Try our new research platform with insights from 80,000+ expert users

Cisco Secure Firewall vs Netgate pfSense vs Sophos Cyberoam UTM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
Fortinet FortiGate enhances productivity and security, offering cost-effective management and quick ROI by reducing losses and expenses.
Sentiment score
5.8
Cisco Secure Firewall provides security and efficiency benefits, though maintenance costs and ROI measurement pose challenges for some users.
Sentiment score
7.9
Netgate pfSense offers cost-effective, high-performance solutions, replacing pricier options and improving network stability, efficiency, and security.
Sentiment score
7.6
Sophos Cyberoam UTM offers cost-effective management, reducing expenses and supporting efficient remote issue resolution for small to medium businesses.
Clients are now comfortable and not wasting productive hours on IT support.
There's definitely an ROI. Having a centralized way of managing and applying policies across the entire organization always helps.
there is a prominent ROI
If they can save their data from attackers then it would save them at least two days of not working plus the cost of recovery, which would be much more than the cost of the system and maintenance.
Since the memory leak fixes, it's been incredibly stable and requires minimal maintenance.
In four years of using it, that payment of 189 dollars per year has already paid off.
 

Customer Service

Sentiment score
7.0
Fortinet FortiGate's support has mixed reviews; it's generally responsive and knowledgeable but varies by region and issue complexity.
Sentiment score
6.8
Cisco Secure Firewall's support is praised for expertise and responsiveness, though some users report occasional service inconsistencies.
Sentiment score
8.0
Netgate pfSense offers reliable community resources and praised paid support, despite occasional inconsistencies with complex technical issues.
Sentiment score
7.2
Sophos Cyberoam UTM's support is generally reliable, with responsive assistance, but experiences mixed feedback due to occasional delays.
I would rate their support for FortiGate a nine out of ten.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I have to provide many logs, yet problems remain unresolved, often requiring workarounds rather than solutions.
I have been working with them on firewalls, wireless, switching, and routing, and the support is the best.
If I have a priority one case, I am able to call the manager to raise the severity.
When I provide detailed information about the problem, they've been able to reply quickly with a solution or go research the problem and get back to us quickly with a fix.
They are highly responsive.
I couldn't imagine having better support.
They resolve issues timely once connected.
Technical support is effective and responsive.
 

Scalability Issues

Sentiment score
7.3
Fortinet FortiGate offers strong scalability with ease of deployment, despite occasional hardware and integration limitations.
Sentiment score
6.0
Cisco Secure Firewall is praised for scalability but faces challenges with deployment costs, licensing, and hardware limitations.
Sentiment score
7.0
Netgate pfSense is scalable and cost-effective, managing large networks efficiently with adaptable hardware and seamless expansion capabilities.
Sentiment score
7.6
Sophos Cyberoam UTM offers scalable solutions for medium-sized businesses, though some upgrades may require hardware changes.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Scalability presents a challenge.
Compared to FortiGate and Palo Alto, it lags in configuration and other aspects.
Even with the highest one, the 4600, we still face issues, particularly when transitioning between screens; it becomes very slow.
If I put things into a certain context and say that we have a network that has around 100 people, then you don't put up a device that can manage 100 people. Instead, you need to get a device that can manage 150 to 200 people, and then you can create room for growth.
I don't think Netgate pfSense can offer much scalability for big enterprises.
Even with a jump from a 50 megabit to a 500 megabit internet connection and approximately 65 active VPN clients, our firewall operates smoothly without any strain.
 

Stability Issues

Sentiment score
7.9
Fortinet FortiGate is generally stable and reliable, though occasional high CPU usage and updates can cause issues.
Sentiment score
7.8
Cisco Secure Firewall is stable and reliable, with minor issues quickly resolved through updates and proper management.
Sentiment score
6.9
Users highly rate Netgate pfSense's stability, attributing rare issues mainly to hardware rather than the software itself.
Sentiment score
8.6
Sophos Cyberoam UTM is highly stable with minimal issues, appreciated for reliability, and improved since Sophos acquisition.
We have not had any problems with the operating systems or maintenance of subscriptions.
The solution is very stable.
We have observed that the device is significantly more stable than before.
Cisco Secure Firewall offers exceptional performance and stability.
We were begging them to implement two-factor authentication mechanisms, and they never did it, and in the end, something happened.
The stability of the Cisco Secure Firewall is excellent, and I find it very reliable at this moment.
I rate the solution's stability a ten out of ten.
I've noticed a substantial improvement in stability and ease of use for upgrades and patching over the past year or two.
When I replace consumer routers with pfSense for small businesses with two or three employees, they are often amazed to discover the router can run for a year without a reboot.
 

