No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint Next Generation Firewall vs Sophos UTM vs Trellix Intrusion Prevention System comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Featured Reviews

Ajit Pratap Kundan - PeerSpot reviewer
Manager Solution Consulting at Accops Systems Pvt Ltd
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.
HR
CEO at iSource GmbH
Integrated security tools have supported critical infrastructure and improved network performance
Regarding Secureworks Taegis VDR Vulnerability Management, I do not have all these shortcuts in my head. Perhaps I have to ask my technicians, but we are in full stress because we have to change this entire firewall equipment, also the entire access points, because of the end of life. We also have the full product in for XDR and extensions. We are also part of the webinars from Sophos. It would be better if there were also some important webinars in German. Everything needs improvement, because also the wireless, also RED box and so on. The handling was much easier on the old equipment than on the new XGS. I think there should also be a little more automatic for SD-WAN routing and so on. Because we have to learn some things from the basic completely new because it is different than Sophos UTM, the XGS. The features that could be improved about Sophos UTM include the new features we have in XGS with a simpler interface. For example, in Sophos UTM, we could define IP hosts and use this IP host. We did not have to insert on every, for example, for wide area networks, we had to put the IP addresses from the other side by hand. In Sophos UTM, we could define it under definitions and then use this IP host where we needed it. In the new XGS, if there is a change in the IP address, we have to do it on all, for example, site-to-site VPN tunnels and so on. We have much more work and it is not so easy because we have to check all the definitions. It is also, for example, some of the male technicians like me, we have a biology handicap. For example, male technicians in Europe also have a red-green problem. So we use these light colors on the interface. In some cases, it is not easy to see the, for example, letters or numbers because of the contrast.
BS
Large account Manager at Softcell Technologies Limited
Has offered reliable threat protection and detailed network insights but could expand features beyond existing capabilities
The best features of Trellix Intrusion Prevention System include advanced ATP (Advanced Threat Protection), which uses signatures, behavior analysis, and machine learning to stop zero-day exploits and malware advanced persistent threats (APTs). They track and collect data from APTs, which allows them to track malicious files entering the environment. The system offers inline prevention and real-time automatic blocking of malicious packets before they reach the network. It integrates with the Trellix ecosystem and provides application visibility and control. The solution provides deep insight into network traffic, applications, and protocols for better information. All packets coming through the application are analyzed and reported. They share intelligence updates regularly to protect from different malicious files and sector-specific threats. It supports both on-premise and cloud environments.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Forcepoint is stable and we plan to continue using it in the future."
"Forcepoint Next Generation Firewall is quite affordable, cheaper than other brands like Palo Alto or Check Point, with a lot of capabilities, very stable, and very well-made, making it a really good product for its price when compared to other vendors."
"The feature that we like the most about Forcepoint is that we know the technology and have confidence in it. We can have several functionalities to simplify operations and management. We can combine functionalities like log ownership to review the number of devices in the infrastructure."
"The VPN is great."
"I have found that Forcepoint Next Generation Firewall is easy to use, highly secure, and the main VPN tunnel is created automatically which is a benefit."
"Previously, it was very difficult to handle all traffic because multiple locations experienced downtime, firewalls went down, and internet connectivity issues occurred, but after Forcepoint SD-WAN solutions were deployed across different locations, all traffic goes through Wi-Fi solutions, which are directly connected to Forcepoint Next Generation Firewall, making it very easy, time-saving, and improving security."
"They offer templates that provide detailed reports categorized by user, device, and internal network access."
"The solution offers sandboxing, which can be integrated at any time."
"We chose Sophos for its ease of use and it detects malware and viruses that other companies can't detect."
"It's easy to use."
"RED remote Ethernet Device layer 2 site-to-site tunnel is a layer 2 tunnel based on SSL protocol that you can establish with or without a static public IP from the provider and this is a feature you will not see among another vendor."
"With over 150 firewalls in our portal, management and monitoring have never been easier."
"The UTM features are reasonably strong and the patterns are updated on a regular basis."
"The solution's sandboxing, application center, and database engine are good."
"It makes it a lot easier for us to maintain things. Prior to it, things were more difficult. This means less time on us. We can focus on other things. The recovery is more in man-hours for us than anything else."
"The management suite is easy and the agent is easy to develop."
"The threat intelligence updates are very accurate."
"We use a lot of the functions this solution provides such as the firewall and the ability to check aliases, and we can monitor and show the traffic that's moving in and out."
"There's a good dashboard you can drill down into. It helps you easily locate intrusions and the source of attacks."
"It's definitely more effective compared to the next-generation firewall that has a built-in IPS."
"The best feature of the Trellix Intrusion Prevention System is the rules that Trellix provides, I think that's the best value from IPS."
"It improved my security by stopping an attack to the signature base, or the behavior base."
"We feel safer now."
"The most valuable features in Trellix for me are the automated signature updates. It is a great and convenient feature."
 

