No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs Sophos UTM vs Trellix Intrusion Prevention System comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
MANAGER SOLUTION CONSULTING at a manufacturing company with 201-500 employees
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
Bashir Bashir - PeerSpot reviewer
IT Manager at Vegol
Firewall management has become simpler and now provides real-time visibility and bandwidth control
The features I have found most valuable in Sophos UTM are that it is much easier to configure, I appreciate the reporting side of it, and the rules are very straightforward to work with. Sophos UTM's real-time insights into network health help my organization because I get real-time reports on what is happening on my network, what is trying to access me, the destination, and all that. I can then be reactive or proactive, and for zero-day, I think it is beneficial because it can learn what my network does. If anything goes outside what it expects, it sends a report on Sophos Central, so I find zero-day makes my work a bit easier. The use of Sophos UTM's intuitive management console has impacted my security policy enforcement in that it is much easier to configure; I configure with information rather than with presumptions.
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration."
"We find the product to be stable and reliable in terms of performance."
"The VPN is great."
"The security management center is one of the best parts of the product."
"Forcepoint is my favorite enterprise firewall."
"One of the most valuable features is having the ability to cluster multiple firewalls even if they are different versions."
"I don't have anything bad to say about the product. I absolutely love it."
"Forcepoint is a very big company with a very good product line, and it fulfills most of the needs of the customers, especially enterprise customers in the financial sector."
"It has made our organization more secure, because we are using a VPN. We are not accessing services directly. It allows us to segregate some of the traffic for individuals which may be more of a developer role rather than an operational role needing access to developer resources, but not necessarily production operational resources."
"​The initial configuration is straightforward thanks to the web GUI. In 30 minutes, you can have a running firewall with UTM protection enabled.​"
"It is a stable product... I rate the solution's technical support a nine out of ten...The initial setup is quite easy because they have all the information on their website."
"The most valuable feature is the IPS, and it also protects us from malware."
"With over 150 firewalls in our portal, management and monitoring have never been easier."
"The solution is stable."
"We recommend this solution."
"Sophos UTM has improved the porting section. It has improved security by seeing the gaps. For example, when you discover that an entry has been using a certain application, with Sophos UTM acting as a Layer 7 firewall, you can block the application, not the port."
"The most valuable features in Trellix for me are the automated signature updates. It is a great and convenient feature."
"The feature I found most valuable is the network threat analyzer in the security platform. It also integrates with GTI, or Global Threat Intelligence. Otherwise, I just use the basic features."
"The most valuable features are the customization of the signature and the unlimited amount of custom signatures in IPS."
"The most valuable features of the solution stem from the fact that it is a good product for dealing with DDoS attacks and for the inspection of network traffic."
"The product is worth the investment."
"The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs)."
"The ability to centrally manage all the IPS sensors, track the different security events generated by it, and customize the different policies, depending on their location."
"We use a lot of the functions this solution provides such as the firewall and the ability to check aliases, and we can monitor and show the traffic that's moving in and out."
 

Cons

"The support from Forcepoint Next Generation Firewall is not good, their response is not quick, we have had to wait a while."
"Next Generation Firewall's configuration could be improved."
"The solution isn't scalable."
"Forcepoint Next Generation Firewall should make some improvements because there is some instability with their software. Sometimes it could lag or become over-utilized, you need to clear some caches and do some restarts, and sometimes some traffic is being blocked and the reason is not entirely clear."
"They need to improve their alerts."
"Forcepoint Next Generation Firewall is overall good, but AI enabled features are not available."
"My team is looking for more throughput and better integration with our security framework."
"Management could be better. They can improve the management."
"I would like this solution to support ICAP. Also, they no longer support on-premises management, and are forcing clients to use centralized management via the cloud, which I don't agree with."
"There needs to be some improvement in the IPsec VPN. There is implementation only support. I have version one. I'd be most interested in having IP version two from the protocol."
"The initial setup is very, very difficult. When I installed the new Sophos and tried to restore the backups, the restore process did not work."
"Updates come out agonizingly slowly, a trickle."
"The logs are not clear, which means that you need an additional piece of software in order to read them clearly."
"We had some problems with the configuration. They had provided a CloudFormation template, and we had to go several rounds to make it work."
"Doesn't provide antivirus for individual computers."
"The scalability of the product is an area with certain shortcomings where improvements are required."
"The technical support has room for improvement."
"In terms of high-security attacks, not all of them are developed. You cannot do a rule that includes all high severities."
"Trellix Intrusion Prevention System does not provide virtual patching."
"I haven't seen threat intelligence and machine learning for predictive threat analysis in the Trellix Intrusion Prevention System yet."
"The deployment was a little difficult, I did it myself."
"There are limited resources for configuration guidance."
"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."
"The solution could improve some aspects of detection."
 

Pricing and Cost Advice

"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
"The cost is fair, but it could be improved."
"There is a license required to use this solution and we can purchase it for one, two, three, or five years."
"There is a need to make payments towards the licensing charges attached to the product. The product is not expensive."
"We would love to take other solution from Forcepoint, but unfortunately the price is too high. That's why we are not considering using Forcepoing for our proxy and DLB. They have a very good DLB, but the matter in the end is the cost."
"It is expensive."
"The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"
"The pricing of the solution is normally competitive with other products."
"The prices can be better, they could make it a lot cheaper."
"Pricing for the upgrade was very competitive as Sophos wanted to retain existing customers."
"The appliance should be purchased and there is a fee for the license."
"There is a license for the device and for the software. We pay annually for the solution and the cost is competitive."
"We purchased the appliance with five years onsite support and licenses."
"Go to a vendor and let them assess your needs so you can get a right-sized device."
"Purchasing through the AWS Marketplace is pretty straightforward. Because were entirely on AWS and don't have anything anywhere else. It made the most sense for us as a one stop shop."
"The pricing is pretty reasonable. I don't think that it is overly expensive."
"The tool is competitively priced."
"I rate the product’s pricing an eight out of ten."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
906,829 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Outsourcing Company
8%
Construction Company
12%
Comms Service Provider
9%
Manufacturing Company
9%
Outsourcing Company
9%
Comms Service Provider
12%
Manufacturing Company
12%
Financial Services Firm
7%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise28
Large Enterprise27
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sophos UTM?
The pricing for Sophos UTM is reasonable; I do not have an issue with it, though I was considering RED because I have...
What needs improvement with Sophos UTM?
I would like to improve Sophos UTM in that there is software I use that goes deeper in the reporting on usage. There ...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
Astaro
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
One Housing Group
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Netgate, Cisco and others in Firewalls. Updated: July 2026.
906,829 professionals have used our research since 2012.