– RECOMMENDED PRODUCTS · TSG LABS
Products and platforms that have earned their place across 15+ years of design, deployment, and remediation work. TSG Labs holds no reseller agreements, sells no equipment, and earns no margin on platform selection. These reflect honest field experience, including what to watch for.
How to read this page. Every entry has a "why it earns the spot" and a "watch for" because no platform is the right answer in every environment. The watch-for is not a deal breaker, it is information you should have before procurement. Pricing, sizing, and feature licensing are not covered here. Those depend on the deployment and need to be worked out per project.
Why it earns the spot: Unified VMS, access control, and ALPR on a single platform with an architecture that holds up at scale. Strong record of supportability across decade-old deployments. Federation, archiver tiering, and StreamVault appliance options that take guesswork out of sizing.
Watch for: Licensing model gets complex on multi-site deployments. Plan license counts and Federation topology before procurement.
Why it earns the spot: Mature access control platform with deep integration story for high-security environments. Strong audit trail, solid handling of card formats and credential lifecycles. Common in regulated and government deployments where the auditability is mandatory.
Watch for: Hardware and integration partners matter. Get the integrator selection right or the platform never reaches its potential.
Why it earns the spot: Camera-vendor-neutral by design. Tiered editions from small site to enterprise. Recording server architecture is straightforward to scale, and the platform has held up across major version transitions without surprises.
Watch for: Make sure the edition matches the deployment. The lower tiers are deliberately limited and outgrowing them mid-deployment is painful.
Why it earns the spot: Strong analytics and unusually good camera-side compression. Useful when bandwidth and storage budgets are real constraints, particularly on multi-site retail and industrial deployments.
Watch for: Tighter ecosystem than Genetec or Milestone. If the camera selection is locked to specific vendors, that may or may not be a problem depending on the deployment.
Why it earns the spot: Field-proven build quality, long firmware support windows, and consistent integration with every major VMS. The default recommendation for camera selection in environments where uptime and lifecycle matter more than the lowest unit price.
Watch for: Premium pricing. Worth it on a 7-to-10-year deployment, harder to justify on a 3-year deployment.
Why it earns the spot: Strong intelligent video and detection at the edge. Particularly capable in challenging lighting, perimeter, and outdoor scenarios. Long-cycle reliability comparable to Axis.
Watch for: Configuration interface has its own learning curve. Plan integrator training time accordingly.
Why it earns the spot: Standard-issue access switching for security networks where TAC support, IOS-XE feature parity, and predictable lifecycle matter. The platform recovery experience when things go sideways is unmatched in the segment.
Watch for: License model (DNA Essentials / Advantage) can quietly add cost. Right-size the license tier to the feature set you will actually use.
Why it earns the spot: Modern AOS-CX, strong management plane (NetEdit / Central), and clean configuration model. Pricing is competitive with Cisco for similar feature sets. Strong choice in greenfield environments where existing IOS familiarity is not a constraint.
Watch for: AOS-CX is its own learning curve for teams coming from IOS or older Aruba OS. Budget time for the transition.
Why it earns the spot: Strong value proposition in education, healthcare, and mid-market deployments. AOS Release 8 is a flat command structure that is fast to work in once you know it. Hardware reliability is solid.
Watch for: Smaller third-party tooling and integrator ecosystem than Cisco or Aruba. Make sure your integrator has actual ALE experience, not just sales materials.
Why it earns the spot: Junos OS configuration model, with commit-and-rollback and configuration archive built into the platform. Strong choice in environments where the ops team values repeatability and config-as-code.
Watch for: Mid-market support coverage in Canada is thinner than Cisco. Pre-engagement with the local Juniper partner is worth doing.
Why it earns the spot: Practical NGFW with strong throughput per dollar and a reasonable management story. Fits well in environments where the firewall, switching, and SD-WAN may be unified under one vendor over time.
Watch for: Vulnerability cadence has been notable in recent years. Patch management discipline matters more on FortiGate than on some competitors.
Why it earns the spot: Best-in-class application identification and policy model. Strong choice when the security team is mature enough to use the policy granularity that the platform offers.
Watch for: Cost. Policy depth is wasted if the team does not have time to maintain it.