No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs Sophos UTM vs Trellix Intrusion Prevention System comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
Manager Solution Consulting at Accops Systems Pvt Ltd
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
HR
CEO at iSource GmbH
Integrated security tools have supported critical infrastructure and improved network performance
Regarding Secureworks Taegis VDR Vulnerability Management, I do not have all these shortcuts in my head. Perhaps I have to ask my technicians, but we are in full stress because we have to change this entire firewall equipment, also the entire access points, because of the end of life. We also have the full product in for XDR and extensions. We are also part of the webinars from Sophos. It would be better if there were also some important webinars in German. Everything needs improvement, because also the wireless, also RED box and so on. The handling was much easier on the old equipment than on the new XGS. I think there should also be a little more automatic for SD-WAN routing and so on. Because we have to learn some things from the basic completely new because it is different than Sophos UTM, the XGS. The features that could be improved about Sophos UTM include the new features we have in XGS with a simpler interface. For example, in Sophos UTM, we could define IP hosts and use this IP host. We did not have to insert on every, for example, for wide area networks, we had to put the IP addresses from the other side by hand. In Sophos UTM, we could define it under definitions and then use this IP host where we needed it. In the new XGS, if there is a change in the IP address, we have to do it on all, for example, site-to-site VPN tunnels and so on. We have much more work and it is not so easy because we have to check all the definitions. It is also, for example, some of the male technicians like me, we have a biology handicap. For example, male technicians in Europe also have a red-green problem. So we use these light colors on the interface. In some cases, it is not easy to see the, for example, letters or numbers because of the contrast.
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When our customer needs some optimization, along with performance and security. If they want everything in one package, I recommend Forcepoint because they have everything."
"With Forcepoint, this process is simplified compared to others like Fortinet."
"It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration."
"When it comes to the detection rate of the IP, it is the most powerful solution for detection-ready tests, like evasion techniques etc."
"The most valuable feature is the console management."
"One of the most valuable features is having the ability to cluster multiple firewalls even if they are different versions."
"The product's initial setup phase is easy."
"It is a scalable product. I know a customer who has deployed more than 4,000 firewalls in a single deployment."
"It has made our organization more secure, because we are using a VPN."
"The solution has many good features; there was a steep learning curve moving to version 18 but we're now at a point where the solution is more efficient and effective."
"Sophos UTM is the simplest of these products to setup."
"The implementation with the AWS environment was good."
"The most valuable feature is the price. I've been requesting prices all over these years between different solutions like Fortinet, Palo Alto, and Check Point and Sophos has been the cheapest and the best of all of them that I have tried. I have been working with Fortinet, it's a fact that the price is surprisingly better."
"It's easy to use."
"Advanced protection (Sophos Sandstorm) - Protects against crypto viruses in real-time."
"For the features, how well it works, and how easy it is to use, I would give Sophos a ten out of ten."
"It has a lot of functions, such as firewall. We are administrators, and we create some rules to protect our network. We also monitor the traffic in and out and have disk encryption on-premises. When we detect malware, we scan for the virus on the PC. We can then delete or block the malware."
"We feel safer now."
"It improved my security by stopping an attack to the signature base, or the behavior base."
"The feature I found most valuable is the network threat analyzer in the security platform. It also integrates with GTI, or Global Threat Intelligence. Otherwise, I just use the basic features."
"Overall the solution is very good. It offers great protection and gives us a good overview of what is on the network."
"McAfee NSP is much more stable than Cisco."
"The product is worth the investment."
"The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs)."
 

Cons

"The centralized management console of Forcepoint Next Generation Firewall is something we have been struggling with because everybody has their own approach, but most customers have mixed solutions."
"The security features need to be improved."
"Next Generation Firewall's configuration could be improved."
"Something that I've noticed that Forcepoint lacks, is the training that they offer to their end-customers"
"We would love to take another solution from Forcepoint, but unfortunately, the price is too high."
"Forcepoint Next Generation Firewall is overall good, but AI enabled features are not available."
"The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing."
"It is really hard to work with their customer support. For example, unlike Fortinet where you can escalate an issue and quickly get responses from the development team, Forcepoint's process seems slow and challenging."
"I think that additional metrics features are needed to be able to monitor other areas or to monitor as much as you can, at a fine-grain resolution."
"The solution's technical support for India needs to be improved."
"I would love to see artificial intelligence capabilities integrated into Sophos UTM."
"The lack of import/export functions for network and service options drives me mad."
"The documentation during the AWS integration was a little fuzzy on getting it to work with how the whole public exposure versus private exposure, then routing some of the traffic."
"Stay away from the wireless models, since you cannot put them in HA. They start to give you some weird issues once you start getting into multiple SSIDs and networks."
"It does have built-in policies, which enable you to disable USB devices, etc. It would be nice if they had more policies because there are not that many of them."
"We would like to have unique viewable IDs for rules and in the packet filter logfile, for easier debugging of old log files."
"The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement."
"The pricing could be improved."
"The system isn't fool-proof. Sometimes, based on the network or other reasons, McAfee cannot detect the actual attack."
"Currently, the settings and confirmations on the McAfee console are complex and complicated for our branches."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"Some of the documentation is not as straightforward as it could be. It's much too general - especially in areas related to updates."
"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."
"The management console needs to be less complex and easier to navigate."
 

Pricing and Cost Advice

"There is a need to make payments towards the licensing charges attached to the product. The product is not expensive."
"It requires a yearly subscription."
"The pricing should be more competitive against other vendors in the market."
"Next Generation Firewall is moderately priced."
"Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
"The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"
"The solution is expensive."
"I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."
"Sophos UTM's pricing is on the cheaper side."
"There is a license for the device and for the software. We pay annually for the solution and the cost is competitive."
"It is necessary to pay for a licence to use the solution, but it is not very expensive."
"The licensing model is very straightforward, it's a bit pricey, but for what you get, it's well worth it."
"The price of the solution is high. The price from USD to my currency is expensive."
"If you would like to run an active-passive HA system, you only need to buy an additional hardware without subscription. At other vendors, you need subscription for both devices.​"
"This product is free for home users. The more expensive products have better performance."
"You cannot really say that the solution is expensive, given the protection it gives."
"I rate the product’s pricing an eight out of ten."
"The tool is competitively priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
918,957 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Construction Company
11%
Outsourcing Company
11%
Manufacturing Company
10%
Financial Services Firm
10%
Outsourcing Company
13%
Construction Company
11%
Comms Service Provider
10%
Manufacturing Company
9%
Manufacturing Company
11%
Comms Service Provider
8%
Construction Company
8%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise28
Large Enterprise27
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sophos UTM?
The pricing for Sophos UTM is reasonable; I do not have an issue with it, though I was considering RED because I have...
What needs improvement with Sophos UTM?
Regarding Secureworks Taegis VDR Vulnerability Management, I do not have all these shortcuts in my head. Perhaps I ha...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
Astaro
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
One Housing Group
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Cisco, Netgate and others in Firewalls. Updated: October 2026.
918,957 professionals have used our research since 2012.