We performed a comparison between Huawei NGFW and Sophos XG based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Allows for firewall rules to be programmed and named in a way that makes it “readable”"
"The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."
"A strong point of FortiGate is the graphical interface is complete and easy to use."
"The most valuable features of Fortinet FortiGate are the rules and quality of service."
"We use the FortiGate Sandbox to detect zero-day vulnerabilities, such as anomalies or malware, that are unknown and have not yet been discovered."
"Web filtering and two-factor authentication are great features."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"It's very easy to configure."
"The setup is quite easy."
"Huawei was able to assist us in the installation of their product. The installation was very fast."
"The UI is quite good."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"We have found the initial setup to be straightforward."
"Huawei support is excellent. I rate it 10 out of 10."
"One of the best things about Huawei NGFW is its ability to integrate Azure solutions. Every year, we can add new features to the firewall. The key advantage is the integration across the entire network, so it doesn't work in isolation. For example, we can manage everything with features like the secret manager or analytic IDs. The solution is straightforward. It can also detect intrusions."
"I had no difficulty using the Huawei NGFW."
"The solution is scalable."
"Technical support is responsive."
"This solution does everything and anything a firewall can do."
"Sophos is a comrehensive solution which allows me to configure all the attendant products, such as Sophos' firewall, Endpoint and Encryption features."
"The most valuable features of Sophos XG are the ease of management and good out-of-the-box reporting."
"The VPN is easy and has good logging, monitoring and notifications."
"What I have found most valuable with the Sophos XG is it's a key component of the Intercept X EDR environment. You have to have it to receive the full benefit. If you've you are using Sophos SG firewalls, they're great firewalls and in many ways, I prefer them to the Sophos XG. Since I have set them up, programmed them, and manipulate firewall rules, et cetera, the Sophos SG's a better interface. However, the Sophos XG's very powerful. I prefer it over other solutions I have used, such as Cisco Meraki and SupportNet, I don't like them. They're not very friendly to people who have to set them up and implement them."
"It is a very stable solution."
"They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI. Customers, typically, like everything to be done by the GUI."
"It is quite new for us, and we need to go more in-depth into the monitoring tools. It provides different features that we need to do what we want. So far, it is okay for us. In terms of improvement, in the future, they can provide a faster implementation of features. Some of the features are first available in other solutions. Fortinet sometimes takes a little bit longer than other solutions, such as Check Point, to implement new features."
"The captive portal could be improved."
"Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box."
"I feel that the reporting needs to be improved."
"They need to improve their technical support."
"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files."
"Fortinet currently has many products bundled with FortiGate including the basic firewall and load balancer, and I think that that they need to have separate product portfolios for each of these specialized services."
"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."
"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."
"The tool does not have web functionality. It needs to also have high end firewalls."
"With the Huawei firewall, none of the features comes at the top. We found out later that customer support is really not good. For this firewall, because of our customers' routine, for example, every six months they'll do a penetration test to find weaknesses. So whenever they came up with VAPT reports, they are looking to Huawei for help. I think that's basically because it's a different culture. Chinese culture and our culture is different. They have always tried to help find some excuses or say some other things that cannot help you solve the problem immediately."
"The user interface could be more user-friendly."
"The solution does not have sandboxing features."
"Huawei NGFW should have better reporting and a dashboard for the visibility of traffic."
"The solution is scalable but it is difficult because you need to purchase new systems, it is not just one click."
"On reports, they sometimes give a summary, but it lists different users as unknown. There are times that I really want to know which user or which IP is causing a problem."
"It is already secure but it could be better in terms of other breaches that may occur."
"For the moment, managing the Sophos interface is a little bit challenging."
"They should improve the hardware. If they can do that, it will be a very good product."
"It is performing well. However, the only challenges that we are facing are the effectiveness with blocking the proxy and tuneling applications, aside from proxy and similar applications. So the application filter on the product is not really performing 100%. Every now and then there are some updates that are happening on such applications, and it takes time until it gets the appropriate updates and becomes capable of capturing such applications and blocking them. A new feature I would really like to see would be some sort of an enhanced application filter with greater efficiency when it comes to the applications that can bypass firewall policies. These applications are really a nightmare. Once they are on the network and not detected, or the appliance is not really successful in capturing them and unblocking them, the bandwidth gets wasted all the time."
"The training manual provided to users lacks proper guidance on configuration procedures."
"Their technical support needs improvement. I've been on hold with them for hours waiting for their support."
"The SD-WAN could be improved."
Huawei NGFW is ranked 31st in Firewalls with 20 reviews while Sophos XG is ranked 7th in Firewalls with 192 reviews. Huawei NGFW is rated 7.2, while Sophos XG is rated 8.2. The top reviewer of Huawei NGFW writes "A scalable and easy-to-setup product that can be used to configure different policies for specific users". On the other hand, the top reviewer of Sophos XG writes "Easy to use and deploy with an improved pricing structure in place". Huawei NGFW is most compared with Cisco Secure Firewall, Netgate pfSense, Meraki MX, Palo Alto Networks NG Firewalls and Sangfor NGAF, whereas Sophos XG is most compared with Netgate pfSense, OPNsense, Sophos XGS, SonicWall TZ and Sophos UTM. See our Huawei NGFW vs. Sophos XG report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.