Next-generation firewalls for small business buyers
Asked as “next-generation firewall”, and as “enterprise firewall appliance or virtual firewall”, on behalf of a small B2B company. 46 first choices recorded across the direct, paraphrase, budget and scale prompts, twelve models each.
Standing · first-choice share
48%
Clear leader
48Fortinet FortiGate20WatchGuard Firebox15Sophos Firewall17others
48% of first choices, clear leader.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all twelve models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the four products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
Fortinet FortiGate vs WatchGuard FireboxFortinet FortiGate vs Palo Alto Networks NGFWFortinet FortiGate vs Sophos Firewall
Head-to-head pages are published for mid-market buyers, so these open on mid-market figures, not small business.All fifteen head-to-head pages: the top six products, each against each
Fortinet FortiGate vs Check Point QuantumFortinet FortiGate vs SonicWallWatchGuard Firebox vs Palo Alto Networks NGFWWatchGuard Firebox vs Sophos FirewallWatchGuard Firebox vs Check Point QuantumWatchGuard Firebox vs SonicWallPalo Alto Networks NGFW vs Sophos FirewallPalo Alto Networks NGFW vs Check Point QuantumPalo Alto Networks NGFW vs SonicWallSophos Firewall vs Check Point QuantumSophos Firewall vs SonicWallCheck Point Quantum vs SonicWall
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01
02
03
04
05
06
07
08Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative60%
Key
01Fortinet FortiGate48%
Fortinet FortiGate48%02WatchGuard Firebox20%
WatchGuard Firebox20%03Sophos Firewall15%
Sophos Firewall15%04SonicWall TZ Series2%
SonicWall TZ Series2%05Cisco Meraki MX0%
Cisco Meraki MX0%06Cisco Secure Firewall0%
Cisco Secure Firewall0%07SonicWall0%
SonicWall0%08Palo Alto Networks NGFW0%
Palo Alto Networks NGFW0%What they warned about
Six of twelve models held their first choice under the paraphrase. Claude Haiku 4.5, Perplexity Sonar, Grok 4.20, DeepSeek V4 Flash, Kimi K2 and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Palo Alto Networks NGFW66%
21 of 32 labels negative · 10 of 12 models · 5 hard negative
“small businesses should avoid or be cautious about high-end enterprise NGFWs (like Palo Alto) unless they have the resources to manage them” Mistral Small, negative prompt
Check Point Quantum75%
6 of 8 labels negative · 5 of 12 models · 4 hard negative
“high costs, complex licensing (34+ reviews), challenging setup/configuration ... rigid models unsuitable for small teams” Grok 4.20, negative prompt
Cisco Secure Firewall38%
6 of 16 labels negative · 5 of 12 models · 2 hard negative
“SMB pitfalls like default configs leaving 73% vulnerable, complex management, and high TCO from add-ons” Grok 4.20, negative prompt
SonicWall50%
5 of 10 labels negative · 5 of 12 models
“Older SonicWall appliances or virtual models that are in the retirement pipeline... they're a poor choice unless you're certain the lifecycle fits your replacement plan.” GPT-5.4 mini, negative prompt
What they cite
Twelve of the twelve models returned a source list in this edition: four return the pages they cited and eight the search results they consulted.
Sites the answers cite
63 of 72 answers in this category came back with a source list, from 12 of 12 models: citations where the model returns them, or the search results it consulted. 938 links across 231 sites, every framing counted. Ranked by the number of answers carrying the site or page.
