We performed a comparison between Check Point CloudGuard Network Security and Sophos XG based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.
Features: Check Point CloudGuard Network Security is notable for its cutting-edge threat prevention, centralized administration, and focus on safeguarding cloud environments. Sophos XG is highly regarded for its robust capabilities, user-friendly interface, and extensive defense against harmful threats.
Check Point CloudGuard Network Security could benefit from enhancements in the support system, feature additions, data protection visibility, DLP feature, configuration process, integration, documentation, and flexibility. Sophos XG requires improvements in antivirus, graphical interface, performance, logging, support, setup process, configuration, functionality, sales policies, firewall upgrades, network monitoring, content filtering, GDPR features, search engine, stability, user-friendliness, firmware upgrades, and remote access.
Service and Support: Some customers appreciate Check Point's technical support, while others are dissatisfied with the slow response time. Sophos XG's support receives mixed reviews, with some customers finding it helpful and responsive, while others express dissatisfaction with unhelpful and unresponsive assistance.
Ease of Deployment: The setup process for Check Point CloudGuard Network Security is described as straightforward and uncomplicated, although some users note that it can be challenging and necessitates technical proficiency. Sophos XG's initial setup is generally considered simple and straightforward, although certain users find it difficult or extremely challenging. The ease of setup is influenced by factors such as familiarity with the product and technical expertise.
Pricing: Check Point CloudGuard Network Security is considered costly for setup, whereas Sophos XG provides flexible pricing based on functionality. Check Point's pricing varies with organization size and country, while Sophos offers competitive pricing, particularly for educational institutions.
ROI: Check Point CloudGuard Network Security offers a cost-effective solution with improved performance, providing an ROI ranging from 80% to 85%. Sophos XG boasts an ROI of 100% or higher, reducing support costs and enhancing security practices.
Comparison Results: Check Point CloudGuard Network Security outperforms Sophos XG. Users find the setup of Check Point CloudGuard Network Security to be simple and intuitive. Check Point offers a wider range of valuable features, including VPN Blade, IPS Blade, URL filtering, and Applications Control Blade, along with advanced threat prevention capabilities and centralized security.
"The SD-WAN feature is the most valuable. This feature evolved from link load balancing. It has helped us in terms of our uptime and privatizing applications whenever we experience an outage. The SD-WAN feature has been a plus for us. Two-factor authentication has allowed us to add more users in terms of remote working. We have two-factor authentication for remote workers to authenticate them before they get on the network."
"The most valuable feature of Fortinet FortiGate is the simple configuration."
"FortiGate has a strong security topic which allows all of the Fortinet devices to communicate and share information which makes their security more powerful."
"The most valuable feature is the SSL VPN, as it allows us to connect and it separates this product from other firewalls."
"This solution has helped our organization by having strong functions and a reliable firewall."
"Mainly the FortiGate reporting system is very good. It guides us through all the expectations of security. Fortinet provides us all that we need for security. Also, Fortinet FortiGate is a next-generation firewall. It is much more advanced than others."
"It's super reliable. I don't think I've ever had a reliability issue with it."
"The web tutor and automatic rules by schedule are good features."
"The visibility, the one-pane-of-glass which allows me to see all of my edge protection through one window and one log, is great. Monitoring everything through that one pane of glass is extremely valuable."
"Its integration and use of features, such as advanced threat prevention, have helped us a lot with malware prevention and also with avoiding exposure to false positives."
"The most valuable feature I have found in CloudGuard Network Security is the flexibility to rebuild the firewall as needed."
"The most valuable feature for me is that you have just one license. You can test and implement everything you need with one license. You do not need to pay for separate module licenses when you want IPS or other features."
"Auto-scaling and zero touch are valuable features."
"The feature most valuable to me is the NDTX blade that Check Point provides, and I like how the solution is not vulnerable."
"The initial setup is pretty easy."
"We have complete visibility of attacks originating from email including spear-phishing, spoofing, etc."
"The VPN is easy and has good logging, monitoring and notifications."
"The SD-WAN feature stands out as the most valuable aspect."
"The security of Sophos XG is very good."
"I rate Sophos support 10 out of 10. When my device was freezing, I contacted them, and sent me a replacement. It only took a couple of days for Sophos to ship the device to Kenya. I didn't have a redundant device, so it was urgent."
"The installation is easy. There is a wizard that can be used for a single connection making it simple and if you have multiple connections you can configure it manually."
"The solution is more cost-effective than FortiGate, Cisco and Palo Alto, which have very expensive licenses."
"Sophos firewalls are scalable. They are pretty strong in security. So, when they provide any kind of firewall, they provide all the features such as anti-spam, antivirus, etc."
"I have found the feature allowing you to manage everything from a centralized location beneficial."
"At first glance, the interface for the device is very confusing."
"A sandbox would be good in order to be able to inspect the emails containing spam and be able to validate the emails that contain malware, prior to delivering to the customer."
"The scalability could be better."
"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."
"The performance and speed are aspects of the solution that could always be improved upon."
"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."
"The captive portal could be improved."
"The stability could be a bit better."
"They are coming out with more SD-WAN express route support from a firewall perspective. That would be great."
"CloudGuard Network Security needs to include new features. One specific feature I would like to see is the ability to protect external resources using single sign-on integration with various identity providers, including custom identity providers. Its pricing could also be cheaper."
"At CPX, we heard that we can see all the things on the same platform. That is what we have been asking for, and hopefully, we are going to start seeing it this year."
"Micro-Segmentation functionality for EAST-WEST traffic is not native and requires integration with a third-party OEM."
"I think they have pretty much mastered what can be done. There are some nuances like when you fail over from one cluster member to the other, the external IP address takes about two minutes to fail over."
"The memory and hard disk capability could be strengthened."
"There is room for improvement regarding the technical support provided."
"We faced issues while upgrading our CloudGuard Network Gateway. When we tried to use the template that Check Point offers on their site, it was not available for the second to the latest version, so I was forced to upgrade my management server. That was very challenging for us."
"When it comes to improvements that the vendor can make, we see that the cloud integration for managing all the firewalls is essentially a replacement of the on-prem version we had and is not sufficiently mature."
"In the next release, I would like to see improvements made to the policy and simplify the policy-making, as the complexity of it makes it really tough."
"It would be beneficial if the platform provided more flexible support for a variety of devices."
"Inability to investigate incidents, there is no tracking."
"Sophos XG should improve on the GDPR features involving data protection and encryption. Security regarding data protection is important."
"The UI needs improvement because it can be a little weird at times."
"I do prefer when updates come out a bit quicker."
"It would be better if they made their own hardware like Palo Alto and Fortinet. They use their own ASICs and claim it is more secure."
More Check Point CloudGuard Network Security Pricing and Cost Advice →
Check Point CloudGuard Network Security is ranked 8th in Firewalls with 121 reviews while Sophos XG is ranked 6th in Firewalls with 192 reviews. Check Point CloudGuard Network Security is rated 8.6, while Sophos XG is rated 8.2. The top reviewer of Check Point CloudGuard Network Security writes "Highly reliable, great visibility, and centralized management". On the other hand, the top reviewer of Sophos XG writes "Easy to use and deploy with an improved pricing structure in place". Check Point CloudGuard Network Security is most compared with VMware NSX, Azure Firewall, Akamai Guardicore Segmentation, Cisco Secure Firewall and Fortinet FortiGate-VM, whereas Sophos XG is most compared with Netgate pfSense, OPNsense, Sophos XGS, SonicWall TZ and Sophos UTM. See our Check Point CloudGuard Network Security vs. Sophos XG report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.