Untangle NG Firewall is an open-source firewall and gateway security platform. It offers a free core firewall platform with paid add-ons, and a cloud-based management platform with a variety of deployment options for smaller teams.
$0
free under the GNU General Public License (GPL)
Zscaler Internet Access
Score 8.8 out of 10
N/A
Zscaler Internet Access™ (ZIA) is a secure web gateway (SWG), delivering cloud native cyberthreat protection and zero trust access to the internet and SaaS apps.
I could never come close with these two products to the level of functionality and security I have with Untangle. Simply put, there is absolutely no contest. In addition, the cost of these other solutions was many thousands more than the academic cost for Untangle. Many times …
Untangle NG Firewall has a partnership with third parties to provide an amazing suite of applications. You pay for those. With free software, you have to wait for it to be updated. With Unifi, the hardware was too underpowered to do anything meaningful. I don't mind the monthly …
NG Firewall was much more friendly in terms of layout and ease of use, the apps section is familiar to anyone and the config while in a sort of odd order is very clearly laid out. I also appreciate Untangle's endless educational videos and the support can't be beat. Overall …
We looked at Sonicwall Web Content Filtering Services that can be added to our SonicWall firewall by purchasing a license. Untangle offered more functionality that solved a few of our problems at a cheaper price. Untangle offers a non-profit discount for 501c3 organizations …
Netskope was good however did not have all the features Zscaler had. Zscaler provides the same type of protection as Netskope but more. We also found the netskope agent used a lot of resoures on devices. ZCC was very light-weight and did not consume a lot of resources on laptops.
Palo support has been a large enough negative experience on multiple occasions that we have been looking to move away from the platform and Zscaler Internet Access looks to be a suitable replacement
Zscaler Internet Access is most akin to ZPA - we bought both at the same time to handle all traffic internally and externally. In terms of quality - I would make the statement that Zscaler Internet Access is a simpler product but that's also cause there are no App Connectors …
Zscaler Internet Access has significantly more configurability and capability in the platform, and can scale much better with large organizations. It is also much more affordable for our environment and gives us greater flexibility to grow into the Zscaler Platform.
Midsized business is where I have used it. Have used it to connect to other Untangle boxes across town and in other countries with NO issues and works with MS Domains across these VPN connections. Probably less appropriate for small home networks or large businesses.
Zscaler Internet Access has extremely powerful category selection and it is very easy to create your own destinations for inspection and policy exceptions (SSL exception specifically). It is also very affordable and just as powerful (if not more) than some of the other solutions I have used in the past to achieve internet security.
The depth that Cloud App control policies can go into. Being able to control individual actions within an application, more than just all or nothing access.
The UX/UI design makes it really easy to navigate the portal.
Understanding how cloud app/url control policy gets evaluated and creating/editing existing policy is extremely straightforward.
Getting your license file moved from one firewall to another can be tough at times... but support is great if you need it.
Ability to upload reports to a portal versus getting them emailed would be best (some reports can get 100+ Mb depending on all the bells and whistles).
While Zscaler Internet Access (ZIA) delivers critical value in cloud security and RBI compliance, I rate renewal likelihood 7/10 due to evolving needs versus platform limitations. Below is my rationale:
The application is easy to install and configure on all Windows devices. To troubleshoot any internet issue, we can easily collect all the relevant logs from Zscaler and check the exact issue. The only problem is with the uninstall, as a dedicated crew needs to provide the password.
The phone support reps are highly competent and native-English speakers. big plus vs some other vendors with difficult to understand or less knowledgable support engineers.
Zscaler's ZIA support is quick and knowledgable. They respond within 1-2 hours of you submitting your ticket. They are very thorough and are typically ready to jump on a live troubleshooting session. Our ZIA platform and how we use is it unique so at times tickets can be open for weeks but we alway get quality support compared to other unrelated product support in our enterprise
I could never come close with these two products to the level of functionality and security I have with Untangle. Simply put, there is absolutely no contest. In addition, the cost of these other solutions was many thousands more than the academic cost for Untangle. Many times have I experienced threats and inappropriate content passing through these other products. All of that was stopped the moment I implemented Untangle, even before I started to customize the settings.
Zscaler Internet Access is most akin to ZPA - we bought both at the same time to handle all traffic internally and externally. In terms of quality - I would make the statement that Zscaler Internet Access is a simpler product but that's also cause there are no App Connectors involved in that process.
Easy setup and implementation made ROI easy to achieve. An Untangle HA solution is 1/2-1/3 the cost of a comparable Cisco/Checkpoint/Palo Alto solution.
non-business internet usage has nearly ground to a halt.
SD-WAN integration made it easy to connect branch offices quickly without complicated IPSEC configuration.
Has allowed us to remove other products that were suboptimal
Saved us money overall by stacking it with other Zscaler products
Created a more secure work environment for our users through intelligent internet policies that are not needlessly restrictive while still maintaining security best practices