We performed a comparison between Fortinet FortiGate and Sophos XG based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Fortinet FortiGate and Sophos XG had similar user ratings regarding ease of deployment, service and support, and ROI. In terms of features, each software has its pros and cons. Fortinet FortiGate offers some great features, but it is a little more complex and needs better reporting. Sophos XG provides a stable, complete firewall solution, but it fails to integrate well with other products, and the SD-WAN needs improvement. Sophos XG was the better option for pricing, as they offer flexible pricing based on region.
"Easy to implement, and it is also reliable."
"The most valuable feature is the policy routing and application control."
"It's quite comfortable to handle the FortiGate firewall."
"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."
"It's a user-friendly firewall. Most of the tasks are very simple. It's simple to configure and troubleshoot this firewall."
"All of the features of Fortinet FortiGate are useful and the security protection is good."
"This version is stable. I don't have any issues with this solution, in our environment, it works well."
"From the firewall perspective, the rules and policies are very sufficient and easy to use."
"Sophos XG Firewall is very usable, very easy to install, and very user friendly."
"The tool's most valuable feature is threat protection and DLP features. So far, basic DLP features like content protection and blocking. Furthermore, for remote users, features such as back filtering and application control are available, allowing for command and control from our side. It is very easy to understand policy applications."
"I like their firewall and the intrusion detection feature"
"The SL VPNs are the most valuable feature. I have a lot of systems out of the head office that need to connect to the local networks, and they all connect wirelessly via the Sophos VPN client."
"The filtering is very easy to do. You can segment and create profiles for usage very easily."
"The solution is more cost-effective than FortiGate, Cisco and Palo Alto, which have very expensive licenses."
"This is a very stable solution."
"The solution offers a good firewall endpoint and email encryption."
"Due to its higher cost, Fortinet FortiGate can lead to increased operational expenses."
"I would like to see more advanced developments of a wireless controller in the future."
"The integration with third-party tools may be something that they should work on."
"Fortinet needs more memory to save the log files. We need it to save the logs on the hardware and not in the cloud. I know this feature is available in FortiCloud, but if we need this log locally, it is not available."
"The solution needs to improve its integration with cybersecurity."
"There is a lot of improvement needed with SSL-VPN."
"The ease of use could be improved."
"Lacks training for new features."
"The management console could be improved and the solution lacks good technical support."
"They need to allow their solution to integrate with other products and not just other Sophos solutions."
"It is already secure but it could be better in terms of other breaches that may occur."
"Scalability it is a bit limited. We did a sizing exercise before the purchase. But that was just to fit our current needs. There was no room for having an option to upgrade the device. The only option that we have if we are grow in the near future, is to go for another model with higher specs, which is actually more expensive. In other words it doesn't have that modularity ."
"They need to do more quality checks before they release firmware upgrades. Currently, a few Cyberoam firewall customers are facing some issues while upgrading the Cyberoam firmware to Sophos. After the new firmware is installed, they are seeing some performance issues, which require some bug fixes. The performance is fine after getting the required support. Customers who are already using Sophos hardware are quite satisfied with this solution. Their support should also be improved. We are facing difficulties getting support on time through email or phone."
"The number of ports, especially on the entry-level appliances, should be increased."
"I would want the level of integration to have another device on your network that is also reliable."
"We are not very happy with the customer support they provide — it's quite slow."
Fortinet FortiGate is ranked 2nd in Firewalls with 306 reviews while Sophos XG is ranked 7th in Firewalls with 192 reviews. Fortinet FortiGate is rated 8.4, while Sophos XG is rated 8.2. The top reviewer of Fortinet FortiGate writes "It's a reliable solution that's easy to install and cheaper than competitors ". On the other hand, the top reviewer of Sophos XG writes "Easy to use and deploy with an improved pricing structure in place". Fortinet FortiGate is most compared with Cisco Secure Firewall, Netgate pfSense, Meraki MX, Check Point NGFW and WatchGuard Firebox, whereas Sophos XG is most compared with Netgate pfSense, OPNsense, Sophos XGS, SonicWall TZ and Palo Alto Networks NG Firewalls. See our Fortinet FortiGate vs. Sophos XG report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Go with Sophos XG or if you have tight budget and technical expertise then can move with pFsense.
Dear Sharif.
For 150 users any firewall will work perfectly. You can choose as per your convenience, availability, price, and better implementation partner in your region. Keep a bigger box at the central location and configure SD-WAN. SOPHOS has by default SD WAN. Make sure you have secure access to the cloud and all endpoints should have endpoint protection else only firewall will not help.
Most of the cloud service providers work on any-any rule because their responsibility is network uptime and availability. Security of your setup is your responsibility.
Manageability is better in Fortinet however features are better in SOPHOS. License bundle & ATP functions are are good in SOPHOS. Support response is good in SOPHOS but you will find less tickets in FORTINET once it is implemented as per your setup.
Overall both are good for your setup. You can choose as per convenience.
Hope this will help.. Greetings .. Ravi
In my opinion, the first point of strength is the support, and FortiGate is doing a great job in terms of support. It has numerous reference guides for configuration. The other advantage is ease of management in both the UI and CLI levels. You can use FortiGate modules to protect against web and virus attacks.
Hello Sharif,
I prefer FortiGate SDWAN Devices (FortiGate) even though we also deliver Sophos to our clients.
The decentralized FortiGate devices work as firewalls with an excellent security ecosystem. FortiGate and most other items work as Hardware units or on virtual machines.
As a Telco company we have a lot of companies working in different industries with various requirements. We can support them all with FortiGate.
Our customers prefer the security features, the stable ecosystem for life cycle management, for device/user/policy management, thread detection & prevention, intrusion prevention, sandboxing, ... the low operation effort to build a stable company network that supports the need of any customer size.
In our business, we also like that the architecture of a company network can be easily changed if the customer requirements change. From single-line sites to Data Centers with high availability and Cloud integration FortiGate can be used in any design.
The different security features that can be added by the license are powerful and integrated into the management dashboard. Updates of protection mechanisms against new threads happen automatically as soon as a new protection mechanism is available when new threads occur. The security team at Fortinet is excellent.
Greetings
Andre
Hi, XG is EOL the new series is XGS, both are excellent equipment but I prefer Fortigate, why ??? DHCP slection, leader SD-WAN, many IPSEC dynamics is possible on SOPHOS but is limit the are conflicts with many IP's dynamics you need to use DDNS, SSL tunnel for remote clients, VRF, advanced routing with OSPF and BGP ("as path"). Greetings