Firewall Selector: Fortinet, Sophos, SonicWall, Cisco Meraki, Cisco FTD & Palo Alto

How the ZM Firewall Selector works

The ZM Firewall Selector asks 20 questions about users, internet bandwidth, branches, VPN, HTTPS inspection, compliance and management preference. It scores six brands against your answers: Fortinet, Sophos, SonicWall, Cisco Meraki MX, Cisco Secure Firewall and Palo Alto Networks.

It then sizes a head-office and branch model with 30% growth headroom. The result is a starting recommendation; ZM Technologies confirms the final model and quote, and the ZM team handles complex or large designs.

Brands and models covered

  • Fortinet FortiGate (40F to 400G)
  • Sophos Firewall XGS Series (XGS 88 to XGS 4300)
  • SonicWall TZ and NSa (Gen 8)
  • Cisco Meraki MX (MX67 to MX105)
  • Cisco Secure Firewall (Firepower 1010 and the 1200 Series)
  • Palo Alto Networks PA-500 and PA-1400 Series

How firewall sizing is decided

  • Number of users and devices
  • Internet bandwidth with security features switched on: threat-protection throughput, not raw firewall throughput
  • HTTPS/TLS inspection load
  • Remote-access VPN users and site-to-site VPN requirements
  • High availability at the head office and branches
  • Growth, with 30% headroom

Sophos and Fortinet sizes follow the vendors' own sizing guidance, Meraki follows Meraki's recommended device counts, and the other brands use ZM guidance based on published throughput; ZM Technologies confirms the final design before quoting.

Frequently asked questions

Which firewall is right for a 50-user office?

A 50-user office needs a firewall sized for its devices, internet bandwidth, inspection load and VPN requirements, with headroom for growth. Run the selector for a sized starting recommendation rather than choosing by user count alone. ZM Technologies confirms the final model and handles complex requirements.

How much firewall throughput do I need for my internet connection?

Compare your total internet bandwidth with throughput measured with threat protection enabled, not the raw firewall figure, and allow headroom for growth. HTTPS inspection and VPN traffic can require additional capacity. Run the selector for an initial size and ask the ZM team to validate large or complex designs.

Do I need HTTPS (SSL/TLS) inspection, and how does it affect sizing?

HTTPS inspection can help detect threats within encrypted traffic, but whether to enable it depends on your security policy, privacy obligations and application compatibility. It adds processing load and can require a larger firewall; run the selector with your intended inspection level for a sized recommendation. The ZM team can review exclusions and complex requirements before deployment.

Should a multi-branch business choose cloud-managed or on-premises managed firewalls?

Cloud management can simplify central monitoring and policy changes across branches, while on-premises management may suit teams that need local control or specific integration options. The choice depends on connectivity, compliance needs and who will manage the firewalls. Run the selector to compare these preferences, and involve the ZM team for complex multi-site designs.

Fortinet, Sophos, SonicWall, Cisco or Palo Alto — how do I choose a brand?

Compare security features, management preference, existing systems, support arrangements and the capacity needed with inspection enabled. Run the selector to score Fortinet, Sophos, SonicWall, Cisco Meraki MX, Cisco Secure Firewall and Palo Alto Networks against your requirements and get a sized starting recommendation. ZM Technologies validates the final choice and prepares custom designs for larger or more complex environments.

Is the firewall selector free, and what happens after I get a result?

The selector is free, and you can see a sized starting recommendation without signing up. You can then request a quote, and ZM Technologies will confirm your requirements and final model before preparing a proposal. Complex or large designs are handled by the ZM team through a custom sizing review.

Do I need two firewalls for high availability?

If internet or VPN downtime would stop your business, a pair in high availability is worth it. The selector asks about uptime needs and shows the quantity required for head office and branches.

What if my requirement is larger or more complex?

For very large sites, many branches or data-centre designs the selector will suggest speaking to the ZM Technologies team, who will prepare a custom design.

Related reading: