EDITION COMPARISON
Find the right PortWall
for your environment.
Windows is built around per-server local protection and host security. Linux is a multi-tenant gateway appliance licensed by CPU cores.
FEATURE MATRIX
Compare editions side by side.
Three Windows tiers licensed per server, and two Linux appliance editions (Premium and Enterprise) licensed by CPU core.
| Capability | Windows Standard | Windows Premium | Windows Enterprise | Linux Premium | Linux Enterprise |
|---|---|---|---|---|---|
| Deployment and licensing | |||||
| Deployment model | On the Windows server, in front of IIS | On the Windows server, in front of IIS | On the Windows server, in front of IIS | Self-managed gateway appliance | Self-managed gateway appliance |
| Licensing unit | Per server | Per server | Per server | CPU cores | CPU cores |
| Sites protected | Every IIS site on the server | Every IIS site on the server | Every IIS site on the server | Many sites and tenants per appliance | Many sites and tenants per appliance |
| Price | $49/server/mo or $490/year | $99/server/mo or $990/year | From $199/server/mo or from $1,990/year | From $499/mo (2 cores) or from $4,990/year | Quote |
| Web application firewall | |||||
| WAF with the OWASP Core Rule Set | Included | Included | Included | Included | Included |
| Monitor mode per site, then block | Included | Included | Included | Included | Included |
| Manual tuning and rule exclusions | Included | Included | Included | Included | Included |
| Smart Tuning Advisor (suggested exclusions) | — | Included | Included | Included | Included |
| Virtual patches for new vulnerabilities | Included | Included | Included | Included | Included |
| Rate limiting and overload protection | Included | Included | Included | Included | Included |
| Upload file inspection | Included (Microsoft Defender) | Included (Microsoft Defender) | Included (Microsoft Defender) | Included (ClamAV) | Included (ClamAV) |
| Certificates and traffic | |||||
| Managed SSL/TLS certificates (Let's Encrypt, Google Trust Services), renewed automatically | Included | Included | Included | Included | Included |
| HTTP/2, with optional HTTP/3 | Included | Included | Included | Included | Included |
| Live traffic statistics | Included | Included | Included | Included | Included |
| Real visitor address in IIS logs and applications | Included | Included | Included | — | — |
| Threat intelligence and blocking | |||||
| Threat-intelligence feeds | Included | Included | Included | Included | Included |
| Geo blocking | Included | Included | Included | Included | Included |
| Premium threat intelligence | — | Included | Included | Included | Included |
| Herd immunity (fleet-wide blocking of confirmed attackers) | — | Included | Included | Included | Included |
| Bot and abuse protection | |||||
| Automatic login brute-force protection, with browser check | Included | Included | Included | Included | Included |
| Bot detection and protection (browser check for sites under attack and flagged visitors) | — | Included | Included | Included | Included |
| Bot-cluster and credential-stuffing detection | — | Included | Included | Included | Included |
| TLS fingerprinting (JA4) for bot detection | — | Included | Included | Included | Included |
| API protection | |||||
| Allowed methods and per-route limits | Included | Included | Included | Included | Included |
| API specification checks (OpenAPI) | — | — | Included | — | Included |
| JWT validation | — | — | Included | — | Included |
| CORS controls | — | — | Included | — | Included |
| GraphQL limits | — | — | Included | — | Included |
| Server protection | |||||
| Sign-in brute-force protection | RDP, SMB, SQL Server and more* | RDP, SMB, SQL Server and more* | RDP, SMB, SQL Server and more* | SSH | SSH |
| Port-scan detection | Included | Included | Included | — | — |
| Malware scanning and quarantine | Included | Included | Included | — | — |
| Outbound connection control | Included | Included | Included | — | — |
| Operations | |||||
| Hosting panel support (Plesk, SolidCP) | Included | Included | Included | — | — |
| Automatic updates with automatic rollback | Included | Included | Included | Included | Included |
| Protection status for every feature, and alert email | Included | Included | Included | Included | Included |
| A/B system updates and Secure Boot | — | — | — | Included | Included |
*Sign-in protection covers the Windows services that write failed sign-ins to the Windows Security log. “—” means the feature is not included in that edition.
NEED HELP CHOOSING?
Let's map your requirements.
Share your deployment model and security needs, and we'll help identify a suitable edition.