WatchGuard Firebox

Untangle NG Firewall

Untangle NG Firewall is a modular next-generation firewall platform that consolidates network security functions like content filtering, intrusion prevention, ransomware protection, and VPN into a single console instead of requiring multiple separate vendor products. Following its acquisition, the product now operates under Arista Networks as part of the Edge Threat Management (ETM) platform, with NG Firewall remaining the core product and a cloud-based ETM Dashboard, including a mobile app, for centralized management. The platform is aimed at organizations that need enterprise-style network security without a large in-house security team, and it is used across education (K-12 and higher ed), government, healthcare, financial services, nonprofits, and hospitality. Special pricing is available for qualifying public institutions, nonprofits, and government organizations, and a free trial and online purchase configurator are offered directly on the site.

SonicWall

SonicWall makes next-generation firewall appliances that inspect every network packet, including encrypted traffic, to detect and block malware and intrusion attempts in real time. Its Capture Cloud Platform automatically pushes updated security signatures, and unknown files can be detonated in cloud sandboxes to catch zero-day threats before they reach endpoints.

OPNsense

OPNsense is an open-source firewall and routing platform built on FreeBSD, offering a stateful firewall for IPv4/IPv6, multi-WAN load balancing and failover, and hardware failover via the CARP protocol. It bundles multiple VPN options (IPsec, OpenVPN, WireGuard, Tinc), an intrusion prevention system powered by Suricata, and NetFlow-based traffic reporting, all managed through a web GUI. The core platform is free under a permissive BSD/MIT license and can run on anything from a fanless mini-PC to a rack appliance, including official OVA images for virtualization. A paid Business Edition adds a Web Application Firewall, extended threat-intelligence blocklists, centralized fleet management (OPNcentral), and training/e-book resources for organizations that need vendor-backed support.

pfSense

pfSense is an open-source firewall and router platform built on a hardened FreeBSD base, offering enterprise-grade capabilities like Snort-based intrusion detection and prevention, traffic shaping, native IPv6, and site-to-cloud VPN connectivity. It is free to run as Community Edition software on your own hardware or as a virtual machine. For organizations that want a managed path, developer Netgate sells physical hardware appliances, virtual appliances on AWS and Azure starting around $0.08/hour, and commercial support and training. pfSense is used from small offices to large enterprises for firewalling, routing, and VPN connectivity between sites and clouds.

Sophos Firewall

Sophos Firewall is a next-generation firewall designed to serve as the central hub of Sophos's broader network security platform, coordinating automated responses with endpoint, email, and workspace protection products. It uses Xstream architecture for accelerated traffic handling, deep packet inspection, and AI-powered zero-day threat detection, all managed through the cloud-based Sophos Central console.

Check Point Next Generation Firewall

Check Point Next Generation Firewall delivers high‑performance, stateful inspection combined with advanced threat prevention, intrusion detection, and application control. It integrates with Check Point's Security Management platform to provide centralized policy management and real‑time visibility across on‑premise and cloud environments. The solution supports both hardware appliances and virtualized instances, offering flexible deployment options for data centers, branch offices, and hybrid cloud workloads. Built‑in sandboxing, anti‑bot, and anti‑virus engines protect against known and unknown threats while maintaining low latency.