Reports & Publications

Zyxel USG FLEX 100H vs. SonicWall TZ270 Firewall Anti-malware Efficacy and Subscription License Evaluation

Sponsor: Zyxel
Zyxel USG FLEX 100H vs. SonicWall Firewall Anti-malware Efficacy and Subscription License Evaluation

Abstract

Zyxel positions the USG FLEX 100H as a subscription-based security firewall that combines anti-malware, URL filtering, DNS threat protection, and cloud-managed services in a single platform. In Tolly’s comparison of the Zyxel USG FLEX 100H and the SonicWall TZ270, the Zyxel appliance delivered substantially higher security efficacy while also showing a lower renewal cost and broader included services. 


The anti-malware test used HTTP GET downloads of malware samples from a web server through each device under test. Engineers measured effectiveness by reviewing device logs and comparing downloaded file checksums against the originals to determine whether malware was fully blocked, partially blocked, or allowed through. Across 6,426 malware samples, the Zyxel USG FLEX 100H blocked 5,902, producing an average anti-malware efficacy of 91.8%. The SonicWall TZ270 blocked 2,687 samples, averaging 41.8%. Zyxel’s daily anti-malware detection and blocking rate remained above 87% throughout the test period. 


Tolly also evaluated malicious URL filtering using a script that issued HTTP queries to malicious domains while the client used the DUT as its DNS server. Both platforms were configured to block malicious destinations through DNS redirection and related protections, with results verified by DUT logs and failed HTTP requests. In this test, Zyxel blocked 2,301 of 2,712 malicious URLs for an average detection rate of 84.8%, while SonicWall blocked 736, averaging 27.1%. Zyxel’s daily URL detection rate stayed above 74% across the entire test window. 


The report also emphasizes licensing value. Zyxel’s Gold Security UTM Bundle was listed at $224.99 for one year and $399.99 for two years, versus $383 and $651 for SonicWall’s Advanced Protection Security Suite. Zyxel also included cloud management, 365-day alerting and analytics, free lifetime firmware upgrades, and broader IP reputation filtering, while SonicWall required additional licensing for support and cloud management. Test configurations used Zyxel VuOS-fw 2025-08-14 and SonicOS 7.2.0-7015.