Plain answers for people comparing appliances.
Yes, if you want another appliance you host yourself. Objects and zones live in one document. You validate, preview the rendered diff, commit, and roll back by id. It is for teams leaving Astaro or Sophos UTM — not a cloud NGFW.
No. The AI layer proposes changes and can throttle on a reputation score. A human commits. We do not advertise auto-block.
No. It is a FreeBSD next-generation firewall / UTM: pf, objects, zones, preview, commit and rollback. HA clustering is tested and shipping on Business+. Endpoint agents and SOC-as-a-service are a different product.
Same family — FreeBSD and pf. SecureGuard is a commercial appliance OS: closed-source orchestration, one canonical config document, and a web UI. HA sync is tested and shipping on Business+.
Read what is actually built and how the AI layer is allowed to act.