SonicWall NSa vs Sophos XGS comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
120,425 views|88,209 comparisons
90% willing to recommend
SonicWall Logo
8,849 views|6,639 comparisons
87% willing to recommend
Sophos Logo
6,071 views|4,100 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between SonicWall NSa and Sophos XGS based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed SonicWall NSa vs. Sophos XGS Report (Updated: May 2024).
772,127 professionals have used our research since 2012.
Q&A Highlights
Question: Which firewall to choose for a medium-sized company with 150 users: Sophos XGS 2100 or SonicWall 2700?
Answer: Some find that the Sophos XGS 2100 is the better firewall for a medium-sized company with 150 users and ~120 concurrent connections, as it offers better performance, more advanced security features, and a more user-friendly interface. However, it is reportedly more expensive. If you are looking for a more affordable firewall with good performance and a wide range of features, the SonicWall NSa 2700 may be a good option. However, the Sophos XGS 2100 may be the better choice if you need the best possible performance and security. The best firewall for your organization should be based on specific needs and requirements, so it may be best to consider the abovementioned factors when deciding. Below are some advantages and disadvantages of the two firewalls, as shared by several users: Sophos XGS 2100: Advantages Its performance may be better than the performance of Sonicall NSa 2700 They say the solution has more advanced security features Its interface may be more user-friendly Disadvantages Reportedly has a higher cost SonicWall NSa 2700 Advantages Reportedly more affordable Good performance Wide range of features Disadvantages Its interface may be less user-friendly They say it has fewer advanced security features
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature is the ease of configuration.""The SD-WAN function is very developed. It has SD-WAN functionality with security features in one device. We can manage from one single console SD-WAN and the security policy.""Advanced routing (RIP, OSPF, BGP, PBR). It gives you a seamless and simple integration into a large network.""The initial installation is very straightforward.""It is useful for protecting and segregating the internal networks from the internet. Most of our customers also use the FortiGate client to connect to their offices by using the VPN client, and of course, they usually activate the antivirus, deep inspection, and intrusion prevention services. They are also using it for web filtering and implementing various policies dealing with forwardings, NAT, etc.""Our security improved from being able to put in rules and close off unwanted traffic.""I am "headache free" that I don't have to categorize all the websites and that security has been pre categorized by the people, and that the services are getting updated. At least one part of my problem is over.""The main benefit is the grouping of our security monitoring."

More Fortinet FortiGate Pros →

"The most valuable aspect of the solution is its ability to work like any other firewall.""We like the features, but the main thing is from a commercial and cost perspective it is very good.""We have utilized all the features. The most valuable are the URL filtering by category, DMZ zoning, load balancing and site-to-site VPN.""The product blocks access when I visit unrecognized websites.""The solution has many useful features, such as content management, user management, user filtering, and domain controller connectivity mapping.""I like this solution because we are focused on VPN and have many brands that need to link a VPN and have security, like ransomware, spyware, and basic protection.""Content Filtering and sandboxing are valuable features.""User friendly and intuitive."

More SonicWall NSa Pros →

"Web filtering and intrusion detection are essential features. As system integrators, we also like the dashboard because it's easier to configure all the features.""The VPN is the best feature.""The initial setup is very simple.""We are happy and satisfied with all the features.""The threat management system and VPN are most valuable.""The most valuable features of Sophos XGS are a set of functionalities that are quite commendable, they call it synchronized security, where all the solutions share defense lines with each other.""There are good KCL rules and policies as well as NATing rules.""The solution is very user-friendly, and the GUI is so good that I don't have to use the CLI. This eliminates the need for typing; clicking allows me to get to what I'm looking for."

More Sophos XGS Pros →

Cons
"It could use better throughput on some of the smaller boxes for the branch offices.""The support team for Fortinet FortiGate needs to be more customer friendly.""One issue that I have had is that sometimes I need to monitor the traffic, so I need to filter it according to the user and which user is using it the most. I experience a bottleneck most of the time, particularly at the peak time when the number of contracts and users are at maximum.""There is room for improvement related to the logging and reporting aspect.""The initial setup is complex.""The stability could be a bit better.""Its reporting capabilities can be improved. It should have some out-of-the-box reporting capabilities and some degree of customization. The basic reporting that it currently has is not sufficient to create more usable reports. It needs some sort of out-of-the-box reporting. They try to make customers purchase FortiAnalyzer for this kind of reporting, which is an additional cost. Other firewall vendors, such as SonicWall and Sophos, provide this sort of reporting without any additional cost.""Fortinet FortiGate can improve by integrating the web application firewall and the DDoS protection part of the solution. Having a WAF feature, web application firewall, and proxy together would be a good benefit."