vendor site · CyberPress36 answers · 36 citations · 11 models
34 answers · 38 citations · 11 models
27 answers · 54 citations · 10 models
vendor site · Fortinet27 answers · 42 citations · 10 models
25 answers · 25 citations · 9 models
20 answers · 26 citations · 8 models
vendor site · Cisco19 answers · 28 citations · 10 models
vendor site · InvGate17 answers · 17 citations · 9 models
16 answers · 23 citations · 6 models
16 answers · 19 citations · 8 models
13 answers · 13 citations · 8 models
13 answers · 13 citations · 7 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
35 answers · 10 models
33 answers · 11 models
25 answers · 9 models
18 answers · 9 models
17 answers · 9 models
17 answers · 8 models
14 answers · 6 models
13 answers · 7 models
12 answers · 7 models
12 answers · 5 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best next-generation firewall”, “next-generation firewall”, “next-generation firewalls”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Google ads, last 30 days |
|---|---|---|---|---|---|---|
| Fortinet parent site Fortinet FortiGate 48%, Fortinet FortiGate-VM 2% | 50% | 179 | 49,500 | 2,339 | ||
| WatchGuard Firebox watchguard.com | 20% | 53 | 590 | 74 | 19,015 | 11 |
| Sophos parent site Sophos Firewall 15% | 15% | 97 | 18,100 | 2,046 | ||
| SonicWall Gen 7 sonicwall.com SonicWall TZ Series 2%, SonicWall Gen 7 2%, SonicWall TZ270 2% | 7% | 27 | 110 | 3 | 60,229 | 79 |
| Netgate 1100 | 2% | |||||
| Ubiquiti UniFi Cloud Gateway Max | 2% | |||||
| pfSense Community Edition | 2% | |||||
| Ubiquiti ubiquiti.com Ubiquiti UniFi 2% | 2% | 17 | 9,900 | 450 | 15,584 company | |
| Cisco parent site Cisco Meraki MX 0%, Cisco Meraki 0%, Cisco Meraki MX67 0%, Cisco Meraki SD-WAN 0% | 0% | 120 | 165,000 | 48,352 | ||
| OPNsense opnsense.org | 0% | 19 |
Google's top ten for the three searches hold 23 sites; 3 of them are among the sites the models cited here (cisco.com, fortinet.com, reddit.com). The first result for “best next-generation firewall” is nomios.nl.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best next-generation firewall for a small B2B company?”Paraphrase“Which enterprise firewall appliance or virtual firewall would you recommend to a small business that sells to other businesses?”Comparative“What are the top next-generation firewalls for a small team and how do they differ?”Budget-constrained“What is the best next-generation firewall for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a next-generation firewall. What should we look at?”Negative“Which next-generation firewalls should a small business avoid or be cautious about?”
Claude Haiku 4.5no first choiceFortinet FortiGate, Sophos FirewallChangedSophos Firewallagainst: Palo Alto Networks NGFWFortinet FortiGate, Ubiquiti UniFi Cloud Gateway Maxno first choicenothing named
Three alternatives
Check Point Quantum Spark, FortiGate VM, SonicWall TZ SeriesOne alternative
Fortinet FortiGateTwo alternatives
Firewalla, Sophos FirewallGPT-5.4 miniFortinet FortiGateagainst: Sophos FirewallFortinet FortiGateHeldFortinet FortiGateFortinet FortiGateagainst: Palo Alto PA-501no first choiceagainst: Cisco Secure Firewall, SonicWall, WatchGuard Firebox
One alternative
Palo Alto Networks NGFWTwo alternatives
Cisco Secure Firewall, Palo Alto Networks NGFWFive alternatives
Cisco Meraki SD-WAN, Cisco Secure Firewall, Palo Alto Networks NGFW, Sophos Firewall, WatchGuard FireboxOne alternative
Cisco Secure FirewallGemini 3.5 FlashFortinet FortiGateFortinet FortiGateHeldagainst: Ubiquiti UniFiSophos FirewallFortinet FortiGateagainst: Cisco Secure Firewall, Palo Alto Networks NGFWno first choiceagainst: Cisco Meraki, Cisco Secure Firewall, Palo Alto Networks NGFW, SonicWall TZ Series, Ubiquiti UniFi, Zyxel USG
