Try our new research platform with insights from 80,000+ expert users

Cisco Secure Firewall vs Sophos UTM vs Sophos XG comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
Fortinet FortiGate enhances productivity and security, offering cost-effective management and quick ROI by reducing losses and expenses.
Sentiment score
5.8
Cisco Secure Firewall provides security and efficiency benefits, though maintenance costs and ROI measurement pose challenges for some users.
Sentiment score
6.9
Sophos UTM offers competitive pricing and extensive security coverage, leading to swift ROI and improved network management efficiency.
Sentiment score
7.2
Sophos XG offers ransomware protection, cost savings, simplified management, and enhanced compliance, despite challenges with licensing fees.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
There's definitely an ROI. Having a centralized way of managing and applying policies across the entire organization always helps.
The graphical interface of Sophos XG simplifies configurations, saving time in support and troubleshooting compared to the Linux-based solution I previously used.
We purchased endpoint security for the first time last year, and even without endpoint security, it provides comprehensive security.
It's good, but I would still say it's higher by about 10-15 percent compared to other market products with similar configurations.
 

Customer Service

Sentiment score
7.0
Fortinet FortiGate's support has mixed reviews; it's generally responsive and knowledgeable but varies by region and issue complexity.
Sentiment score
6.8
Cisco Secure Firewall's support is praised for expertise and responsiveness, though some users report occasional service inconsistencies.
Sentiment score
6.9
Sophos UTM is praised for responsive, knowledgeable support, despite occasional complaints, earning high marks for customer service.
Sentiment score
6.5
Sophos XG support receives mixed reviews, with notable regional variances affecting satisfaction levels regarding response times and expertise.
I would rate their support for FortiGate a nine out of ten.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I have to provide many logs, yet problems remain unresolved, often requiring workarounds rather than solutions.
I have been working with them on firewalls, wireless, switching, and routing, and the support is the best.
If I have a priority one case, I am able to call the manager to raise the severity.
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
They are professional, respond quickly, and help resolve issues effectively.
I rate the technical support a ten out of ten.
Their team was quick to diagnose and resolve the problem by exchanging the equipment within two weeks.
 

Scalability Issues

Sentiment score
7.3
Fortinet FortiGate offers strong scalability with ease of deployment, despite occasional hardware and integration limitations.
Sentiment score
6.0
Cisco Secure Firewall is praised for scalability but faces challenges with deployment costs, licensing, and hardware limitations.
Sentiment score
8.5
Sophos UTM scales well with proper sizing, enabling easy expansion in various environments from small setups to large networks.
Sentiment score
7.1
Sophos XG is scalable for SMEs, adaptable with planning, but larger expansions may require new hardware models.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Scalability presents a challenge.
Compared to FortiGate and Palo Alto, it lags in configuration and other aspects.
Even with the highest one, the 4600, we still face issues, particularly when transitioning between screens; it becomes very slow.
You can scale up to multiple firewalls with centralized management.
You can't upgrade memory or storage on a specific model, which limits scalability.
I rate the scalability a nine out of ten.
 

Stability Issues

Sentiment score
7.9
Fortinet FortiGate is generally stable and reliable, though occasional high CPU usage and updates can cause issues.
Sentiment score
7.8
Cisco Secure Firewall is stable and reliable, with minor issues quickly resolved through updates and proper management.
Sentiment score
8.3
Sophos UTM is stable and reliable, with minimal issues, though updates can occasionally cause temporary problems.
Sentiment score
8.0
Sophos XG is highly regarded for its reliability and stability, despite occasional minor issues during updates and bug reports.
We have not had any problems with the operating systems or maintenance of subscriptions.
The solution is very stable.
We have observed that the device is significantly more stable than before.
Cisco Secure Firewall offers exceptional performance and stability.
We were begging them to implement two-factor authentication mechanisms, and they never did it, and in the end, something happened.
The stability of the Cisco Secure Firewall is excellent, and I find it very reliable at this moment.
Sophos XG is very stable, even when serving as a DHCP server.
Sophos XG is resource-greedy, affecting performance even on newer computers.
It's on 24/7 and has consistently been reliable over the years.
 

