Try our new research platform with insights from 80,000+ expert users

Azure Firewall vs Sophos XGS comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
330
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Azure Firewall
Ranking in Firewalls
14th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
40
Ranking in other categories
Microsoft Security Suite (10th)
Sophos XGS
Ranking in Firewalls
13th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
83
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.4%, up from 17.7% compared to the previous year. The mindshare of Azure Firewall is 2.1%, down from 2.7% compared to the previous year. The mindshare of Sophos XGS is 2.5%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
AnvarSadique - PeerSpot reviewer
Easy setup and effective traffic routing enhance security
In terms of improvements, I think the price could be a concern as Azure ( /products/microsoft-azure-reviews ) services are often more expensive compared to other firewalls. However, the functional aspects of Azure Firewall met our needs. While I found the interface not particularly user-friendly, this is a common issue across vendors.
Nassif  Kaleny - PeerSpot reviewer
Dynamic web and mail filtering contribute to improved security measures
The reporting system is very poor. I cannot trace any traffic to our site if it feels some threats. It just tells me that there is something during a certain time but does not provide information about the type of threats or how to get rid of them. This needs improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is simple to manage, and there are a lot of functionalities in the same box."
"The stability and scalability of this solution are satisfactory. Its SD-WAN, VPN, and URL filtering features are very useful."
"FortiGate firewalls are user-friendly, and I like the security profiling features."
"Fortigate represents a really scalable way of delivering perimeter network security, some level of layer 7 security, WAF, and also a way to create a meshed ADVPN solution."
"It is very flexible to use."
"Advanced routing (RIP, OSPF, BGP, PBR). It gives you a seamless and simple integration into a large network."
"Fortinet FortiGate positively provides my clients' organizations with a high return on investment."
"You can purchase switches and you don't need to do anything with them. You just put in the firewall and the switches get all the policies and rules that you already have in the firewall. With Fortinet, you just connect the FortiSwitch to the Fortinet and that's it."
"The firewall policy control, URL content control, and antivirus are all the most valuable aspects. Threat prevention is as well quite good."
"We secure the entry point to the virtual data center with the firewall."
"I find the solution to be very stable, and would rate it a ten out of ten in terms of stability."
"It's auto-scalable, which is a great feature."
"Among the most valuable features are the DDoS protection that protects your virtual machines, the threat intelligence, and traffic filtering."
"Azure's cost-effectiveness is its major advantage."
"The solution is stable."
"Azure Firewall's feature that I have found most valuable is its scalability."
"The features that I find most effective in enhancing network security include EDR and XDR."
"I think Sophos technical support's immediate response is good compared to Fortinet's. If the technical engineer is good, they get the solution immediately. If not, it might take two days. For improvement, immediate response is required, whether by email, phone call, or WhatsApp. Sometimes, we can't wait three or four days for a solution. In urgent situations, we might use a spare Sophos device while waiting for support."
"It's much faster than the previous firewall, so you can do the work faster."
"The solution is easy to use and configure, once you know how to apply the policies."
"The technical support by Sophos is great."
"Sophos XGS's most valuable feature is content filtering."
"The most effective feature in enhancing our network security is the threat intelligence capability."
"The UI for Sophos is very simple."
 