Room For Improvement

Fortinet FortiGate needs improvements in stability, support, integration, pricing, performance, cloud features, automation, and documentation clarity.
Cisco Secure Firewall requires upgrades in performance, usability, cost, third-party integration, and advanced features to enhance user experience.
Netgate pfSense needs better GUI usability, management, consistent updates, improved performance, intuitive interfaces, and strategic communication.
Sophos Cyberoam UTM struggles with performance, outdated architecture, high costs, and demands better usability, support, and feature enhancements.
If I have put 10 GBPS of throughput on a firewall and I enable all of these features available, such as IPS or UTM functionalities, the throughput comes down to 1 GBPS.
By providing an integrated solution, users would have access to all features and functionalities within a single window, eliminating the need to navigate through multiple windows.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
Firepower Management Center is quite out of date compared to other vendors.
The integration between Cisco products themselves presents difficulties, such as SD-WAN configuration.
Cisco Firewalls require FMC for management.
There is some trade-off between having a certain level of security and maintaining acceptable performance.
If I need to go between different VLANs, I have VLAN 19.1 and VLAN 19.2, and I strictly use Netgate pfSense, but it doesn't route very efficiently and works quite slowly.
They should support the idea of configuration management as code from source code and provide a more robust API for managing the pfSense configuration.
It would be beneficial if phone calls or SMS for two-factor authentication were available.
 

Setup Cost

Fortinet FortiGate offers competitive pricing, straightforward licensing, and a strong price-to-performance ratio, appealing to small and medium businesses.
Cisco Secure Firewall is premium priced, with initial and ongoing costs often higher than competitors, but offers reputed quality.
Netgate pfSense is cost-effective, open-source, integrates key functions, and offers affordable subscriptions, appealing to budget-focused enterprises.
Sophos Cyberoam UTM pricing varies with flexibility, offering competitive yet potentially high costs, depending on enterprise size and needs.
The most expensive part is the renewal of the license subscription.
FortiGate is priced lower than Palo Alto.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It's considered a premium, but people pay that price for Cisco.
The licensing process for Cisco Secure Firewall is convoluted, involving many steps to request and enter a license key.
The price of setup is approximately €500 to €800, which also includes the initial monitoring.
You can acquire a decent embedded PC for around a hundred dollars and install pfSense on it, effectively creating a robust firewall solution.
The product is free of cost.
The price is appropriate, but if you want the real truth, it's actually quite expensive.
 

Valuable Features

FortiGate excels with VPN, firewall, ease of use, strong security, centralized management, and high reliability, offering advanced threat detection.
Cisco Secure Firewall offers robust security, ease of management, scalability, and seamless integration, enhanced by Talos threat intelligence.
Netgate pfSense is praised for its performance, flexibility, robust features, and user-friendly interface, enhancing security and scalability.
Sophos Cyberoam UTM offers robust security with advanced features and user-friendly management, enhancing enterprise productivity and network efficiency.
The firewall, IPS, and VPN functions are the most valuable features.
FortiGate provides solid protection against viruses, malware, and other threats.
Within the same dashboard, you get to see the security profiles, the type of traffic that's passing through, the top applications that are being consumed, etc.
It includes features like IPS, malware protection, and other security features.
Cisco Firewall has very good features, like trusted applications and restricted access for users based on keywords.
The most valuable features of Cisco Secure Firewall include the next-generation firewall and its strong anti-malware capabilities.
With pfSense, network configurations adhere to standard practices, facilitating troubleshooting without the need for complex overlays or policies.
The price point is the most valuable aspect of the solution.
I like the tool's flexibility in the sense that you do not have to buy an appliance. You can put it on your own hardware, and it can be very simplistic hardware with simple configurations.
It provides bandwidth management, category management of websites, blocking certain elements, IPS blocking, DDoS protection, and VPN management between sites and clients.
The way the rule sets are configured makes it an easily understandable way to manage.
 

Mindshare comparison

Firewalls
Firewalls
Unified Threat Management (UTM)
 

