Firewalls in our range are hardware network security appliances for small offices, branch sites and larger business networks. Models come from Sophos, Cisco, SonicWall and Zyxel. They filter traffic between your internal network and the internet, and many also handle VPN access and web filtering.
How to choose a firewall
Firewall throughput. This is the speed the appliance can inspect at, and it matters more than the port speed. Throughput drops once features such as intrusion prevention, antivirus and encrypted traffic inspection are switched on, so compare the figure with those features enabled. Some models in our range list 2 Gbit/s of firewall throughput, which suits a small office with a fast internet line.
Ports and interfaces. Count the LAN, WAN and any dedicated DMZ or management ports you need. Some firewalls in our range offer four RJ-45 ports running at 10, 100 and 1000 Mbit/s, which covers a simple setup with one internet link. If you want a second internet connection for failover, or fibre uplinks, check for a spare WAN port or SFP slot.
VLANs and VPN. If you want to separate guest Wi-Fi, office PCs, cameras or servers, the firewall must support enough VLANs. Some models in our range list 16 VLANs, which is adequate for a small business. For remote staff or linking several sites, look at the number of VPN tunnels and the supported VPN types.
Licences and support. Many firewalls need a subscription for intrusion prevention, web filtering, sandboxing and firmware updates. The hardware alone may offer only basic filtering. Check which licence the product includes and for how long, because renewing costs can matter as much as the appliance.
Management and size. Decide whether you want a local web interface or cloud management for several sites. Also check whether the unit is a desktop appliance or rack-mounted, and whether it is fanless if it will sit in a quiet office.
Firewall brands we carry
- Sophos: known for the XG and XGS Firewall series, which are managed alongside its endpoint protection through Sophos Central.
- Cisco: offers the ASA and Secure Firewall (formerly Firepower) lines, as well as Meraki MX appliances managed from the cloud.
- SonicWall: well known for the TZ series, built mainly for small and medium-sized businesses and branch offices.
- Zyxel: makes the USG FLEX and ATP firewalls, which combine security features with a simple setup for small business networks.
Firewall FAQ
What does a hardware firewall do?
A hardware firewall is a dedicated appliance that sits between your network and the internet and decides which traffic is allowed through. It blocks unwanted connections and can also provide VPN access, web filtering and intrusion prevention. This takes the load off your router and gives you more control over what enters the network.
How much firewall throughput do I need?
Choose a firewall whose throughput, with security features enabled, is comfortably above your internet speed. A small office on a 1 Gbit/s line needs more headroom than one on a 100 Mbit/s line. Manufacturers usually publish several figures, so use the one that matches the features you plan to run.
Do I need a subscription for a firewall?
Often yes, for the advanced features. Basic packet filtering usually works without one, but intrusion prevention, web filtering, malware scanning and security updates frequently need an active licence. Check what is included with the model before you buy.
What is the difference between a firewall and a router?
A router directs traffic between networks, while a firewall inspects that traffic and enforces security rules. Many routers include basic firewall functions, but a dedicated firewall offers deeper inspection, better logging and VPN options. Business networks usually place the firewall at the point where the internet connection enters.
