No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs Sophos UTM vs Trellix Intrusion Prevention System comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
MANAGER SOLUTION CONSULTING at a manufacturing company with 201-500 employees
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
Bashir Bashir - PeerSpot reviewer
IT Manager at Vegol
Firewall management has become simpler and now provides real-time visibility and bandwidth control
The features I have found most valuable in Sophos UTM are that it is much easier to configure, I appreciate the reporting side of it, and the rules are very straightforward to work with. Sophos UTM's real-time insights into network health help my organization because I get real-time reports on what is happening on my network, what is trying to access me, the destination, and all that. I can then be reactive or proactive, and for zero-day, I think it is beneficial because it can learn what my network does. If anything goes outside what it expects, it sends a report on Sophos Central, so I find zero-day makes my work a bit easier. The use of Sophos UTM's intuitive management console has impacted my security policy enforcement in that it is much easier to configure; I configure with information rather than with presumptions.
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration."
"Forcepoint's stability is satisfactory, for the most part."
"Forcepoint Next Generation Firewall has positively impacted my organization by providing always-on perimeter security."
"The VPN is great."
"It's a nice product. I haven't come across anything that needs to be improved."
"Overall, it is an excellent product, highly reliable, and among the top contenders; Forcepoint Next Generation Firewall is well known."
"Forcepoint Next Generation Firewall is quite affordable, cheaper than other brands like Palo Alto or Check Point, with a lot of capabilities, very stable, and very well-made, making it a really good product for its price when compared to other vendors."
"The support is great. They also have very good categorization. It's very good. It captures a lot of threats."
"They are all good, but most-used are Network Protection and Web Filtering."
"The zero-day protection and firewall rules are some of the most effective features for threat management."
"It works well without any maintenance, and so far, it has worked pretty well regardless of the traffic."
"Sophos SG UTM had all the basic functionality that you needed. It is user-friendly and easy to manage for any integrator."
"It improved bandwidth utilization and provided link load balancing features for internet and intranet lease lines."
"Their ability to firewall, filter and monitor network traffic and provide VPN connectivity really helped us day to day with such a complex network."
"The UTM product has definitely improved the way our organization functions."
"It now controls all the security aspects of our web servers with Sophos UTM WAF.​"
"The product is worth the investment."
"It improved my security by stopping an attack to the signature base, or the behavior base."
"The most valuable features are the customization of the signature and the unlimited amount of custom signatures in IPS."
"The feature I found most valuable is the network threat analyzer in the security platform. It also integrates with GTI, or Global Threat Intelligence. Otherwise, I just use the basic features."
"The threat intelligence updates are very accurate."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"McAfee NSP is much more stable than Cisco."
"We feel safer now."
 

Cons

"Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us."
"The endpoint protection capabilities of the product are an area of concern where improvements are required."
"Forcepoint is a little difficult to configure compared to its competitors."
"Intel could ditch the Java-based GUI rendering and could use some serious revamp on the way they manage their GUI."
"The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing."
"We would love to take another solution from Forcepoint, but unfortunately, the price is too high."
"They should have a GUI on the product itself, not a separate management tool to be used on the management server or on a server to be used to manage the file. It should be all in one device. The device should be controlled through its own GUI. They also have to improve the learning center and the documents as the documents don't really help."
"Forcepoint Next Generation Firewall could change its interface, allowing standard or direct connect modes to be configured."
"Although Sophos UTM is a good product, other products have more flexibility with their pricing."
"We had some problems with the configuration. They had provided a CloudFormation template, and we had to go several rounds to make it work."
"Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria. Even though it's expensive, I consider Sophos a major first line of protection, so I pay for it nonetheless."
"The memory and processing were problematic. The interface could be better."
"Sophos UTM could be simplified, and they can improve on the many other features, like SD-WAN and load balancing. Sophos UTM is missing a few features that their competitors have. For example, if you have multiple branches you would like to connect, the load balancing features aren't available on multilink. If we create a VPM for multiple LAN links, we cannot load balance the traffic."
"It would be nice if it had basic features, such as DLP (Data Loss Prevention)."
"They could reduce the price."
"The pricing is an issue."
"The technical support has room for improvement."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
"The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement."
"The management console needs to be less complex and easier to navigate."
"In terms of high-security attacks, not all of them are developed. You cannot do a rule that includes all high severities."
"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."
"The pricing could be improved."
"Trellix Intrusion Prevention System does not provide virtual patching."
 

Pricing and Cost Advice

"There is a need to make payments towards the licensing charges attached to the product. The product is not expensive."
"Next Generation Firewall is moderately priced."
"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
"I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."
"Forcepoint Next Generation Firewall is reasonable, it is priced the same as other firewalls."
"It requires a yearly subscription."
"We have just a subscription for the cloud, and this license is great. The license is so good."
"We have found the price could be reduced. It is a little expensive."
"Sophos UTM has very reasonable pricing."
"I think the pricing of Sophos is very fair."
"Pricing for the upgrade was very competitive as Sophos wanted to retain existing customers."
"It's reasonably priced."
"We purchased the appliance with five years onsite support and licenses."
"Our licensing fees are paid on a monthly basis."
"The price of the solution is high. The price from USD to my currency is expensive."
"The appliance should be purchased and there is a fee for the license."
"I rate the product’s pricing an eight out of ten."
"The tool is competitively priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
906,829 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Outsourcing Company
8%
Construction Company
12%
Comms Service Provider
9%
Manufacturing Company
9%
Outsourcing Company
9%
Comms Service Provider
12%
Manufacturing Company
12%
Financial Services Firm
7%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise28
Large Enterprise27
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sophos UTM?
The pricing for Sophos UTM is reasonable; I do not have an issue with it, though I was considering RED because I have...
What needs improvement with Sophos UTM?
I would like to improve Sophos UTM in that there is software I use that goes deeper in the reporting on usage. There ...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
Astaro
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
One Housing Group
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Netgate, Cisco and others in Firewalls. Updated: July 2026.
906,829 professionals have used our research since 2012.