Three alternatives
Cisco Meraki, Palo Alto Networks NGFW, Sophos FirewallTwo alternatives
Cisco Meraki, Palo Alto Networks NGFWFour alternatives
Cisco Meraki MX, Fortinet FortiGate, Netgate / pfSense, Palo Alto Networks NGFWFive alternatives
Firewalla Gold Pro or Gold Plus, OPNsense, Sophos Firewall, Ubiquiti UniFi, ZenarmorFour alternatives
Cisco Meraki, Fortinet FortiGate, Palo Alto Networks NGFW, Sophos FirewallPerplexity SonarSophos FirewallFortinet FortiGateChangedagainst: Palo Alto Networks NGFW, Prisma CloudSophos Firewall, WatchGuard Fireboxagainst: Palo Alto Networks NGFWFortinet FortiGate, Sophos Firewallagainst: SonicWall TZ Seriesno first choiceagainst: Check Point Quantum, Cisco Secure Firewall, Palo Alto Networks NGFW, SonicWall entry-level / SOHO models, WatchGuard Firebox, Zyxel
Two alternatives
Fortinet FortiGate, WatchGuard FireboxTwo alternatives
Sophos Firewall, WatchGuard FireboxOne alternative
Fortinet FortiGateOne alternative
WatchGuard FireboxGrok 4.20Sophos Firewallagainst: Cisco Meraki MX, SonicWall TZ SeriesFortinet FortiGateChangedagainst: pfSenseSophos Firewall, WatchGuard Fireboxagainst: Palo Alto Networks PA-400/440 Series, SonicWall TZ SeriespfSense Community Editionagainst: FortiGate 30G/60F, Palo Alto Networks NGFW, SonicWall TZ270, Sophos FirewallWatchGuard Fireboxagainst: Check Point Quantum, Palo Alto Networks NGFWagainst: Check Point Quantum, Cisco Secure Firewall, Palo Alto Networks NGFW, SonicWall Gen 7, Zyxel Firewalls
Two alternatives
Fortinet FortiGate, WatchGuard FireboxFour alternatives
Cisco Meraki MX67, FortiGate VM, Palo Alto PA-410, WatchGuard FireboxOne alternative
Fortinet FortiGateTwo alternatives
OPNsense, Ubiquiti UniFiTwo alternatives
Cisco Meraki MX, Fortinet FortiGateMistral SmallWatchGuard FireboxWatchGuard FireboxHeldSophos Firewall, WatchGuard FireboxSophos Firewallno first choiceagainst: Check Point Quantum, Palo Alto Networks NGFW, SonicWallagainst: D-Link, Fortinet FortiGate, Palo Alto Networks NGFW
Two alternatives
Fortinet FortiGate, SonicWall TZ SeriesTwo alternatives
Fortinet FortiGate, Sophos FirewallOne alternative
Fortinet FortiGateThree alternatives
Netgate 110, SonicWall, Ubiquiti UniFi Security GatewayOne alternative
Fortinet FortiGateDeepSeek V4 FlashWatchGuard FireboxFortinet FortiGateChangedFortinet FortiGateagainst: Palo Alto PA-400Fortinet FortiGateWatchGuard Fireboxagainst: Cisco Secure Firewall, Palo Alto PA-220against: Cisco Meraki MX, Palo Alto Networks NGFW, SonicWall, Ubiquiti UniFi, Zyxel
Three alternatives
Fortinet FortiGate, SonicWall, Sophos FirewallFour alternatives
Cisco Meraki MX, Fortinet FortiGate-VM, Palo Alto PA-400 Series / Prisma Access, Sophos FirewallFour alternatives
Cisco Meraki MX, SonicWall TZ Series, Sophos Firewall, WatchGuard FireboxThree alternatives
SonicWall TZ Series, Sophos Firewall, Ubiquiti UniFi Cloud GatewayTwo alternatives
FortiGate 40F/60F, Sophos FirewallLlama 4 MaverickWatchGuard FireboxWatchGuard FireboxHeldWatchGuard FireboxSonicWall Gen 7no first choicenothing named
Two alternatives
Fortinet FortiGate, SonicWall Gen 7One alternative
Sophos FirewallFive alternatives
Barracuda CloudGen Firewall, Check Point Harmony SASE, Cisco Secure Firewall, SonicWall Firewall, Sophos FirewallFour alternatives
Barracuda CloudGen Firewall, Netgate 110, Ubiquiti UniFi Security Gateway, WatchGuard FireboxQwen 3.7 FlashFortinet FortiGateagainst: Cisco Meraki MXFortinet FortiGateHeldagainst: Asus, Palo Alto Networks NGFW, TP-LinkCisco Meraki MXUbiquiti UniFi, WatchGuard FireboxSophos Firewall, WatchGuard Fireboxagainst: Palo Alto Networks NGFWagainst: Check Point Quantum, Cisco Meraki MX, Netgear, Palo Alto Networks NGFW, SonicWall, Ubiquiti UniFi, Zyxel