Room For Improvement

Fortinet FortiGate needs improvements in stability, support, integration, pricing, performance, cloud features, automation, and documentation clarity.
Cisco Secure Firewall requires upgrades in performance, usability, cost, third-party integration, and advanced features to enhance user experience.
Sophos UTM users seek improved scalability, performance, VPN capabilities, interface usability, cost transparency, support, and simplified management features.
Sophos XG requires improvements in email protection, VPN, interface, scalability, support response, and integration, according to user feedback.
If I have put 10 GBPS of throughput on a firewall and I enable all of these features available, such as IPS or UTM functionalities, the throughput comes down to 1 GBPS.
By providing an integrated solution, users would have access to all features and functionalities within a single window, eliminating the need to navigate through multiple windows.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
Firepower Management Center is quite out of date compared to other vendors.
The integration between Cisco products themselves presents difficulties, such as SD-WAN configuration.
Cisco Firewalls require FMC for management.
I would love to see artificial intelligence capabilities integrated into Sophos UTM.
With artificial intelligence, there is room for improvement in all antivirus and security software.
The solution should have the ability to be up to date with the most recent threats.
This suggests a vulnerability that needs addressing to ensure administrators can update patches without losing access.
Business cannot stop just because of issues with support.
 

Setup Cost

Fortinet FortiGate offers competitive pricing, straightforward licensing, and a strong price-to-performance ratio, appealing to small and medium businesses.
Cisco Secure Firewall is premium priced, with initial and ongoing costs often higher than competitors, but offers reputed quality.
Sophos UTM offers competitive pricing with varied licensing options, though some users find it costly compared to alternatives.
Sophos XG offers competitive pricing with flexible licensing, seen as affordable despite varied opinions on costs compared to competitors.
The most expensive part is the renewal of the license subscription.
FortiGate is priced lower than Palo Alto.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It's considered a premium, but people pay that price for Cisco.
The licensing process for Cisco Secure Firewall is convoluted, involving many steps to request and enter a license key.
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
The value between what I receive and what I pay is the best in the industry.
I rate the pricing a ten out of ten.
Currently, it costs about four million shillings in Kenya.
The cost depends on the package you are in, such as full threat management or basic.
 

Valuable Features

FortiGate excels with VPN, firewall, ease of use, strong security, centralized management, and high reliability, offering advanced threat detection.
Cisco Secure Firewall offers robust security, ease of management, scalability, and seamless integration, enhanced by Talos threat intelligence.
Sophos UTM provides scalable security with web protection, VPN, centralized management, and integration, suitable for all business sizes.
Sophos XG offers intuitive controls, AI-enhanced protection, and seamless integration for comprehensive, scalable, and reliable network security management.
The firewall, IPS, and VPN functions are the most valuable features.
FortiGate provides solid protection against viruses, malware, and other threats.
Within the same dashboard, you get to see the security profiles, the type of traffic that's passing through, the top applications that are being consumed, etc.
It includes features like IPS, malware protection, and other security features.
Cisco Firewall has very good features, like trusted applications and restricted access for users based on keywords.
The most valuable features of Cisco Secure Firewall include the next-generation firewall and its strong anti-malware capabilities.
The zero-day protection and firewall rules are some of the most effective features for threat management.
This integration of the antivirus and the firewall works together to enhance security.
I particularly like the visibility it provides into network traffic, allowing us to identify and address issues efficiently.
The firewall feature of Sophos XG has been the most effective for threat prevention.
Integration with endpoint security products ensures seamless traffic flow and rule enforcement, even when endpoints are not directly connected to the firewall.
 

