If you want my word on NGFW, it doesn't include Sophos nor Fortinet. Those are "light" UTM solutions who see mostly "clean" networks even when they are seriously compromised If you want to get serious, choose either Palo Alto Networks or Checkpoint Security appliances.…