Two alternatives
Sophos Firewall, WatchGuard FireboxThree alternatives
OPNsense, Sophos Firewall, pfSenseThree alternatives
Fortinet FortiGate, Sophos Firewall, WatchGuard FireboxThree alternatives
OPNsense, SonicWall, pfSenseOne alternative
Fortinet FortiGateKimi K2Sophos FirewallFortinet FortiGateChangedagainst: Palo Alto Networks NGFW, SonicWall TZ Series, pfSenseSophos Firewall, WatchGuard FireboxSonicWall TZ SeriesFortinet FortiGateagainst: Cisco ASA, Cisco Meraki MX, Palo Alto Networks NGFW, Palo Alto PA-200/PA-220, SonicWall TZ205, WatchGuard Firewalls, pfSense/OPNsense
Two alternatives
Fortinet FortiGate, WatchGuard FireboxOne alternative
Sophos FirewallTwo alternatives
Fortinet FortiGate, SonicWall TZ SeriesTwo alternatives
Fortinet FortiGate, Sophos FirewallTwo alternatives
Cisco Meraki MX, Sophos FirewallGLM 4.7 FlashXFortinet FortiGateagainst: Palo Alto Networks NGFW, SonicWall TZ SeriesFortinet FortiGateHeldSophos Firewall, WatchGuard FireboxNetgate 1100against: Ubiquiti UniFi Security Gatewayno first choiceagainst: Palo Alto Networks NGFW, SonicWall TZ Seriesagainst: Check Point Quantum, Cisco ASA, Fortinet FortiGate, Palo Alto Networks NGFW, SonicWall
Three alternatives
Cisco Meraki MX, Sophos Firewall, WatchGuard FireboxThree alternatives
Check Point Harmony SASE, SonicWall TZ Series, WatchGuard FireboxSix alternatives
Cato Networks Network Firewall, Check Point Harmony SASE, Cisco Meraki MX, Fortinet FortiGate, SonicWall TZ Series, pfSense/OPNsenseOne alternative
SonicWall TZ SeriesFour alternatives
Cisco Meraki MX, Fortinet FortiGate, Sophos Firewall, WatchGuard FireboxMiniMax M2.5no first choiceFortinet FortiGate, Fortinet FortiGate-VMChangedagainst: Palo Alto Networks VM-SeriesFortinet FortiGateFortinet FortiGate, SonicWall TZ270Fortinet FortiGateagainst: Palo Alto Networks NGFWagainst: Cisco Meraki, SonicWALL SOHO, Sophos Firewall, WatchGuard Firebox, Zyxel
One alternative
WatchGuard FireboxFive alternatives
Cisco Meraki MX, Palo Alto Networks PA-400, SonicWall TZ Series, Sophos Firewall, WatchGuard FireboxOne alternative
WatchGuard FireboxThree alternatives
Cisco Meraki, SonicWall, Sophos FirewallBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Seventy-two rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:39 | no | 0 | 5 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:34 | yes | 3 | 7 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 14:10 | yes | 22 | 23 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-09-17 10:24 | yes | 17 | 6 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:44 | yes | 27 | 17 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 12:15 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 11:30 | yes | 8 | 11 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 14:09 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 14:00 | yes | 5 | 29 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:12 | yes | 8 | 21 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 13:39 | yes | 31 | 153 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 12:19 | no | 0 | 49 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:12 | yes | 16 | 11 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 10:36 | yes | 5 | 7 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:18 | yes | 15 | 20 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-09-17 10:15 | yes | 18 | 7 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 13:26 | yes | 36 | 20 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 10:57 | yes | 5 | 6 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:35 | yes | 21 | 26 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:51 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:21 | no | 0 | 42 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:48 | yes | 29 | 72 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:05 | yes | 17 | 33 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:21 | yes | 5 | 109 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 10:51 | yes | 9 | 7 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 13:00 | yes | 3 | 6 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:25 | yes | 19 | 26 s |
