Plain answers for people comparing appliances.
Yes, if you want another appliance you host yourself. It keeps your policy in one validated configuration, with a preview before each change and one-step undo. It is for teams leaving Astaro or Sophos UTM — not a cloud NGFW.
Only if you turn it on. By default, AI suggests changes and a person approves each one. On Business and Enterprise you can turn on automatic blocks, which act only when two signals agree, are rate-limited, and expire on their own.
No. It is a FreeBSD next-generation firewall / UTM: pf, objects, zones, preview, commit and rollback. HA clustering is tested and shipping on Business+. Endpoint agents and SOC-as-a-service are a different product.
Same family — FreeBSD and pf. SecureGuard is a commercial appliance OS: closed-source orchestration, one canonical config document, and a web UI. HA sync is tested and shipping on Business+.
Read what is actually built and how the AI layer is allowed to act.