More Fortinet FortiGate Cons →

"SonicWall needs to work on SD-WAN.""The content filter needs to be improved.""The filter settings are confusing and overly complicated. The user interface can be improved.""SonicWall NSa's reporting could be improved.""The problem primarily with SonicWall is it's a Unix box. And it's all software, all the activities, blocking, censoring, everything has to happen in the software. If you start hitting the box with a lot of sessions it slows down and that's not what I expect from a firewall.""In terms of improvement, features like App Control do not work properly""Sometimes I found the GUI and some of the features a little bit hard to navigate, as opposed to Fortigate, which is much more user-friendly.""The dashboard must be improved."

More SonicWall NSa Cons →

"There are a lot of false-positive cases.""What could be improved in Sophos XGS is its connectivity with Azure AD. It's best if it could work directly without using any servers locally, or in the data center, and this functionality should be made available in this product.""The solution could have a bit more functionality.""It would be useful if Sophos XGS included DDNS-based features.""The solution could be easier to manage and configure.""In version 18 of Sophos XGS, the log details are not very good. However, in version 19 they are more detailed. The Fortinet FortiGate has better detail overall compared to Sophos XGS. They provide updates to the solution frequently, but they do not fix the problems that exist.""Sophos' technical support has degraded in the last couple of years. They seem to need to ask a lot of questions, even with simple problems, and take a long time to provide solutions.""The SD-WAN feature isn't very good. It's there, but it doesn't work properly."

More Sophos XGS Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "Additional resources are too expensive."
  • "Considering the market, I believe that the price of this solution is great."
  • "In our evaluation, we found that the costs of deploying the solution, and also purchasing the hardware and licenses, were very attractive."
  • "Licensed features provide application control, content filtering, antivirus, and anti-malware all in a single appliance."
  • "The CPUs are not able to compete with a similar price point to the Fortinet, WatchGuard, or Palo Alto product."
  • "A firewall doing anti-spam might be a low cost solution, but it is not your best strategy."
  • "You need their analyzer to properly generate reports. This is an expensive, licensed feature, with a complex application or appliance back-end."
  • "If you want to connect more than five concurrent users by VPN then you have to pay an additional fee."
  • More SonicWall NSa Pricing and Cost Advice →

  • "I live in Bolivia and the price of Sophos XGS is high. However, they have adjusted their price a little over the past while but the price could still be less expensive to be affordable."
  • "Once you pay for the Sophos XGS hardware there is no license required. There are additional costs if you want the support. We have purchased support for three years."
  • "The price of the solution is reasonable and their target market is small to medium-sized companies."
  • "Sophos XGS is priced lower than some of its competitors, such as Fortinet"
  • "The license for Sophos XGS is for three years, paid on a yearly basis. Everything is included with the license; there are no additional fees."
  • "The cost is comparable to other similar solutions."
  • "The price of Sophos XGS is less than competitors worldwide. However, in Turkey the solution is expensive."
  • "The licensing cost is in the normal range and is not very costly."
  • More Sophos XGS Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    772,127 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite… more »
    Top Answer:The product blocks access when I visit unrecognized websites.
    Top Answer:The solution is cheaper than others. It has a reasonable price.
    Top Answer:The dashboard must be improved. The product should enable alerts. When hackers compromise our websites and applications… more »
    Top Answer:The policies are the greatest feature. They allow us to configure granular control over our network traffic.
    Top Answer:The product’s pricing is average compared to other solutions.
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    NSA 250M, NSA 2600, NSA 3600, NSA 4600, NSA 5600, Dell SonicWALL NSA
    Learn More
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    SonicWall NSa dispenses advanced threat protection using a high-performance security platform. The NSa series implements intuitive deep learning technologies in the SonicWall Capture Cloud Platform to dispatch the automated real-time threat detection and deterrence enterprise organizations need today. SonicWall Network Security appliance (NSa) series is best for mid-sized organizations to distributed enterprises and data centers.

    SonicWall NSa series next-generation firewalls (NFGWS) combine two very robust security ideologies to deliver advanced threat protection to keep users’ networks safe. Boosting SonicWall’s multi-engine advanced threat protection (ATP) is their Real-time Deep Memory Inspection (RTDMI™). The RTDMI intuitively identifies and stops aggressive zero-day threats and vicious malware by investigating memory directly. This real-time process allows SonicWall RTDMI to be accurate, lessen false positives and discover and alleviate malicious threats and attacks. SonicWall’s single-pass Reassembly-Free Deep Packet Inspection (RFDPI) will audit every byte of each and every packet by investigating both outbound and inbound traffic on the firewall. By combining the SonicWall Capture Cloud Platform along with on-box offerings such as intrusion prevention, web/URL filtering, and anti-malware, the NSa series is able to block the most malicious and dangerous threats at the gateway.

