Arista NG Firewall vs scanlogd
Arista NG Firewall
arista.comscanlogd
openwall.comSide by side
| Figure | Arista NG Firewall | scanlogd |
|---|---|---|
| Price from | $22.50/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Linux | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 1 |
| Spec score · Intrusion Detection and Prevention Software | 8.9 (#5) | 7.4 (#22) |
Plans
Arista NG Firewall
- NG Firewall FreeFree
- NG Firewall Complete$25 a month
- NG Firewall Complete$270 a year
- NG Firewall CompletePriced on request
In their own words
Arista NG Firewall
Arista NG Firewall is network security software for managing and protecting traffic in hybrid deployments. Its software packages list firewall, intrusion prevention, web filtering, VPN, reporting and other apps. Listed VPN options include IPsec VPN, OpenVPN, Tunnel VPN and WireGuard VPN, and SSL Inspector is a featured capability. NG Firewall Complete provides control and visibility into network traffic and events. The free package offers basic security and connectivity, but limits Virus Blocker, Application Control, Spam Blocker and Reports, and does not provide centralized management for policies, alerts, reports or Networks. ETM Dashboard centrally manages network appliances and can deploy hardware appliances remotely. Other listed capabilities include configuration backup, directory integration, application rules, network discovery, policy automation, and wired and wireless access control. NG Firewall Complete is listed at $270 for a 12-month term, with licensed-device choices from 12 through unlimited. Monthly billing is available as a licensed-term option; annual billing advertises 10% savings, and the three-year option advertises 20% savings. A free plan and 30-day trial are listed.
scanlogd
scanlogd is a free TCP port scan detection tool for Linux and self-hosted deployments. It captures packets through Linux raw sockets, libnids, or libpcap. The project advises against using libpcap alone when fragmented IP packets matter, recommending libnids for non-Linux systems or monitoring an entire network. The official download page lists release 2.2.8, release files and signatures, an Openwall archive, and source browsing through GitHub. scanlogd is listed in Owl, Debian GNU/Linux, Gentoo Linux, ALT Linux, and OpenWrt, with ports in OpenBSD and FreeBSD collections. A contributed precompiled Win32 build is also linked. The project describes scanlogd as designed to be totally safe to use and points readers to its manual page and a Phrack article. Openwall offers commercial configuration, compilation, and installation support at US $250/hour with a six-hour minimum or US $9,000/week; fixed-price quotes are available for sufficiently specific projects.