Security suites, Network Security Manager and MySonicWall, jurisdiction, retirement modes, exploit record and the 2025 cloud-backup incident, MSSP billing and cloud sandboxing, from SonicWall's own documents, each with its source.
| Topic | SonicWall — from their own documents | Zedmos |
|---|---|---|
| Licensing model | Hardware appliance plus a per-device security suite: Essential Protection (Gen 7 TZ only), Advanced Protection (APSS) or Managed Protection (MPSS). Gen 8 TZ and NSa firewalls are sold only as hardware-only, APSS or MPSS. Regular subscription SKUs run one or two years; SonicProtect three or five.Sources: sonicwall.com: security services · Knowledge base: Gen 8 TZ and NSa FAQ · Knowledge base: SonicProtect subscription FAQ | Software, licensed per firewall. It installs as a package on the OPNsense or pfSense CE box you already run, or from an image as ZedmosOS on x86 hardware you own. No hardware in the licence. |
| Management console | Network Security Manager as SaaS or as an on-premises VM, in Essential and Advanced tiers; cloud NSM is reached through the Capture Security Center with a MySonicWall login, and a MySonicWall account is required to register any appliance and unlock paid services and firmware. The Service Provider Program adds a multi-tenant dashboard, for SecureFirst partners only.Sources: Knowledge base: NSM FAQ · Knowledge base: how to register a firewall · sonicwall.com: service providers | One console, multi-tenant from the first firewall. Run it as a container on your server under your domain, or use ours at console.zedmos.com, operated from Frankfurt. No account with us is needed to run a firewall. |
| Jurisdiction | A privately held US company in Milpitas, California, owned since 2016 by the private-equity firms Francisco Partners and Elliott Management. Its privacy statement says the site and data centres for certain offerings are hosted in the United States; NSM cloud tenants can be placed in a North America or a Europe (Frankfurt) location.Sources: SonicWall privacy statement · Francisco Partners and Elliott: acquisition, 2016 · Knowledge base: NSM tenant location | A German company. A self-hosted console keeps firewall logs, personal data under the GDPR (CJEU C-582/14), in your own controllership. Our licence and threat-intelligence services run in Frankfurt. |
| Hardware lifecycle | After the Last Order Day come two years of Active Retirement, three years of Limited Retirement without new firmware, then End of Support, when technical support, firmware and hardware replacement all stop. SOHO, TZ 300P and NSa 9250/9450/9650 reached End of Support on 16 April 2026; TZ 400/600 and NSA 3600/3650 on 1 August 2026.Sources: SonicWall product lifecycle tables · End of support: SOHO, TZ 300P, NSa 9x50 · Last order day: TZ 400/600, NSA 3600/3650 | The support period is the software's: at least five years from placing on the market (CRA Art. 13(8)), published, and independent of any box. The hardware is yours to keep or replace. |
| Exploit record | 19 entries in the CISA Known Exploited Vulnerabilities catalogue (version 2026.09.11), 13 of them flagged for known ransomware use; 13 concern the SMA and SRA remote-access appliances and 3 SonicOS. Four were added in 2026. Separately, SonicWall published in September 2025 that an unauthorised party had accessed firewall configuration backup files for all customers who had used its cloud backup service.Sources: CISA KEV — SonicWall · SonicWall notice: MySonicWall cloud backup file incident | 0 entries. Published, with our CRA class, an SBOM per release, the disclosure path and the support period, on a page that stays up whatever the number becomes. Configuration backups stay on your console, which you host. |
| MSP billing | The SecureFirst MSSP programme, restricted to Silver, Gold or Platinum partners, with a no-commit, in-arrears monthly billing option for Gen 7 service bundles; usage is billed at month-end through the distributor.Sources: SonicWall press release: monthly bundles for MSSPs, 2023 · Knowledge base: MSSP Monthly FAQ | MSP tier: multi-tenant, unlimited firewalls, billed monthly in arrears on the month-end count, open to any partner. Your brand on the console and on the box. |
| AI and data loss prevention | Capture ATP is a cloud-based multi-engine sandbox with Real-Time Deep Memory Inspection; suspicious files are sent over HTTPS to SonicWall teams in Santa Clara or Bangalore. DLP is delivered as SmartDLP inside the Cloud App Security service for SaaS applications, on the Advanced licence; none of the firewall bundles lists an on-box DLP engine.Sources: sonicwall.com: Capture ATP · Knowledge base: Capture ATP and data privacy · Cloud App Security guide: SmartDLP | DLP and the AI gateway run on the box. 61 content detectors; prompts, uploads and files checked before they leave; the model that decides runs on your hardware. |
| Price changes, 2026 | Pricing adjustments effective 1 August 2026 across selected Gen 6, Gen 7 and Gen 8 SKUs, including security services, support, management and monthly-billing subscriptions, announced in Partner Power News on 7 July 2026; the details are on the partner portal.Sources: SonicWall blog: Partner Power News, July 2026 | No hardware in the price. The licence is not tied to an appliance list, so a hardware price change does not propagate into a renewal. |
| What SonicWall has that Zedmos does not | 500K+ customers and 17K+ partners, Capture Labs fed by more than a million sensors, SonicSentry 24/7 managed detection and response, a cyber-warranty of up to $200,000 embedded in the APSS and MPSS suites, and a place among the Niche Players in the 2025 Gartner Magic Quadrant for Hybrid Mesh Firewall.Sources: sonicwall.com · sonicwall.com: SonicSentry MDR · SDxCentral on the 2025 Hybrid Mesh Firewall Magic Quadrant | None of those. A small German vendor with a published exploit record, a console you own, and a licence that does not care which box it runs on. |
SonicWall has sold firewalls for more than thirty years and has a partner base Zedmos does not. The comparison is about how the two products are licensed, where they are managed from, under whose law, and what the public record says. Every claim on the left carries its source; if one is wrong, write to us and it will be corrected.
Checked: 2026-09-13
Zedmos is compared with SonicWall above on licensing, management, jurisdiction, exploit record and what each is delivered as. Zedmos is software on hardware you own, managed from a console you host yourself or use hosted from Frankfurt, licensed per firewall, from a German vendor under EU law, with zero entries in the CISA Known Exploited Vulnerabilities catalogue. The last row of the table is what SonicWall has that Zedmos does not.