    Additionally, SonicWall firewalls supply absolute protection by executing complete inspection and decryption of SSH and TLS/SSL encryption connections - no matter the port or protocol. The firewall takes a deep dive into each and every packet (the header and data) routing out any anomalies, zero-day intrusions, threats, and protocol non-compliance. Users can also define unique criteria specific to their organization to ensure their networks remain safe. This aggressive deep packet inspection is able to identify and block malicious attacks, stop dangerous malware downloads, prevent the spread of infections, and defeat command and control (C&C) communications and data exfiltration. Protocols involving inclusion and exclusion allow users complete control to decide, based on specific governance policies, organizational policies, or government or legal compliance, which traffic is to be investigated for decryption or inspection.

    SonicWall Nsa offers enterprise organizations the network control and fluid flexibility they desire using an intrusion prevention system (IPS), VPN, real-time visualization, and other advanced powerful security features, making it a popular firewall solution in today's marketplace.

    Reviews from Real Users

    “The features that I have found most valuable are the firewalling, which is very good, and the GUI which is very intuitive. It is easy to use and provides great security.” - Network Engineer at a maritime company

    “What's valuable in SonicWall NSa is the ATP (advanced threat protection). It can protect users from malicious links. SonicWall NSa also has a Sandboxing service that is very helpful for us, especially when end users accidentally click on malicious links. Another valuable feature of this solution is that it is very useful for site-to-site VPN connectivity issues. SonicWall NSa has very good hardware. I also love that SonicWall has very good technical support, who are very knowledgeable, provide good suggestions, and they're easy to reach.” - Mohammed M., Network Administrator at Transgulf Readymix

    Sophos XGS is a comprehensive network security solution designed to protect organizations from advanced threats. It combines next-generation firewall capabilities with advanced threat protection, web filtering, and application control. 

    XGS has powerful deep learning technology and can detect and block even the most sophisticated malware and ransomware attacks. It also offers granular control over web access, allowing organizations to enforce policies and prevent access to malicious or inappropriate websites. Additionally, XGS provides application control features, enabling organizations to manage and prioritize network traffic based on specific applications or user groups. 

    With its intuitive management interface and centralized reporting, XGS offers easy deployment and monitoring of network security. 

    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Orange County Rescue Mission, First Source, Michaels & Taylor, Green Clinic Health System, Aspire Chiltern Skills and Enterprise Centre, UnitedStack, Faith Lutheran College Redlands, Celtic Manor Resort, Star Kay White, Air Works, Unimat Life, NHS Yorkshire and Humber Commissioning Support (YHCS), Hutt City Council, Mato Grosso do Sul, Nspyre
    Information Not Available
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    REVIEWERS
    Manufacturing Company18%
    Educational Organization8%
    Retailer8%
    Construction Company8%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Retailer7%
    Government7%
    Comms Service Provider6%
    REVIEWERS
    Comms Service Provider20%
    Manufacturing Company10%
    Energy/Utilities Company7%
    Outsourcing Company7%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Comms Service Provider8%
    Construction Company7%
    Manufacturing Company7%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business28%
    Midsize Enterprise32%
    Large Enterprise40%
    REVIEWERS
    Small Business58%
    Midsize Enterprise20%
    Large Enterprise22%
    VISITORS READING REVIEWS
    Small Business40%
    Midsize Enterprise16%
    Large Enterprise44%
    REVIEWERS
    Small Business69%
    Midsize Enterprise11%
    Large Enterprise20%
    VISITORS READING REVIEWS
    Small Business43%
    Midsize Enterprise18%
    Large Enterprise39%
    Buyer's Guide
    SonicWall NSa vs. Sophos XGS
    May 2024
    Find out what your peers are saying about SonicWall NSa vs. Sophos XGS and other solutions. Updated: May 2024.
    772,127 professionals have used our research since 2012.

    SonicWall NSa is ranked 19th in Firewalls with 80 reviews while Sophos XGS is ranked 17th in Firewalls with 62 reviews. SonicWall NSa is rated 7.8, while Sophos XGS is rated 7.8. The top reviewer of SonicWall NSa writes "Great performance and security with reasonable pricing". On the other hand, the top reviewer of Sophos XGS writes "Easy to use, simple to learn, and offers great reporting". SonicWall NSa is most compared with SonicWall TZ, Meraki MX, Sophos XG, Cisco Secure Firewall and SonicWall NSv, whereas Sophos XGS is most compared with Sophos XG, OPNsense, Netgate pfSense, WatchGuard Firebox and Zyxel Unified Security Gateway. See our SonicWall NSa vs. Sophos XGS report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.