Next Generation Firewall (NGFW) Security Value MapTM

About the NSS Labs Security Value MapEmpirical data from our individual Product Analysis Reports (PARs) and Comparative Analysis Reports (CARs) is used to create the unique Security Value MapTM (SVM). The SVM provides a quick, clear overview of the relative value of security investment options by mapping security effectiveness and value (TCO per protected Mbps) of tested product configurations. The SVM depicts the value of a deployment of twenty NGFW devices and the appropriate central management console for each vendor.

How To Use The SVMMapping the data points against the Average Protection and Average Value results in four quadrants on the SVM. Further up and to the right is the best. Quadrant 1 contains those products that are Recommended for both security effectiveness and value. These devices provide a very high level of protection, manageability and value for money.Further down and left is poor, and Quadrant 3 would comprise the NSS Labs Caution category – these products offer poor value for money given the 3 year TCO and measured security effectiveness rating.The remaining two quadrants comprise the NSS Labs Neutral category. These products may still be worthy of a place on your short list based on your specific requirements.

TCO per Protected-Mbps

100%

Average

$70 $60 $50 $40 $30 $20 $10 $0

Aver

age

95%

90%

85%

80%

75%

70%

65%

60%

55%

Fortinet (1)

Fortinet (2)

Cisco (1)Cisco (2)

Check Point

Dell SonicWALL

McAfee

Barracuda

Cyberoam

Palo Alto Networks

Cisco (3)

WatchGuard

September 2014

Product Legend

Cisco (3) ASA 5585-X SSP60

Cisco (1) FirePOWER 8350Cisco (2) ASA 5525-X

Fortinet (1) FortiGate-3600CFortinet (2) FortiGate-1500D

Check Point 13500

Dell SonicWALL SuperMassive E10800

WatchGuard XTM1525

McAfee NGF-1402

Barracuda F800b

Cyberoam CR2500iNG-XP

Palo Alto Networks PA-3020