We performed a comparison between Fortinet FortiGate, Fortinet FortiGate-VM, and Sophos XG based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."The SD-WAN function is very developed. It has SD-WAN functionality with security features in one device. We can manage from one single console SD-WAN and the security policy."
"With FortiClient, you can easily connect when you are home, check out what you want to do, and connect to your network when you are not at work. You can switch on servers and you can check what is wrong."
"Our security improved from being able to put in rules and close off unwanted traffic."
"Fortigate represents a really scalable way of delivering perimeter network security, some level of layer 7 security, WAF, and also a way to create a meshed ADVPN solution."
"The most valuable feature is the web filter."
"The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."
"The pipe filter application is an outstanding feature."
"Overall security features and performance routing is good."
"Fortinet-VM is more scalable than the hardware version. If you're using an appliance, there are limitations in terms of hardware specs. So if you want a more scalable firewall, you can get a VM and install it on a high-end server."
"Regarding specific features, I appreciate the option for external selection, where you can choose either to use a default or create a self-description. This simplifies the process compared to other vendors that require creating a test extension profile and then applying it to the installation. With FortiGate, there is a streamlined approach. From the benefits perspective, clients mainly see cost reduction, especially with FortiGate VM Firewall, as it eliminates the need for additional hardware."
"The most valuable features of Fortinet FortiGate-VM are its flexibility and scalability. This solution is available as a license, which allows us to activate it based on the specific needs of the customer. This gives us and the customer a great deal of versatility and customization options."
"Its performance is adequate. We are quite satisfied with its performance. The fact that it is a complete ecosystem with all kinds of integrations is valuable. It did take us a couple of months to get a grip on the new software, but all in all, it replaced our on-premise and single-point solution environment."
"The tool improved the security in our company's virtualized environment, as it was helpful in creating an additional layer of security for the organization and for the use of the internet."
"The most valuable features are site-to-site connections and UTM."
"Fortinet FortiGate-VM is very easy to create the user of VPN, allowing them to use it quickly. Additionally, the integration and interface are good."
"All the security features that are built into the product are valuable."
"What I have found most valuable with the Sophos XG is it's a key component of the Intercept X EDR environment. You have to have it to receive the full benefit. If you've you are using Sophos SG firewalls, they're great firewalls and in many ways, I prefer them to the Sophos XG. Since I have set them up, programmed them, and manipulate firewall rules, et cetera, the Sophos SG's a better interface. However, the Sophos XG's very powerful. I prefer it over other solutions I have used, such as Cisco Meraki and SupportNet, I don't like them. They're not very friendly to people who have to set them up and implement them."
"The SD-WAN feature stands out as the most valuable aspect."
"I like the web filter, application filter, and VBA."
"One feature of Sophos XG that I found incredibly beneficial for threat prevention is its endpoint protection."
"The antivirus features are valuable."
"The VPN features and its capabilities are great."
"The VPN feature is the most valuable. It has come in handy during this period when people are working from home. The filtering feature is also valuable because you can easily filter the sites that you don't want to visit. You can also set timely surfing quotas."
"The most valuable feature is the central dashboard"
"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."
"I would like to see better pricing in the next release, as well as a simplification of the installation."
"It claims it does DLP, but the degree and level of controls are very basic."
"I feel that the reporting needs to be improved."
"With FortiGate, the main complaint that I have heard is about the technical support."
"We have an issue with hotel guest vouchers."
"Price, of course, can always be more competitive or better."
"I could not configure sFlow from the FortiGate graphical user interface. I realized that the sFlow configuration is available only from the CLI, and discovered that sFlow is not supported on virtual interfaces, such as VDOM links, IPsec, or GRE."
"The solution could use very well-defined support for resellers."
"The product has issues with integration. I would like to see better integration in future releases of the product."
"The user interface (UI) and the performance of interface both need improvement."
"To improve FortiGate-VM, Fortinet needs to harden it more. For example, if you are using Hyper-V, then you need guidelines for hardening FortiGate-VM that are specific to the Hyper-V environment. If it's VMware, there should be at least a guideline on how to harden the firewall."
"The scalability feature of the solution has certain shortcomings, making it an area where improvements are required."
"The price and licensing of the solution can be better."
"We have had some stability issues."
"The product may not be as robust as Palo Alto. However, unless you are a big bank, you probably won't need it to be."
"The reaction time of the GUI is terrible when compared to other manufacturers."
"Network security is in need of improvement."
"The GUI and support could be better. I think there are other products that we are going to deploy instead of Sophos. We have already upgraded a month ago because the interfaces and support for Sophos are really weak. But other products like Juniper, Cisco, or FortiGate are better than Sophos. It's also complicated, and the end-user or client does not understand it."
"Lacking network access control, user profiling and analytics dashboards."
"I would like to have better SSL decryption and HTTP decryption. There should be filtering of SSL and HTTP traffic. Sophos XG consumes a lot of endpoint resources. It consumes a lot of RAM and CPU resources, and they should look into this."
"The weakest point is the technical support because they are difficult to get into contact with."
"Sophos needs improvements made to the console, such as host entry or defining rules directly from it."
"I would like to see in future releases a tool to scan for malicious packets and give the location of where they are coming from."