We performed a comparison between Palo Alto Networks NG Firewalls and Sophos XGS based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."
"Fortinet FortiGate is a security device. It can optimize security on the networks of a company. It actually protects the company from attacks from outside. With FortiGate, you can categorize the users. You can create a group of users that can access all of the websites for their work. You can limit other users' access."
"The most valuable features are SD-WAN, application control, IPS control, and FortiSandbox."
"Fortinet FortiGate protects against internet-based threats, both internal and external. It is scalable, stable, easy to use, and easy to install."
"We use the filtering feature the most. It has filtering and inbuilt securities. We can create customized rules to define which users can access a particular type of site. We can create policies inside the firewall."
"It is a good source for firewall protection."
"Good load balancing feature."
"FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering."
"I can enable the features I want and configure the policies based on the user and not all users and network traffic, making firewall management much easier."
"Decryption is one of Palo Alto Networks NG Firewalls' best features because we can decrypt by category. For instance, we can decrypt everything except for bank traffic so that we don't interfere with the passwords and two-factor authentication of those checking their bank accounts at work. We can still monitor for malware and other threats that come through a secure channel. It's seamless for users. The URL filtering and IPS are both great as well."
"They are regularly releasing new versions that include more integration with third-party services."
"The configuration is quite simple to understand."
"We have not had to replace hardware routers nor purchase additional hardware. So, that has provided a little bit of an ROI."
"A feature introduced by Palo Alto with the version 10-OS is embedded machine learning in the core of the firewall to provide inline, real-time attack prevention. Machine learning analyzes the network traffic and detects if there is any usual traffic coming from outside to inside. Because of Palo Alto, organizations detect around 91% of malicious attacks using machine learning. The machine learning helps customers by implementing firewalls in critical and air gap areas so there is no need to integrate with the cloud sandbox."
"Their Prisma log collection is pretty great. Our product collects the logs, and it definitely makes the configuration of log collection easier."
"I like the architecture because it separates the management plan process and the data plan process."
"It offers an easy initial implementation."
"The initial setup is very simple."
"Setup was straightforward. One person is enough for deployment."
"It's user-friendly and quite easy to configure. It's easy to communicate with the Sophos support team."
"The initial setup is straightforward."
"The solution is stable."
"It's easy to deploy and connect."
"Sophos XGS's best features are its VPN and ATPR1 cert protection."
"The pricing could be a bit better, especially when you consider how they have the most basic offering priced."
"Fortinet FortiGate could improve if it had a cloud-managed solution."
"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."
"They need to improve their technical support."
"It is stable, but its stability can be improved."
"The performance and speed are aspects of the solution that could always be improved upon."
"Fortinet FortiGate could improve by adding FortiAnalyzer to its solution, we should not have to use another solution. FortiAnalyzer can provide more detailed information."
"Fortinet FortiGate should improve the VPN tokens."
"We use ACC which is a tool for verifying the activity or traffic within your network. Currently, in ACC, the time of the samples that they offer is about five minutes. When you try to go down to a shorter duration, you can't. You only have five minutes. They can provide samples for shorter durations, such as one minute."
"The areas that need to improve are network protection and user identification."
"We would like to see improvement in the web interface for this solution, so that it can handle updates without manual intervention to put the data in order."
"The support could be improved."
"The solution would benefit from having a dashboard."
"The level of control and granularity in terms of rule customization could be enhanced. However, compared to our previous solution, Palo Alto provides much better drill-down capabilities."
"Surfacing actionable intelligence right away could be better. You have to dig far to get some of the information. If the solution could surface the two or three things out of the 10,000 a day that we really need to deal with, it would be helpful."
"The whole performance takes a long time. It takes a long time to configure."
"Reporting could be improved. The structure could be better because most of the reports aren't detailed."
"There are some issues with conversion and user roles when upgrading to Cyberoam."
"I feel Sophos should add more telemetry data to its products...Right now, I think there are only less than a dozen vendors or OEMs supported by Sophos."
"Sophos XGS could improve the automation system. It could be better if there was some level of automation, attacks automation, meaning if this happens, then it automatically executes a particular process."
"They should customers who are facing issues with their product reviews; they found bots in it. If they can do their proper research and use the user analysis and testing, that would greatly help the clients."
"Areas for improvement in Sophos XGS include better balance when handling high availability configurations, smoother firmware upgrades without the need for turning off devices, and simplified configuration after firmware updates."
"The first time a person sets it up, they will need training."
"Sophos' technical support has degraded in the last couple of years. They seem to need to ask a lot of questions, even with simple problems, and take a long time to provide solutions."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Palo Alto Networks NG Firewalls is ranked 5th in Firewalls with 164 reviews while Sophos XGS is ranked 18th in Firewalls with 62 reviews. Palo Alto Networks NG Firewalls is rated 8.6, while Sophos XGS is rated 7.8. The top reviewer of Palo Alto Networks NG Firewalls writes "We get reports back from WildFire on a minute-by-minute basis". On the other hand, the top reviewer of Sophos XGS writes "Easy to use, simple to learn, and offers great reporting". Palo Alto Networks NG Firewalls is most compared with Check Point NGFW, Azure Firewall, Meraki MX, Sophos XG and Sangfor NGAF, whereas Sophos XGS is most compared with Sophos XG, OPNsense, Netgate pfSense, WatchGuard Firebox and Meraki MX. See our Palo Alto Networks NG Firewalls vs. Sophos XGS report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.