| Comparative | Perplexity Sonar | sonar | 2026-09-17 11:42 | yes | 16 | 8 s |
| Comparative | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:11 | yes | 24 | 16 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 11:15 | yes | 5 | 6 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 13:39 | yes | 16 | 31 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 13:42 | yes | 5 | 3 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 10:22 | yes | 10 | 42 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 09:58 | yes | 8 | 29 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 12:06 | yes | 17 | 63 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 10:51 | yes | 19 | 44 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 13:20 | yes | 9 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 11:42 | yes | 4 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 11:11 | yes | 17 | 24 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-09-17 09:30 | yes | 20 | 10 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 13:35 | yes | 40 | 18 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 11:25 | yes | 5 | 3 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 12:16 | yes | 16 | 22 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:29 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 12:31 | no | 0 | 38 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 12:21 | yes | 8 | 22 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 11:49 | yes | 30 | 229 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 11:18 | yes | 5 | 24 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 09:51 | no | 0 | 7 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 11:09 | no | 0 | 6 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:05 | no | 0 | 15 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-09-17 12:42 | yes | 20 | 14 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 13:19 | yes | 18 | 13 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 11:12 | no | 0 | 9 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 09:37 | yes | 29 | 23 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 09:51 | yes | 5 | 2 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 13:27 | no | 0 | 40 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:22 | yes | 10 | 37 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:30 | yes | 15 | 102 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 11:46 | yes | 5 | 20 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-09-17 11:38 | yes | 18 | 7 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-09-17 09:36 | yes | 4 | 7 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-09-17 12:30 | yes | 16 | 26 s |
| Negative framing | Perplexity Sonar | sonar | 2026-09-17 12:48 | yes | 20 | 8 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.1-fast-non-reasoning via vertex (asked for grok-4.20-non-reasoning; the API answered as this version) | 2026-09-17 12:53 | yes | 40 | 19 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-09-17 11:31 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via fireworks | 2026-09-17 10:24 | yes | 27 | 27 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-09-17 11:10 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-09-17 11:59 | yes | 15 | 56 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-09-17 10:58 | yes | 25 | 40 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-09-17 09:26 | yes | 29 | 145 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-09-17 13:28 | yes | 19 | 67 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Barracuda read as Barracuda CloudGen Firewall