Featured Reviews

Yaw Agyare - PeerSpot reviewer
Ensures business continuity with reliable internet connectivity and robust security features
The content filtering and URL filtering capabilities, along with packet content filtering, are very good. It helps us restrict internet traffic during working hours to legitimate work-related traffic. Workers are only able to access social media, YouTube, and similar sites after work hours. It helps in protecting the edge significantly because we are able to determine what must be accepted and what must not be accepted. We also have FortiAnalyzer, which is the log analyzer for Fortinet FortiGate. Being AI-driven, it helps us see what is happening and new emerging threats quickly. We are able to make the necessary interventions to protect the network. We are using QRadar as a SIEM, and Fortinet FortiGate integrates with it seamlessly. FortiAnalyzer picks all logs from Fortinet FortiGate, integrates with QRadar, and allows us to see everything. It also integrates beautifully with our EDR from WithSecure. It also helps reduce power consumption. Fortinet FortiGate is a greener listing in terms of power consumption.
Carlos Reis - PeerSpot reviewer
Proven reliability and strong support spark trust but system updates slow and complex
The Cisco Secure Firewall product in general has room for improvement. I had a problem this weekend working with one of them, and I think it's very specific, though I'm going to be more general with my answer. Cisco has the FMC as a centralized tool, but sometimes they have too many dependencies. I faced a problem this weekend because while trying to solve an issue with one of the company's firewall management centers, I couldn't update or install an update on the platform due to a remote site being down. The device got stuck in my queue. I had to cancel my maintenance because of that. Everyone was expecting me to fix many bugs, but because of one device, I had to cancel everything. Sometimes the ID is nice around Cisco, but another area they need to improve is the capability to manage multiple devices. The FMC manages many devices, but if I put too many, around 300 devices, it becomes very slow, and the system becomes heavy. When you compare that with solutions such as Palo Alto, Palo Alto can manage many more devices on the same type of platform. Cisco is better at managing things such as RMAs. They do that exceptionally, even with the support. However, when we're talking about the FMC itself, sometimes they have some small issues; the platform is very slow and has too many bugs in the versions. We constantly need to update the platform to maintain stability.
Vincent Hamm - PeerSpot reviewer
I appreciate the depth of what the solution can do and the simplicity of the initial setup
We do a lot of managed services and are currently trying to get people off of L2TP VPN. Apparently, we can download a mobile config file from a configured NetGate device, and we're primarily Apple. We've experimented with it on a device that's not a production device, and we can't seem to get the phase one IPSec set correctly so that the Apple config will accept it. We've tried looking at the documentation but haven't found anything. While it's not the highest priority, it is rather frustrating. We'd like to do this, and the feature is right there, but we can't get it configured. We certainly don't want to try it on a production machine because it will break the current VPN. I would like to download the Apple mobile config so that I can tell it to configure my VPN connection to do that. We have some cross-platform things. So there's also a Windows VPN. You can download a script or a PowerShell, put it on a Windows machine, and it can connect to the VPN. It would be nice if I could say I want Mac only, Windows only, or both. I wish it could configure the IPSec phase one and phase two, or at least give me solid instructions on how to configure that. It doesn't supply out-of-the-box visibility to drive decisions. You get 75 log lines, so if you're trying to troubleshoot something, you have to look at one log and then another. It integrates with SysLog systems, but our customers are not at the level where they want to pay for some third-party SysLog system. Usually, we can get things taken care of fairly quickly. I would like to have the ability to control all my devices from one place. With Ubiquiti, you can get a controller that allows you to control all of your Wi-Fi devices, switches, and routers. From one area, you can switch to that customer and see what's happening in their environment. That's not part of pfSense. I understand why it's not because pfSense is open source and community supported. That's something that someone in the community needs to pick up and run with. It's not something the pfSense can easily implement. If they could, that'd be great.
Dipak M Gohil - PeerSpot reviewer
Centralized management enhances remote work with comprehensive security and efficient VPN
The VPN is the most usable feature and is advisable for us to work from home. It provides bandwidth management, category management of websites, blocking certain elements, IPS blocking, DDoS protection, and VPN management between sites and clients. It offers centralized management, which allows us to use everything from a central console.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
853,960 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
18%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Educational Organization
41%
Computer Software Company
14%
University
4%
Manufacturing Company
4%
Computer Software Company
16%
Comms Service Provider
12%
Educational Organization
7%
Government
6%
Computer Software Company
32%
Financial Services Firm
14%
Media Company
11%
Real Estate/Law Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...
Which is better - Meraki MX or Cisco ASA Firewall?
Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What do you like most about Sophos Cyberoam UTM?
The solution works perfectly without any users.
What is your experience regarding pricing and costs for Sophos Cyberoam UTM?
The features and the overall package provided by Sophos are satisfactory in terms of sizing and pricing, which influe...
What needs improvement with Sophos Cyberoam UTM?
I face issues when connecting to the VPN since it requires an authenticator. It would be beneficial if phone calls or...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Gulf Corporation for Technology, Maridive & Oil Services, Fidelity Bank, Petra University, Capital FM Kenya, Safari Park Hotel and Casino, Mayfair Casino, Pacific International Lines, Mozambique Ministry of Education, University of Namibia, Royal Hospital for Neuro-disability, University of Hawai, New Delhi Municipal Council
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls. Updated: May 2025.
853,960 professionals have used our research since 2012.