Cons

"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."
"The logs need to be better. They need to be more visible and easier to access."
"Some configuration elements cannot be easily altered once created."
"There is room for improvement related to the logging and reporting aspect."
"One area for improvement is the performance on the bandwidth demands for smaller devices, as well as better web filtering."
"The only issue that I have is with FortiNAC. The firewall is fine, but the FortiNAC interface is a little bit too jumbled or too complicated, not as straightforward as it is on the Fortinet FortiGate firewall and FortiAnalyzer."
"There are some license issues. Not every feature must have a separate license. There must be some of kind synergy between the license so we don't have to pay for every individual license that we would like to have."
"I don't like that anything more than very basic reporting is not included."
"It needs a lot of improvement, especially on intruder detection. They are working hard on that."
"I would appreciate it if Azure Firewall included built-in VPN capabilities."
"It's a little heavy compared to a FortiGate or other firewalls."
"There should be better monitoring and logging. Currently, it is put in Sentinel. It should be more seamless and from the interface."
"Azure Firewall has limited visibility for IDPS, no TLS inspection, no app ID, no user ID, no content ID, no device ID. There is no antivirus or anti-spyware. Azure Firewall doesn't scan traffic for malware unless it triggers an IDPS signature. There is no sandbox or machine learning functionality, meaning we are not protected from Zero-day threats. There is no DNS security and limited web categories."
"This solution is not mature when it comes to handling perimeter traffic like internet browsing."
"There is a lot of room for improvement, so I would rate it a six out of ten overall."
"In terms of improvements, I think the price could be a concern as Azure services are often more expensive compared to other firewalls."
"Sophos XGS could be improved by adding a built-in hyper-converged solution."
"Some features need remuneration and there are performance improvements required."
"In previous versions, NAT rules were easier to create. After version 18.5, creating a NAT rule has become more complex, requiring the creation of a separate policy and an additional component."
"They should customers who are facing issues with their product reviews; they found bots in it. If they can do their proper research and use the user analysis and testing, that would greatly help the clients."
"Sophos pricing is very high. The last instance I purchased was for three years, around $3,700 for SDG 125."
"There can be lag time when updating an operating policy."
"Sophos configurations are a bit complex."
"The solution could have a bit more functionality."
 

Pricing and Cost Advice

"Licensing is usually on a three-year period."
"As far as I'm aware, in our case, it's just a yearly pricing arrangement with no additional licensing costs."
"The pricing for the product is alright."
"Price-wise, it's at a good price point for our market."
"Fortinet FortiGate is expensive."
"Fortigate's pricing is competitive."
"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."
"Setup costs and pricing depends on many variables, but it's mostly affordable."
"The total cost of ownership is much less than Palo Alto, Cisco, or any other brand."
"The licensing module is good."
"Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."
"I rate the product pricing a five out of ten."
"The pricing of Azure Firewall is pay-as-you-go. Fortinet also has a pay-as-you-go model, but Azure's pricing is higher and, with FortiGate, you also have the license."
"Azure Firewall is quite an expensive product."
"Azure Firewall comes with Azure native services. We did not buy any kind of license for it. Whether you have a free subscription or a pay-as-you-go model, you can deploy the Azure Firewall service... The amount that you use will determine how much you pay."
"It is expensive, especially with the premium functions. For one of the clients, it was very expensive. You have to use it more at an enterprise level, and there, it was not at an enterprise level. So, it was very costly, but security-wise, it was a very wise decision to use it that way."
"There are additional costs involved apart from the licenses."
"We paid around 17,000 pounds for a three-year package."
"I live in Bolivia and the price of Sophos XGS is high. However, they have adjusted their price a little over the past while but the price could still be less expensive to be affordable."
"I pay close to $10,000 per year, which I find to be expensive compared to the other similar solution or equivalent solutions."
"The price of Sophos XGS is average compared to other offers from other OEMs."
"The licensing is reasonable. Comparing the cost of Sophos XGS with that of Fortinet or Palto Alto firewalls, for instance, it's not that expensive. However, the overall cost depends on the hardware you're using in addition to the licensing cost."
"We pay about $150."
"The price of Sophos XGS depends on the type of license. However, the licensing cost is approximately 60 percent of the total cost."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
20%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Computer Software Company
16%
Government
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
15%
Manufacturing Company
9%
Comms Service Provider
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the...
Which would you recommend - FortiGate VM or Azure Firewall?
Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigat...
What do you like most about Sophos XGS?
The policies are the greatest feature. They allow us to configure granular control over our network traffic.
What is your experience regarding pricing and costs for Sophos XGS?
Sophos XGS was reasonably priced initially, but the license cost has significantly increased in the last few years.
What needs improvement with Sophos XGS?
The reporting system is very poor. I cannot trace any traffic to our site if it feels some threats. It just tells me ...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Information Not Available
Information Not Available
Find out what your peers are saying about Azure Firewall vs. Sophos XGS and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.