Check Point read as Check Point Quantum
Check Point NGFW (e.g., Quantum Series) read as Check Point Quantum
Cisco read as Cisco Secure Firewall
Cisco (ASA/Firepower) read as Cisco Secure Firewall
Cisco ASA 5505/5506 read as Cisco ASA
Cisco ASA Series read as Cisco ASA
Cisco Firepower 1000 Series read as Cisco Secure Firewall
Cisco Firepower Virtual (FMCv) read as Cisco Secure Firewall
Cisco Meraki MX Series read as Cisco Meraki MX
Cisco Meraki vMX read as Cisco Meraki MX
Cisco Secure Firewall / Firepower read as Cisco Secure Firewall
Cisco Secure Firewall Small Business Edition read as Cisco Secure Firewall
Fortinet read as Fortinet FortiGate
Fortinet (FortiGate 40F, 60F, or 70F) read as Fortinet FortiGate
Fortinet (FortiGate) read as Fortinet FortiGate
Fortinet FortiGate 40F read as Fortinet FortiGate
Fortinet FortiGate 60F read as Fortinet FortiGate
Fortinet FortiGate 70G read as Fortinet FortiGate
Fortinet FortiGate 90G read as Fortinet FortiGate
Palo Alto read as Palo Alto Networks NGFW
Palo Alto Networks read as Palo Alto Networks NGFW
Palo Alto Networks (PA Series) read as Palo Alto Networks NGFW
Palo Alto Networks (PA Series, e.g., PA-400) read as Palo Alto Networks NGFW
Palo Alto Networks (PA-400 Series) read as Palo Alto Networks NGFW
Palo Alto Networks (PA-410 or PA-440) read as Palo Alto Networks NGFW
Palo Alto Networks (PA-440) read as Palo Alto Networks NGFW
Palo Alto Networks PA-400 Series read as Palo Alto Networks NGFW
Palo Alto Networks PA-400 series read as Palo Alto Networks NGFW
Palo Alto Networks PA-Series read as Palo Alto Networks NGFW
Palo Alto Networks PA‑Series read as Palo Alto Networks NGFW
Palo Alto PA-Series read as Palo Alto Networks NGFW
SonicWall TZ read as SonicWall TZ Series
SonicWall TZ (e.g., TZ270/TZ470) read as SonicWall TZ Series
SonicWall TZ 270 read as SonicWall TZ Series
SonicWall TZ-270 read as SonicWall TZ Series
Sophos read as Sophos Firewall
Sophos (XGS 107 or XGS 116) read as Sophos Firewall
Sophos Firewall XGS read as Sophos Firewall
Sophos XGS read as Sophos Firewall
Sophos XGS (116 or 126) read as Sophos Firewall
Sophos XGS 87 read as Sophos Firewall
Sophos XGS Series read as Sophos Firewall
Sophos XGS Series (XGS 87 or 107) read as Sophos Firewall
Sophos XGS Series (e.g., XGS 116/126) read as Sophos Firewall
Ubiquiti read as Ubiquiti UniFi
Ubiquiti UniFi Dream Machine read as Ubiquiti UniFi
Untangle read as Arista NG Firewall
WatchGuard read as WatchGuard Firebox
WatchGuard Firebox T-series read as WatchGuard Firebox
WatchGuard Firebox T25 read as WatchGuard Firebox
WatchGuard Firebox T40/T85 read as WatchGuard Firebox
WatchGuard Firebox T45 read as WatchGuard Firebox
Zscaler read as Zscaler Internet Access
Unresolved, counted raw
Asus
Firewalla Gold Pro or Gold Plus
FortiGate 30G/60F
FortiGate 40F/60F
Netgate / pfSense
Netgate 1100
Palo Alto Networks PA-400
Palo Alto Networks PA-400/440 Series
Palo Alto PA-200/PA-220
Palo Alto PA-220
Palo Alto PA-400
Palo Alto PA-400 Series / Prisma Access
Palo Alto PA-410
Palo Alto PA-501
Protectli Vault
SonicWALL SOHO
SonicWall Firewall
SonicWall TZ205
SonicWall entry-level / SOHO models
Sophos XGS Virtual
Ubiquiti UniFi Cloud Gateway
Ubiquiti UniFi Cloud Gateway Max
WatchGuard FireboxV
WatchGuard Firewalls
Zyxel Firewalls (e.g., USG FLEX, ZyWALL)
Zyxel USG
pfSense Community Edition (CE)
Discontinued, still offered
No shut-down product was recommended here.