Try our new research platform with insights from 80,000+ expert users

Fortinet FortiGate vs Palo Alto Networks NG Firewalls vs Sophos UTM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers a high ROI with cost-effective cybersecurity, reducing costs and improving efficiency through centralized control.
Sentiment score
6.6
Palo Alto Networks NG Firewalls enhance security and reduce costs, improving efficiency and delivering substantial ROI in regulated industries.
Sentiment score
6.0
Sophos UTM users report positive ROI, citing network security, cost savings, and flexible pricing within six to sixteen months.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
Their user-friendly interface and Panorama central management, which provides a comprehensive overview, make them an ideal investment.
Technical Lead at Accenture
The solution helped reduce downtime, which is crucial in time-sensitive industries like manufacturing.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
I have seen a return on investment since using Palo Alto Networks NG Firewalls in terms of time saved.
Security Professional at BT - British Telecom
I have seen a return on investment with Sophos UTM, and I can share that the price is around thirty percent better, especially if you count in the employee time.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate support is generally effective, but users report variable responsiveness and rely on comprehensive documentation.
Sentiment score
6.9
Customer service for Palo Alto Networks NG Firewalls varies, with users noting fast responses but inconsistent service and language issues.
Sentiment score
7.0
Sophos UTM customer service is generally reliable and fast, though experiences vary due to language barriers and responsiveness.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
Palo Alto's network support is excellent, and I would rate it a ten out of ten.
Founder at a tech services company with 11-50 employees
Their response time is within one hour.
Head of data centers at a non-profit with 10,001+ employees
They offer fast and competent assistance.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
Associate Director - Management Support Services at CIHP
I would rate the technical support by Sophos a 10.
Network and Infrastructure Manager at Sonysugar
I would rate the technical support with Sophos a seven because sometimes the time of the first resolution is not ideal.
IT Manager at a consultancy with 51-200 employees
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is considered scalable for small to medium enterprises, though less so for large-scale expansions.
Sentiment score
6.8
Palo Alto Networks NG Firewalls offer scalability and reliability but may face hardware limitations and cost concerns for smaller setups.
Sentiment score
6.8
Sophos UTM offers scalable performance, efficiently supporting various organization sizes with proper sizing, though planning is crucial for upgrades.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
Cloud deployments benefit from auto-scaling, allowing for automatic adjustments to firewall capacity based on demand.
Technical Lead at Accenture
It is important to assess the infrastructure size before choosing a model.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
Palo Alto Networks NG Firewalls are scalable and reliable.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
You can have high availability clusters, so very, very scalable in my opinion.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is stable and reliable, with occasional issues linked to updates and high traffic, requiring regular patches.
Sentiment score
8.5
Palo Alto Networks NG Firewalls are praised for high stability and reliability, outperforming competitors despite occasional hardware and update issues.
Sentiment score
7.5
Sophos UTM is highly reliable, with users praising its stable performance despite rare concerns about hardware and resource demands.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
With appropriately configured policies, these firewalls can provide robust network security.
Solution Architect at a retailer with 201-500 employees
After the upgrade, we are experiencing performance issues.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
I have not experienced any outages or issues.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Room For Improvement

Fortinet FortiGate users desire better reporting, intuitive UI, improved documentation, simpler pricing, stability, integration, and advanced features.
Palo Alto Networks NG Firewalls need better configuration, user-friendliness, integration, and cost-effective, scalable hardware with enhanced support and management.
Sophos UTM needs better interface, documentation, threat detection, VPN setup, load balancing, scalability, and enhanced security features.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
When performance degrades due to full packet inspection, the solution should be to increase the computing power within the same firewall, not to recommend upgrading to a larger, more expensive model.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
Further integration into a unified system could improve usability.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
Palo Alto Networks NG Firewalls lack built-in multi-factor authentication, requiring the purchase of a third-party tool to implement this essential security feature.
Head of data centers at a non-profit with 10,001+ employees
If you want to really implement some rules that are a little bit more difficult, Sophos always recommends getting the dedicated WAF, or web application firewall, but I would prefer to have more features on the web application firewall in the firewall itself because it would make more sense.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
I would prefer to see additional features in the next release of Sophos UTM because cyber crime increases every day, so we also need to improve our game to prevent any chances for intrusion.
Network and Infrastructure Manager at Sonysugar
I would love to see artificial intelligence capabilities integrated into Sophos UTM.
Associate Director - Management Support Services at CIHP
 

Setup Cost

Fortinet FortiGate offers competitive pricing, though renewal and add-on costs can affect long-term affordability, providing good feature value.
Palo Alto Networks NG Firewalls are costly, but advanced security features justify the expense for many users.
Sophos UTM provides flexible, cost-effective pricing models, with competitive options and discounts, valued by larger organizations despite higher costs.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
Palo Alto Networks NG Firewalls are expensive.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
Palo Alto Networks NG Firewalls come at a premium, exceeding the cost of most competitors by 45 percent.
Head of data centers at a non-profit with 10,001+ employees
Colleagues looking for the cheapest and fastest firewall can still use Palo Alto Networks NG Firewalls because they are affordable.
Director at Zuci Systems
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
Associate Director - