Try our new research platform with insights from 80,000+ expert users

Forcepoint Next Generation Firewall vs Palo Alto Networks Advanced Threat Prevention vs Sophos UTM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.7
Organizations benefit financially and operationally with Fortinet FortiGate, citing savings, increased productivity, better security, and centralized management.
Sentiment score
7.0
Users report significant ROI with Forcepoint Next Generation Firewall due to cost reduction, improved security, enhanced performance, and easier management.
Sentiment score
5.7
Palo Alto Networks Advanced Threat Prevention offers financial benefits and high user satisfaction despite its cost, boosting revenues, especially in Italy.
Sentiment score
6.9
Sophos UTM offers competitive pricing and extensive security coverage, leading to swift ROI and improved network management efficiency.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
Cybersecurity ROI could be $1 or $100 million, depending on the risk of data behind it.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
 

Customer Service

Sentiment score
6.4
Fortinet FortiGate's customer support is praised for knowledgeable staff but criticized for inconsistent responsiveness and varying service quality.
Sentiment score
5.5
Forcepoint Next Generation Firewall support is skilled but slow, with calls for local support and improved response times.
Sentiment score
5.9
Palo Alto Networks' support is praised for expertise but faces inconsistent response times and communication challenges with third-party facilitation.
Sentiment score
6.9
Sophos UTM is praised for responsive, knowledgeable support, despite occasional complaints, earning high marks for customer service.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
Unlike Fortinet where you can escalate an issue and quickly get responses from the development team, Forcepoint's process seems slow and challenging.
Technical support is sometimes slow to respond, and it takes longer to resolve issues.
On a scale of 1 to 10 for customer service for Forcepoint Next Generation Firewall, I would rate it at least 9, 9.5.
I rate technical support from Palo Alto as eight out of ten.
I have proof of this rating - when I escalate a case, I receive a reply from TAC support after two days.
Overall, I find the technical support from Palo Alto Networks quite good, although getting a hold of the TAC can be challenging and sometimes requires long phone calls.
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
 

Scalability Issues

Sentiment score
7.0
Fortinet FortiGate is scalable, adaptable for business needs, but requires advanced planning to avoid hardware and licensing issues.
Sentiment score
7.4
Forcepoint Next Generation Firewall excels in scalability, though some users face challenges with large-scale and cloud deployments.
Sentiment score
7.7
Palo Alto Networks Advanced Threat Prevention is scalable, adaptable, and efficient, though cost may constrain its broad deployment.
Sentiment score
8.5
Sophos UTM scales well with proper sizing, enabling easy expansion in various environments from small setups to large networks.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
There are restrictions in the firewall manager and limitations when deploying for cloud environments.
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
 

Stability Issues

Sentiment score
7.5
Fortinet FortiGate is praised for its stability and performance, though some models face issues with high traffic.
Sentiment score
7.9
Forcepoint Next Generation Firewall is stable and reliable, with praised detection and minor stability concerns in complex deployments.
Sentiment score
7.7
Palo Alto Networks Advanced Threat Prevention is praised for its superior stability and performance, though requires careful version selection.
Sentiment score
8.3
Sophos UTM is stable and reliable, with minimal issues, though updates can occasionally cause temporary problems.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
 

Room For Improvement

FortiGate needs improvements in interface stability, user experience, reporting, VPNs, licensing costs, documentation, performance, and support.
Forcepoint NGFW needs UI, policy management, and pricing enhancements, along with improved support, integration, and configuration flexibility.
Palo Alto Networks needs improvements in email filtering, setup ease, user experience, support services, and enhanced security features.
Sophos UTM users seek improved scalability, performance, VPN capabilities, interface usability, cost transparency, support, and simplified management features.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
Fast response and efficient handling of issues, similar to how Fortinet responds, would be great.
AI improvements could be beneficial, as having AI capabilities has become an important checkmark feature.
I recommend that additional features be included in a single license to avoid the need for extra licensing costs.
Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations.
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
I would love to see artificial intelligence capabilities integrated into Sophos UTM.
With artificial intelligence, there is room for improvement in all antivirus and security software.
 

Setup Cost

Fortinet FortiGate is valued for cost-effectiveness, clear licensing, but renewal costs can vary compared to competitors.
Forcepoint NGFW pricing varies, with costs perceived as high due to licensing models and additional feature charges.
Palo Alto Networks Advanced Threat Prevention is costly but valued for strong threat detection, with pricing challenging for smaller businesses.
Sophos UTM offers competitive pricing with varied licensing options, though some users find it costly compared to alternatives.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It is about 20% cheaper.
The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost.
The costs can be high since additional features require separate licenses.
In terms of pricing, I would place Forcepoint in the middle when compared to other firewalls like Fortinet and Palo Alto.
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
The value between what I receive and what I pay is the best in the industry.
 

Valuable Features

Fortinet FortiGate is valued for its high-performance security features, ease of use, scalability, and cost-effectiveness.
Forcepoint Next Generation Firewall offers comprehensive security features and integration for effective network and systems application management.
Palo Alto Networks excels in threat prevention with features like sandboxing, machine learning, and user-friendly design, enhancing efficiency.
Sophos UTM provides scalable security with web protection, VPN, centralized management, and integration, suitable for all business sizes.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
With Forcepoint, this process is simplified compared to others like Fortinet.
The most valuable features of Forcepoint Next Generation Firewall are the advanced threat protection, including features like IPS and DDoS prevention, which help avoid internal DDoS attacks.
From a configuration standpoint, it has been easy to manage.
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
We are satisfied with the analytic capabilities of Palo Alto Networks Advanced Threat Prevention, especially the reporting features available in the Palo Alto portal in terms of their application visibility interface, which is very good for us to get visibility on all critical applications and the associated users, as well as the risks associated with every category of traffic.
The zero-day protection and firewall rules are some of the most effective features for threat management.
This integration of the antivirus and the firewall works together to enhance security.
 

Mindshare comparison

Firewalls Market Share Distribution
ProductMarket Share (%)
Forcepoint Next Generation Firewall0.5%
Fortinet FortiGate20.1%
Netgate pfSense11.1%
Other68.3%
Firewalls
Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks Advanced Threat Prevention7.4%
Darktrace18.0%
Vectra AI10.6%
Other64.0%
Intrusion Detection and Prevention Software (IDPS)
Unified Threat Management (UTM) Market Share Distribution
ProductMarket Share (%)
Sophos UTM14.0%
WatchGuard Firebox13.2%
Cisco Meraki MX11.6%
Other61.2%
Unified Threat Management (UTM)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
OusaidAbaz - PeerSpot reviewer
Provides decent protection for the LAN but complicated interface
We had some licensing issues with its web filtering capabilities. That's why we migrated our web filtering to Cisco Umbrella. Moreover, the interface is complicated. It's difficult to locate all the necessary menus and functions. For example, one of the many issues is with SSH. Even now, we haven't successfully opened the port to connect using SSH mode when we want to change the configuration. It's like a black box—not very open to changes and customization. It's simply not easy to configure. There are other problems, too. For example regarding Forcepoint's Websense component. We had a lot of problems managing the web settings within Websense. That's why we migrated to Cisco Umbrella for cloud-based web filtering. It's not that Forcepoint is inherently bad. The issue is that it's not user-friendly. It is not easy to use. The developers need to redesign the interface (GUI) for better management. It is very difficult to manage. For example, simple actions require too many clicks compared to FortiGate or Palo Alto. That's the main problem.
Partha Dash - PeerSpot reviewer
Advanced protection enables us to confidently secure against evolving threats
Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to protect against those types of threats, as AI will be there to do a human job; this is an evolving area. From an Advanced Threat Protection perspective, the technology associated with Palo Alto Networks, such as their sandboxing environment, is quite good. However, Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations. While Palo Alto excels in certain setups, they need to improve the user experience in distributed working conditions.
Samaila Yusuf - PeerSpot reviewer
Network protection strengthens through effective threat management features and secure access control
The zero-day protection and firewall rules are some of the most effective features for threat management. I can set the rules and features, and also use IPsec to connect all my on-premises servers and link them to Sophos UTM so that they are protected even when in the cloud. Additionally, I use it to control access into the building through a captive portal integrated across all the PCs we have, ensuring secure access only for authenticated users.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
867,299 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
15%
Manufacturing Company
11%
Government
8%
Financial Services Firm
7%
Computer Software Company
13%
Manufacturing Company
9%
Financial Services Firm
8%
Government
8%
Computer Software Company
14%
Comms Service Provider
8%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business261
Midsize Enterprise99
Large Enterprise143
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise8
Large Enterprise11
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise15
By reviewers
Company SizeCount
Small Business71
Midsize Enterprise26
Large Enterprise26
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
The licensing model is dependent on negotiation skills, but there is room for improvement. The costs can be high sinc...
What needs improvement with Forcepoint Next Generation Firewall?
The licensing model should be more flexible. I recommend that additional features be included in a single license to ...
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...
What is your experience regarding pricing and costs for Palo Alto Networks Threat Prevention?
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to comp...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
The value between what I receive and what I pay is the best in the industry.
What needs improvement with Sophos UTM?
With artificial intelligence, there is room for improvement in all antivirus and security software. However, the bad ...
 

Comparisons

 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
No data available
Astaro
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
California Department of Corrections and Rehabilitation (CDCR)
University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia
One Housing Group
Find out what your peers are saying about Fortinet, Netgate, OPNsense and others in Firewalls. Updated: August 2025.
867,299 professionals have used our research since 2012.