Arista NG Firewall

Overview

Arista NG Firewall combines network security functions with centralized management for network appliances. It suits organizations that want firewalling, traffic visibility and appliance oversight in one hybrid offering. Its breadth is useful, but the free tier has meaningful feature and management restrictions.

Key features

Packages include firewall, intrusion prevention, web filtering, VPN and reporting apps. VPN choices span IPsec, OpenVPN, Tunnel VPN and WireGuard, while SSL Inspector provides SSL inspection. This range can consolidate several network-security needs; however, the free package limits Virus Blocker, Application Control, Spam Blocker and Reports, so it is not a substitute for the broader capability set.

ETM Dashboard centrally manages network appliances and can deploy hardware appliances remotely. Complete adds control and visibility into network traffic and events. Configuration Backup and Directory Connector are also listed capabilities. The product supports application rules, wired and wireless access control, 802.1X, network discovery, policy automation, API access, application-aware routing, zero-touch provisioning, integrated security and cloud on-ramps. That combination is relevant to teams managing varied network functions, though the product’s breadth may be more than a small site needs.

Pricing

NG Firewall Free: free. It provides basic security and connectivity, making it a sensible starting point for limited needs. Its restricted security apps and inability to use policies, alerts, reports or Networks through centralized management are substantial trade-offs for organizations seeking central oversight.

NG Firewall Complete: $270 a year for a 12-month term, with up to 12 devices. Monthly billing is available as a licensed-term option; annual billing advertises 10% savings, and the three-year option advertises 20% savings. Licensed-device limits in the configurator range from 12 through unlimited. Buyers should match the selected limit to their appliance count: the 12-device plan may not suit a larger fleet. Special pricing programs cover public sector, nonprofit, Hardware as a Service and hardware upgrade discounts.

Platforms

Arista NG Firewall is available on web. Its deployment and delivery model is hybrid, which fits organizations spanning deployment environments.

Who it's for

NG Firewall is a stronger fit for organizations that want security applications and appliance management together, especially where centralized visibility, network controls and remote hardware deployment matter. The free tier can suit basic security and connectivity, but its management exclusions make it a poor fit for teams that depend on centrally managed policies, alerts, reports or networks. Teams with more than 12 devices should consider the appropriate licensed limit rather than assume the 12-device Complete plan will cover their estate.

Pros and cons

• Pros: A broad set of firewall, intrusion prevention, filtering and VPN apps, including four named VPN options, can serve multiple network-security needs in one offering.
• Pros: ETM Dashboard supports centralized appliance management and remote hardware deployment, while Complete adds traffic and event visibility.
• Cons: The free package restricts several security and reporting capabilities and excludes key centralized-management functions.
• Cons: Complete’s stated 12-device limit requires careful licensing selection for larger deployments.

Alternatives

For an open-source, self-hosted network access control option with unlimited devices and full source code, consider PacketFence; its self-hosted edition is GPL v2+ and it also has a free plan. SecureW2 Cloud NAC is a paid option with pricing requested through a quote form that asks about solution type, organization type and device count. Ivanti Neurons for Zero Trust Access is a paid alternative with named-user SaaS licensing and contact-sales pricing.

Portnox NAC is another option with a free trial and custom pricing. ExtremeControl is a paid alternative priced separately. Arbiter offers a free plan. Cloudi-Fi Cloud NAC is a paid web-based alternative, while EasyNAC is a paid option for Windows and Linux.

Explore related categories: Network Access Control Software, Network Firewall Software, Secure Access Service Edge Software, SD-WAN Software, Network Management Software and Network Provisioning Software.

Verdict

Choose Arista NG Firewall if your organization needs a combined network-security toolkit and centralized appliance management, and can select a device limit that fits its footprint. Its breadth and visibility are the main reasons to choose it; the free tier’s management restrictions and the need to size Complete licensing carefully are reasons to look elsewhere.