Sophos Firewall

Untangle NG Firewall

Untangle NG Firewall is a modular next-generation firewall platform that consolidates network security functions like content filtering, intrusion prevention, ransomware protection, and VPN into a single console instead of requiring multiple separate vendor products. Following its acquisition, the product now operates under Arista Networks as part of the Edge Threat Management (ETM) platform, with NG Firewall remaining the core product and a cloud-based ETM Dashboard, including a mobile app, for centralized management. The platform is aimed at organizations that need enterprise-style network security without a large in-house security team, and it is used across education (K-12 and higher ed), government, healthcare, financial services, nonprofits, and hospitality. Special pricing is available for qualifying public institutions, nonprofits, and government organizations, and a free trial and online purchase configurator are offered directly on the site.

SonicWall

SonicWall makes next-generation firewall appliances that inspect every network packet, including encrypted traffic, to detect and block malware and intrusion attempts in real time. Its Capture Cloud Platform automatically pushes updated security signatures, and unknown files can be detonated in cloud sandboxes to catch zero-day threats before they reach endpoints.

OPNsense

OPNsense is an open-source firewall and routing platform built on FreeBSD, offering a stateful firewall for IPv4/IPv6, multi-WAN load balancing and failover, and hardware failover via the CARP protocol. It bundles multiple VPN options (IPsec, OpenVPN, WireGuard, Tinc), an intrusion prevention system powered by Suricata, and NetFlow-based traffic reporting, all managed through a web GUI. The core platform is free under a permissive BSD/MIT license and can run on anything from a fanless mini-PC to a rack appliance, including official OVA images for virtualization. A paid Business Edition adds a Web Application Firewall, extended threat-intelligence blocklists, centralized fleet management (OPNcentral), and training/e-book resources for organizations that need vendor-backed support.

WatchGuard Firebox

WatchGuard Firebox is a line of next-generation firewall (NGFW) products spanning physical appliances, virtual instances, and cloud deployments. The lineup includes tabletop T Series appliances for small businesses and rackmount M Series appliances for enterprises, plus FireboxV for virtualized environments and Firebox Cloud built specifically for AWS and Azure. Its Unified Threat Management services bundle AI-powered antivirus and advanced threat protection with sandboxing. Firebox also provides enterprise-grade VPN for secure remote access and, through FireCloud Gateway integration, zero trust access so remote users and private applications can be reached securely through the same appliance. WatchGuard positions Firebox for small and medium businesses, distributed enterprises with multiple locations, and organizations needing cloud infrastructure security, with flexible modular licensing and pricing available directly from the company.

pfSense

pfSense is an open-source firewall and router platform built on a hardened FreeBSD base, offering enterprise-grade capabilities like Snort-based intrusion detection and prevention, traffic shaping, native IPv6, and site-to-cloud VPN connectivity. It is free to run as Community Edition software on your own hardware or as a virtual machine. For organizations that want a managed path, developer Netgate sells physical hardware appliances, virtual appliances on AWS and Azure starting around $0.08/hour, and commercial support and training. pfSense is used from small offices to large enterprises for firewalling, routing, and VPN connectivity between sites and clouds.

Check Point Next Generation Firewall

Check Point Next Generation Firewall delivers high‑performance, stateful inspection combined with advanced threat prevention, intrusion detection, and application control. It integrates with Check Point's Security Management platform to provide centralized policy management and real‑time visibility across on‑premise and cloud environments. The solution supports both hardware appliances and virtualized instances, offering flexible deployment options for data centers, branch offices, and hybrid cloud workloads. Built‑in sandboxing, anti‑bot, and anti‑virus engines protect against known and unknown threats while maintaining low latency.