Cons

"The network interface could be better, and it could be cheaper."
"While they offer a comprehensive bundled solution, some users may prefer on-premise deployments for certain features, such as URL filtering."
"The optimization is not really ready."
"Sometimes Forcepoint Next Generation Firewall is not really stable at all. It has many freezes for no reason, and local support needs to reboot it physically by unplugging the power cable and plugging it back in."
"The endpoint protection capabilities of the product are an area of concern where improvements are required."
"Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices."
"It is really hard to work with their customer support. For example, unlike Fortinet where you can escalate an issue and quickly get responses from the development team, Forcepoint's process seems slow and challenging."
"The solution needs to build upon its network functionality. It needs to be a bit smarter."
"Sophos UTM could be simplified, and they can improve on the many other features, like SD-WAN and load balancing. Sophos UTM is missing a few features that their competitors have. For example, if you have multiple branches you would like to connect, the load balancing features aren't available on multilink. If we create a VPM for multiple LAN links, we cannot load balance the traffic."
"The scalability of the product is an area with certain shortcomings where improvements are required."
"The ease of configuration could be improved. It's not as simple as it could be just yet."
"Very rare cases of appliance lost admin password or web-service hangs."
"I would also like it if they could work on the price because it is expensive."
"An area for improvement in Sophos UTM is load balancing because my company cannot use it currently. If Sophos could release a new configuration for the load balancing feature to work for my company, that would be great."
"I don't believe it has improved our organization; I don't actually like the product because of the features it is missing."
"There needs to be some improvement in the IPsec VPN. There is implementation only support. I have version one. I'd be most interested in having IP version two from the protocol."
"Integration with Global Thereat Intelligence could be better. Also, I think management solutions are end of life now at McAfee. Network threat analyzer may be used for endpoint quarantines. Integration between these sides, as well as endpoint APO, will help you quarantine the risky endpoints."
"In terms of high-security attacks, not all of them are developed. You cannot do a rule that includes all high severities."
"The technical support must be improved."
"The management component could be simplified."
"The platform’s GUI could be the latest."
"The Network Security Managers could be more stable, agile, and work faster. When it comes to instability, there is room for improvement."
"The technical support has room for improvement."
"We would like to have a simpler version. Some settings and functions on the McAfee console are complex and complicated. I want the management console to be simpler."
 

Pricing and Cost Advice

"Next Generation Firewall is moderately priced."
"We have found the price could be reduced. It is a little expensive."
"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
"It could be cheaper like Fortinet."
"We have just a subscription for the cloud, and this license is great. The license is so good."
"We would love to take other solution from Forcepoint, but unfortunately the price is too high. That's why we are not considering using Forcepoing for our proxy and DLB. They have a very good DLB, but the matter in the end is the cost."
"Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
"I consider Forcepoint Next Generation Firewall's price to be good."
"It is the cheapest product available. It's good if you have a low budget."
"The prices can be better, they could make it a lot cheaper."
"If you would like to run an active-passive HA system, you only need to buy an additional hardware without subscription. At other vendors, you need subscription for both devices.​"
"Pricing for the upgrade was very competitive as Sophos wanted to retain existing customers."
"The pricing and licensing are both good and better than Sophos's competitors. This is why we went with the product."
"It's reasonably priced."
"You cannot really say that the solution is expensive, given the protection it gives."
"The AWS Marketplace product should be a better fit, but it is a little pricier."
"I rate the product’s pricing an eight out of ten."
"The tool is competitively priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
918,957 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Construction Company
11%
Outsourcing Company
11%
Manufacturing Company
10%
Financial Services Firm
10%
Outsourcing Company
13%
Construction Company
11%
Comms Service Provider
10%
Manufacturing Company
9%
Manufacturing Company
11%
Comms Service Provider
8%
Construction Company
8%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise28
Large Enterprise27
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise6
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sophos UTM?
The pricing for Sophos UTM is reasonable; I do not have an issue with it, though I was considering RED because I have...
What needs improvement with Sophos UTM?
Regarding Secureworks Taegis VDR Vulnerability Management, I do not have all these shortcuts in my head. Perhaps I ha...
What needs improvement with McAfee Network Security Platform?
Trellix Intrusion Prevention System does not provide virtual patching. Patching involves updates on the OS side to ad...
What is your primary use case for McAfee Network Security Platform?
We do not use Trellix Intrusion Prevention System; rather, we sell the Trellix Intrusion Prevention System solution. ...
What advice do you have for others considering McAfee Network Security Platform?
I have experience working with other tools, specifically Trellix solutions such as DLP, EDR, and MDR, as well as with...
 

Also Known As

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
Astaro
McAfee Network Security Platform, McAfee NSP, IntruShield Network Intrusion Prevention System, IntruShield Network IPS
 

Overview

 

Sample Customers

California Department of Corrections and Rehabilitation (CDCR)
One Housing Group
Desjardins Group, HollyFrontier, Nubia, Agbar, WNS Global Services, INAIL, Universidad de Las Américas Puebla (UDLAP), Cook County, China Pacific Insurance, Bank Central Asia, California Department of Corrections and Rehabilitation, City of Chicago, Macquarie Telecom, Sutherland Global Services, Texas Tech University Health Sciences Center, United Automotive Electronic Systems
Find out what your peers are saying about Fortinet, Cisco, Netgate and others in Firewalls. Updated: October 2026.
918,957 professionals have used our research since 2012.