


Sophos XG and Check Point Quantum Force (NGFW) are both competitors in the cybersecurity market, with each product showcasing unique advantages. Sophos XG stands out for its ease of management and integration, whereas Check Point Quantum Force is noted for its advanced threat prevention features.
Features: Sophos XG highlights ease of management, robust reporting, and seamless integration with endpoint security products, even when endpoints are offline. It ensures comprehensive network visibility and threat management. Check Point Quantum Force offers sophisticated AI-driven threat detection, an intuitive interface, and extensive security features that enhance threat prevention and response effectiveness.
Room for Improvement: Sophos XG requires better patch management, UI enhancements, and improved integration capabilities. It also needs to address its pricing structure and refine technical support. Check Point Quantum Force could improve its UI, simplify licensing and setup processes, and enhance documentation and technical support.
Ease of Deployment and Customer Service: Sophos XG is praised for its straightforward deployment and affordability, appealing to small and medium businesses. However, its customer service requires attention due to slow response times. Check Point Quantum Force is recognized for its robust security features but has a steeper learning curve for deployment. User experiences with its technical support are mixed, varying from excellent to slow responses.
Pricing and ROI: Sophos XG is seen as cost-effective for small to mid-sized businesses with competitive pricing and flexible options, encouraging long-term investments through bundled offerings. Check Point Quantum Force, while perceived as more expensive, offers a high return on investment due to its comprehensive security capabilities and detailed licensing model, justifying its higher costs with significant security effectiveness.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
This is a time-saving measure because we don't need to deploy a cluster or a firewall each time; we just create a virtual system on the management server using the same appliance.
Incident response time has reduced significantly, and downtime due to network issues has been minimized, leading to an improved return on investment.
The fact that we've not had any breach toward the data center side is plenty enough.
The graphical interface of Sophos XG simplifies configurations, saving time in support and troubleshooting compared to the Linux-based solution I previously used.
We purchased endpoint security for the first time last year, and even without endpoint security, it provides comprehensive security.
It's good, but I would still say it's higher by about 10-15 percent compared to other market products with similar configurations.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
The support team we engaged was knowledgeable and well-versed with the application.
We have escalated issues to Check Point technical support multiple times and have received timely and very good responses.
Even challenging issues like those with VPNs have been resolved efficiently with their help.
I rate the technical support a ten out of ten.
Their team was quick to diagnose and resolve the problem by exchanging the equipment within two weeks.
When my customers raise a ticket, a customer representative calls them immediately to address their queries.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
If specified correctly, even the smaller boxes offer high session and bandwidth rates, making the solution highly scalable, even up to telco-level requirements.
It is easy to scale up by adding capacity through clustering or upgrading the license, and it effectively handles spikes in remote user connections or increased east-west traffic without noticeable bottlenecks.
Scalability must be carefully planned for, considering future growth and user base increases.
You can scale up to multiple firewalls with centralized management.
You can't upgrade memory or storage on a specific model, which limits scalability.
I rate the scalability a nine out of ten.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
While the solution is generally stable, there are complications, such as requiring SmartConsole for deployment and upgrades, which can be time-consuming.
I have worked with Check Point products for 15 years and haven't found any stability or performance issues.
The use of Check Point firewalls has helped improve our security posture without any downtime.
Sophos XG is very stable, even when serving as a DHCP server.
Sophos XG is resource-greedy, affecting performance even on newer computers.
It's on 24/7 and has consistently been reliable over the years.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
AI-driven features would be highly valuable—particularly those that enable bulk operations and efficient handling of large numbers of objects or object groups.
One thing that would help in improving Check Point Quantum Force (NGFW) is having more flexible dashboards that I can tailor without relying on templates.
Other products, like FortiGate, are perceived as more intuitive because they are easier to configure from the start.
The solution should have the ability to be up to date with the most recent threats.
This suggests a vulnerability that needs addressing to ensure administrators can update patches without losing access.
Business cannot stop just because of issues with support.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
In comparison to Fortinet and other products, the pricing may be considered high.
licensing is very pricey
Compared to other solutions, the pricing of Check Point NGFW is high.
I rate the pricing a ten out of ten.
Currently, it costs about four million shillings in Kenya.
The cost depends on the package you are in, such as full threat management or basic.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
The firewall's default behavior of blocking all traffic, including a cleanup rule that blocks everything from external to internal sources, is highly valuable for protecting our network.
The most valuable features in my experience include perimeter firewalling, cloud and mobile security, application control, URL filtering, DLP, threat prevention, intrusion protection, and safeguarding against malware, botnets, and zero-day attacks.
Since implementing it, we have noticed a lot less getting through that maybe other antivirus within firewalls had failed to catch.
The firewall feature of Sophos XG has been the most effective for threat prevention.
Integration with endpoint security products ensures seamless traffic flow and rule enforcement, even when endpoints are not directly connected to the firewall.
Visibility features are included in XDR. This provides information on user impact, potential threats on specific machines, source and destination IPs, setup firewall details, and unique identifiers for each machine.
| Product | Market Share (%) |
|---|---|
| Fortinet FortiGate | 18.7% |
| Sophos XG | 8.4% |
| Check Point Quantum Force (NGFW) | 2.8% |
| Other | 70.1% |



| Company Size | Count |
|---|---|
| Small Business | 357 |
| Midsize Enterprise | 133 |
| Large Enterprise | 188 |
| Company Size | Count |
|---|---|
| Small Business | 159 |
| Midsize Enterprise | 94 |
| Large Enterprise | 199 |
| Company Size | Count |
|---|---|
| Small Business | 141 |
| Midsize Enterprise | 52 |
| Large Enterprise | 35 |
Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.
Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.
What are Fortinet FortiGate's key features?Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.
Check Point Quantum Force NGFW provides centralized management with scalable security for network perimeters. As a reliable firewall, it ensures advanced threat prevention and offers seamless integration, making it suitable for various network environments.
Offering comprehensive security, Check Point Quantum Force NGFW helps control ingress and egress traffic, secures data center firewalls, and integrates seamlessly with cloud and on-premises setups. Users appreciate its application control, deep packet inspection, and identity awareness features for enhanced protection against cyber threats. Despite pricing issues and interface complexity, its IPsec VPN and robust logging provide valuable insights into network activities.
What are the key features of Check Point Quantum Force NGFW?Check Point Quantum Force NGFW is deployed across industries for securing network boundaries, supporting critical data center operations, and enabling secure VPN connections. In finance, it helps meet stringent compliance standards, while in healthcare, it's crucial for protecting sensitive patient data through robust security protocols.
Sophos XG provides robust security capabilities, offering features like web filtering, VPN, and user-friendly management. Its intuitive setup and policy adjustments enhance security while synchronized endpoint protection ensures comprehensive defense.
Sophos XG is a network security solution with web and application filtering, VPN features, and a management interface that simplifies configuration. It offers email protection, threat prevention, and reporting capabilities, all contributing to a comprehensive defense strategy. Synchronized security with endpoints enhances protection, and advanced threat protection with efficient bandwidth management supports secure remote work environments. However, users suggest improvements in log interfaces for real-time actions and better email protection. Enhancements in link load balancing, RAM, VPN stability, and central management are needed. HTTPS filtering, certificate management, technical support, and scalability of the SD-WAN feature can see advances.
What are the key features of Sophos XG?In industries such as healthcare, education, and financial services, Sophos XG acts as a mainline defense for network security, VPN connectivity, and web filtering. It supports secure remote access, intrusion prevention, antivirus scanning, and secure web gateways integrated with endpoint systems, tailoring its extensive security capabilities to meet specific industry requirements.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.