite now throws in 24X7 support, content filtering, warranty extension all in addition to the standard AV, anti-spam, etc.
I like the fact that they bundle in an SSL and standard client license for VPN too so that both can be tried out.
I have gone ahead and ordered a TZ100 wireless from firewalls.com and they matched sonicguard prices. I will give this a shot in my wife's business and we'll see how it goes. I wish the box had dual gig-e interfaces so that I could put servers and workstations in different zones but I will live without that as I'm much more concerned with external threats anyway.
The SSL license, DHCP over VPN, etc, at these prices, not to mention running 1.5X faster than USG 100 clinches it for me. |
|
bbarrera
Premium,MVM
join:2000-10-23
Sacramento, CA
clubs:
·SureWest Internet
1 edit | reply to claykin
said by claykin :Can you share some of the issues your customers have with Zyxel USG series units? Is it mostly related to SSL VPN support on Windows Vista/7? Yes, Vista/7 along with Mac OS X. |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
·Comcast
| reply to jmpage2
said by jmpage2 :The prices are not bad at all. Buying a TZ 100 bundled with 1 year of full support, enhanced OS, updates, 24X7 tech support is under $320. 3 years of full support is only another $270. That's actually very reasonable, especially as their full applications suite now throws in 24X7 support, content filtering, warranty extension all in addition to the standard AV, anti-spam, etc. I like the fact that they bundle in an SSL and standard client license for VPN too so that both can be tried out. I have gone ahead and ordered a TZ100 wireless from firewalls.com and they matched sonicguard prices. I will give this a shot in my wife's business and we'll see how it goes. I wish the box had dual gig-e interfaces so that I could put servers and workstations in different zones but I will live without that as I'm much more concerned with external threats anyway. The SSL license, DHCP over VPN, etc, at these prices, not to mention running 1.5X faster than USG 100 clinches it for me. Please let us know how it works for you. I'm very interested. |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Yes, please post back. |
|
jmpage2
join:2005-02-24
Littleton, CO
2 edits | I will report back in about a week and a half assuming that the unit ships out on time.
I ordered this device;
»www.firewalls.com/sonicwall-soni···ear.html
Which they were kind enough to PM against this;
»www.sonicguard.com/TZ100Wireless.asp
So we paid $371.95 for the wireless TZ 100 with a full year on all services as well as content filtering, reporting engine, etc. This gives us the added benefit of a much needed upgrade from the weak sauce WRT54GL wireless access point currently deployed and eliminates two devices from our management pool in one go (we also will retire the Linksys RV042 that I want to hit with a hammer as I hate it so much). If things work out I will add another 3 yrs of support for $266 which is pretty reasonable as it includes all services and 24/7 tech support.
I have a lot of experience with routers and switches (I do VoIP/SIP stuff for a living) but very little security/UTM type experience so this will be an interesting test. I have heard good things about the Ehanced OS for Sonic so we will see how it goes with this new TZ series UTM.
I will let you all know how it goes. |
|
