Arista NG Firewall

Arista NG Firewall is network security software for managing and protecting traffic in hybrid deployments. Its packages list firewall, intrusion prevention, web filtering, VPN, reporting, and other applications. VPN choices include IPsec, OpenVPN, Tunnel VPN, and WireGuard, and SSL Inspector is listed as a featured capability. NG Firewall Complete provides visibility into network traffic and events. The free package offers basic security and connectivity, but limits Virus Blocker, Application Control, Spam Blocker, and Reports. It also cannot use centralized management for policies, alerts, reports, or Networks. ETM Dashboard can centrally manage network appliances and deploy hardware appliances remotely. Other listed capabilities include configuration backup, directory integration, application rules, network discovery, policy automation, and wired and wireless access control. NG Firewall Complete is listed at $270 for a 12-month term, with licensed-device options from 12 through unlimited. Monthly billing is available as a licensed-term option; annual billing advertises 10% savings and the three-year option advertises 20%. A 30-day trial is listed.

NG Firewall combines security applications with network-management capabilities, but the free tier has notable feature and centralized-management limits. Compare those limits with the Complete package’s device options and 12-month term before choosing.

It suits organizations managing network security and traffic across hybrid deployments. The free tier offers basic security and connectivity, while teams needing the listed centralized management features should review the Complete package.

Arista NG Firewall is a hybrid network security and appliance-management platform for organizations protecting and managing network traffic. It suits teams that want firewall, VPN and traffic controls alongside centralized appliance oversight. Its breadth is appealing, but the free tier’s security and management restrictions and Complete’s 12-device package make plan and scale a deciding factor.

Overview

NG Firewall brings firewall, intrusion prevention, web filtering, VPN and reporting apps into one package, with capabilities spanning wired and wireless access control, network discovery and application-aware routing. That mix can suit organizations seeking security and network-management functions together. Buyers who need only configuration management, or who need more than 12 devices on the stated Complete package, should compare alternatives and confirm the device limit that fits their deployment.

Key features

VPN options include IPsec, OpenVPN, Tunnel VPN and WireGuard; SSL Inspector is also a featured capability. The range gives teams several listed VPN approaches within the package, while the free tier’s limited Virus Blocker, Application Control, Spam Blocker and Reports capabilities narrow its usefulness for organizations expecting broad security coverage at no cost.

ETM Dashboard centrally manages network appliances and can deploy hardware appliances remotely. Complete adds control and visibility into network traffic and events, while Configuration Backup and Directory Connector are listed capabilities. Application rules, 802.1X support, policy automation, API access, zero-touch provisioning and cloud on-ramps extend the network-management scope. This breadth is relevant for teams coordinating security and appliance operations, but buyers should weigh it against the package’s device limit and the free tier’s lack of centralized policies, alerts, reports and Networks.

Pricing

• NG Firewall Free: free. It provides basic security and connectivity, but limited Virus Blocker, Application Control, Spam Blocker and Reports capabilities mean it is a constrained choice for organizations needing those functions. Centralized management cannot use policies, alerts, reports or Networks on this tier.
• NG Firewall Complete: $270 a year for a 12-month term, billed monthly, with up to 12 devices. It is the fit for teams needing Complete’s network traffic and event visibility and broader management capabilities within that device allowance. The configurator offers licensed-device limits from 12 through unlimited, so organizations with larger deployments should check the relevant device option and pricing before committing.

A 30-day trial is offered. Annual billing advertises 10% savings, while the three-year option advertises 20%; monthly billing is also available as a licensed-term option. Special programs include public sector, nonprofit, Hardware as a Service and hardware upgrade discounts. Support channels include documentation, forums, partners and distributors.

Platforms

NG Firewall is offered on the web platform. Its deployment and delivery models are hybrid, which is relevant to organizations planning across deployment models.

Who it's for

NG Firewall is most appropriate for teams that want security applications and network-management capabilities together, particularly when centralized appliance oversight and multiple VPN options matter. The free tier may suit basic security and connectivity needs, but its limited application capabilities and centralized-management exclusions make it a poor substitute for the wider Complete package. Organizations requiring more than 12 devices should verify a larger licensed-device option before choosing.

Pros and cons

• Pro: Firewall, intrusion prevention, web filtering, reporting and four listed VPN options bring several security functions into one package.
• Pro: ETM Dashboard central management, remote hardware-appliance deployment and Complete’s network visibility address both oversight and traffic management.
• Con: The free tier limits several security and reporting capabilities and excludes key centralized-management functions, making it restrictive beyond basic use.
• Con: Complete’s stated 12-device allowance may not fit larger networks without selecting another licensed-device limit.

Alternatives

For configuration-focused needs, ManageEngine Network Configuration Manager has a free edition capped at two devices and a Professional Edition priced at $238 a year; it also has a free trial and supports Android, iOS, Linux, self-hosted, web and Windows platforms. Oxidized is a free, self-hosted Apache-2.0 option for teams seeking that model. rConfig offers a no-device-limit, MIT-licensed Core edition that runs on your hardware, while its Starter plan is $3,900 once for up to 300 devices.

Unimus provides a free tier for 10 devices with all features except Compliance and SAML/OIDC. Netpicker has a free-for-life Foundation tier with unlimited network devices, single-user access and Professional features for 10 devices. Gluware offers a renewable one-year Community Edition for up to 20 devices, with its full application suite except Topology. Mobile Net Switch is a free, fully functional, non-expiring Windows option. NetKeep is a free self-hosted option for Linux amd64 or arm64 servers.

Readers comparing by category can also browse Network Configuration Management Software, Network Automation Software, Network Access Control Software, Intrusion Detection and Prevention Software, SD-WAN Software and Network Firewall Software.

Verdict

Choose Arista NG Firewall if your organization wants security applications and centralized appliance management in one hybrid offering, and Complete’s licensed-device allowance suits your network. Its breadth is the main reason to choose it; the free tier’s limited capabilities and management exclusions, together with the need to confirm device scale, are the clearest reasons to look elsewhere.