CyberIndexBeta

Product

SonicWall Capture Client is an endpoint protection product built on SentinelOne technology and managed within SonicWall Unified Management alongside SonicWall firewalls. It runs on Linux, macOS and Windows. It is recorded as supporting behavioral detection, central management console, cloud-assisted scanning and device control. Its record also notes heuristic detection, malware detection, ransomware protection and sandbox analysis. The stated market is Enterprise, Service Provider and small and medium business.

Current Version
3.0.11.311
Market
EnterpriseService ProviderSMB
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

SonicWall has sold network security appliances since 1991 and has changed owner repeatedly: Dell bought it in 2012, then sold it in 2016 as part of the Dell Software group to Francisco Partners and Elliott Management, under whom it has been independent since. It is headquartered in Milpitas, California, and sells almost entirely through resellers and managed service providers. The firewall is the business. The SonicWall TZ series covers small offices and branches and the SonicWall NSa series the larger sites, with SonicWall NSsp at the top and SonicWall Network Security Manager as the console. Its subscription services — SonicWall Capture ATP for sandboxing suspicious files and the Capture Security services around it — are what the appliances are licensed with. SonicWall Capture Client is its endpoint product, and worth understanding before comparing its results with others here: the malware engine inside it is SentinelOne's, licensed rather than built, so a Capture Client result reflects SentinelOne's detection as delivered through SonicWall's management. Vendor page →

Country
United States
Headquarters
Milpitas, United States
Year Established
1991
Customers
500K organisations
Users
3M devices protected
Revenue
$400.0M (2026)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondaryService Provider secondarySMB secondary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web Protectionkeynative
Email ProtectionNot known
Host FirewallNot known
Sandbox Analysisnative
Cloud-Assisted Scanningnative
Heuristic Detectionnative
Device Controlnative
Vulnerability Shieldingnative
Central Management Consolenative

2 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 3.0.11.311Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-09-23Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-23Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-09-23Capability addedSandbox Analysis: built inevidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedVulnerability Shielding: built inevidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedWeb Protection: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-19Product updatedAlso sold to: SMBevidence
  • 2026-09-19Product updatedAlso sold to: Service Providerevidence
  • 2026-09-19Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 3.0.11.311 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20New versionNew version: 3.0.11.311evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.