Featured Reviews

Yaw Agyare - PeerSpot reviewer
Ensures business continuity with reliable internet connectivity and robust security features
The content filtering and URL filtering capabilities, along with packet content filtering, are very good. It helps us restrict internet traffic during working hours to legitimate work-related traffic. Workers are only able to access social media, YouTube, and similar sites after work hours. It helps in protecting the edge significantly because we are able to determine what must be accepted and what must not be accepted. We also have FortiAnalyzer, which is the log analyzer for Fortinet FortiGate. Being AI-driven, it helps us see what is happening and new emerging threats quickly. We are able to make the necessary interventions to protect the network. We are using QRadar as a SIEM, and Fortinet FortiGate integrates with it seamlessly. FortiAnalyzer picks all logs from Fortinet FortiGate, integrates with QRadar, and allows us to see everything. It also integrates beautifully with our EDR from WithSecure. It also helps reduce power consumption. Fortinet FortiGate is a greener listing in terms of power consumption.
Carlos Reis - PeerSpot reviewer
Proven reliability and strong support spark trust but system updates slow and complex
The Cisco Secure Firewall product in general has room for improvement. I had a problem this weekend working with one of them, and I think it's very specific, though I'm going to be more general with my answer. Cisco has the FMC as a centralized tool, but sometimes they have too many dependencies. I faced a problem this weekend because while trying to solve an issue with one of the company's firewall management centers, I couldn't update or install an update on the platform due to a remote site being down. The device got stuck in my queue. I had to cancel my maintenance because of that. Everyone was expecting me to fix many bugs, but because of one device, I had to cancel everything. Sometimes the ID is nice around Cisco, but another area they need to improve is the capability to manage multiple devices. The FMC manages many devices, but if I put too many, around 300 devices, it becomes very slow, and the system becomes heavy. When you compare that with solutions such as Palo Alto, Palo Alto can manage many more devices on the same type of platform. Cisco is better at managing things such as RMAs. They do that exceptionally, even with the support. However, when we're talking about the FMC itself, sometimes they have some small issues; the platform is very slow and has too many bugs in the versions. We constantly need to update the platform to maintain stability.
Samaila Yusuf - PeerSpot reviewer
Network protection strengthens through effective threat management features and secure access control
The zero-day protection and firewall rules are some of the most effective features for threat management. I can set the rules and features, and also use IPsec to connect all my on-premises servers and link them to Sophos UTM so that they are protected even when in the cloud. Additionally, I use it to control access into the building through a captive portal integrated across all the PCs we have, ensuring secure access only for authenticated users.
TarunPanchal - PeerSpot reviewer
Decades of expertise lead to seamless installations and robust security
I typically use the Sophos XG Firewall to enhance my cybersecurity by using all layers. The intrusion prevention system impacts my security posture effectively, as we have not faced any ransomware or cyber threats. I have more than 800 servers live from Sophos. The synchronized security feature has proven to be very beneficial, and I have not encountered any issues. Sophos XG Firewall has contributed to reducing overall costs because it helps save money. We purchased endpoint security for the first time last year, and even without endpoint security, it provides comprehensive security. Sophos XG uses AI effectively to enhance threat detection and response, securing from AI at the packet level.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
854,618 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
18%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Educational Organization
41%
Computer Software Company
14%
University
4%
Manufacturing Company
4%
Computer Software Company
17%
Comms Service Provider
8%
Government
7%
Educational Organization
6%
Computer Software Company
16%
Comms Service Provider
9%
Manufacturing Company
7%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...
Which is better - Meraki MX or Cisco ASA Firewall?
Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
The value between what I receive and what I pay is the best in the industry.
What needs improvement with Sophos UTM?
With artificial intelligence, there is room for improvement in all antivirus and security software. However, the bad ...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
What are the main differences in features between Sophos XG and FortiGate 80F?
Hi Arvind P , The Sophos XG firewall has a number of models right from XG86 to XG135w under the 1U Desktop Form Fact...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall
Astaro
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
One Housing Group
Information Not Available
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls. Updated: May 2025.
854,618 professionals have used our research since 2012.