Comparing Fortinet FortiGate and Sophos XG based on user reviews reveals distinct contrasts in user satisfaction levels, setup complexities, and interface experiences. FortiGate's customer service varies significantly, with some users satisfied and others seeking improvement, while Sophos XG also sees mixed support reviews but with emphasis on the need for more tutorials and documentation. Deployment times for FortiGate can extend significantly depending on the project, contrasting with Sophos XG's faster, albeit sometimes technical setup. FortiGate's interface and performance have been criticized for complexity and sluggishness, against Sophos XG's calls for a more intuitive interface and streamlined reporting. Licensing and costs are mixed for FortiGate, with some preferences over competing brands, whereas Sophos XG is noted for its reasonable, albeit varied, subscription pricing. Valuable features for each highlight FortiGate's robust security and customization, versus Sophos XG's emphasis on infiltration prevention, user-friendly monitoring, and comprehensive security solutions, displaying their individual strengths tailored to different user priorities.
The summary above is based on 426 interviews we conducted recently with Fortinet FortiGate and Sophos XG users. To access the review's full transcripts, download our report.
"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."
"This solution made it very easy to manage our bandwidth."
"The scalability of Fortinet FortiGate is good."
"The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."
"Their proxy-based inspection is responsive and secure."
"It's very easy to set up, it's very easy to make policies and, for an organization, that means you don't need IT expert in firewalls. You just need to have somebody who knows a little bit of IT, and that's it. With other products, you need someone with a "Masters" degree in firewalls."
"Virtual Domains (VDOMs) are a feature that we found valuable."
"FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering."
"Easy to deploy and user friendly."
"Sophos began with a basic version and evolved into something more efficient in terms of performance."
"I like the web filter, application filter, and VBA."
"Good security and a good interface."
"The initial setup is very straightforward and the solution is extremely user-friendly."
"Sophos XG has cybersecurity. It integrates with the antivirus software."
"The firewall provides network visibility and reporting capabilities, constantly improving over time. It can be integrated with the cloud console, allowing centralized management of multiple firewalls. integration with endpoint security products ensures seamless traffic flow and rule enforcement, even when endpoints are not directly connected to the firewall."
"The most valuable feature is that it scans all of the data for any kind of malware."
"Sometimes you do need to know some CLI commands, so it's a bit harder for technicians or new people that don't know it."
"They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI. Customers, typically, like everything to be done by the GUI."
"It's my understanding that more of the current generation features could be brought in. There could be more integration with EDRs, for example."
"We would like to see better pricing."
"The solution can have more features in a single box that can be multi-applied to integrate everything."
"If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox."
"The reporting in Fortinet FortiGate could improve. Customers are having to purchase additional reporting components. When I have used the Sophos solution it is a complete solution, in Fortinet FortiGate you have to use additional tools to have the features needed."
"The feature which gives us a lot of pain is ASIC architecture."
"The solution could improve by making the graphical interface better and increasing the performance."
"XG is at its end of life. People are moving to XGS."
"The product's technical support services could be better."
"The solution could be improved if it offered more documentation or at least provided more information about the products themselves."
"It's easy to use, but it's hard to configure exact settings. They need to make it easier to access advanced features."
"When it comes to improvements that the vendor can make, we see that the cloud integration for managing all the firewalls is essentially a replacement of the on-prem version we had and is not sufficiently mature."
"It would be better if they made their own hardware like Palo Alto and Fortinet. They use their own ASICs and claim it is more secure."
"Integration with Active Directory is not reliable."
Fortinet FortiGate is ranked 2nd in Firewalls with 306 reviews while Sophos XG is ranked 7th in Firewalls with 192 reviews. Fortinet FortiGate is rated 8.4, while Sophos XG is rated 8.2. The top reviewer of Fortinet FortiGate writes "It's a reliable solution that's easy to install and cheaper than competitors ". On the other hand, the top reviewer of Sophos XG writes "Easy to use and deploy with an improved pricing structure in place". Fortinet FortiGate is most compared with Cisco Secure Firewall, Netgate pfSense, Meraki MX, WatchGuard Firebox and Check Point NGFW, whereas Sophos XG is most compared with Netgate pfSense, OPNsense, Sophos XGS, SonicWall TZ and Meraki MX. See our Fortinet FortiGate vs. Sophos XG report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
Go with Sophos XG or if you have tight budget and technical expertise then can move with pFsense.
Dear Sharif.
For 150 users any firewall will work perfectly. You can choose as per your convenience, availability, price, and better implementation partner in your region. Keep a bigger box at the central location and configure SD-WAN. SOPHOS has by default SD WAN. Make sure you have secure access to the cloud and all endpoints should have endpoint protection else only firewall will not help.
Most of the cloud service providers work on any-any rule because their responsibility is network uptime and availability. Security of your setup is your responsibility.
Manageability is better in Fortinet however features are better in SOPHOS. License bundle & ATP functions are are good in SOPHOS. Support response is good in SOPHOS but you will find less tickets in FORTINET once it is implemented as per your setup.
Overall both are good for your setup. You can choose as per convenience.
Hope this will help.. Greetings .. Ravi
In my opinion, the first point of strength is the support, and FortiGate is doing a great job in terms of support. It has numerous reference guides for configuration. The other advantage is ease of management in both the UI and CLI levels. You can use FortiGate modules to protect against web and virus attacks.
Hello Sharif,
I prefer FortiGate SDWAN Devices (FortiGate) even though we also deliver Sophos to our clients.
The decentralized FortiGate devices work as firewalls with an excellent security ecosystem. FortiGate and most other items work as Hardware units or on virtual machines.
As a Telco company we have a lot of companies working in different industries with various requirements. We can support them all with FortiGate.
Our customers prefer the security features, the stable ecosystem for life cycle management, for device/user/policy management, thread detection & prevention, intrusion prevention, sandboxing, ... the low operation effort to build a stable company network that supports the need of any customer size.
In our business, we also like that the architecture of a company network can be easily changed if the customer requirements change. From single-line sites to Data Centers with high availability and Cloud integration FortiGate can be used in any design.
The different security features that can be added by the license are powerful and integrated into the management dashboard. Updates of protection mechanisms against new threads happen automatically as soon as a new protection mechanism is available when new threads occur. The security team at Fortinet is excellent.
Greetings
Andre
Hi, XG is EOL the new series is XGS, both are excellent equipment but I prefer Fortigate, why ??? DHCP slection, leader SD-WAN, many IPSEC dynamics is possible on SOPHOS but is limit the are conflicts with many IP's dynamics you need to use DDNS, SSL tunnel for remote clients, VRF, advanced routing with OSPF and BGP ("as path"). Greetings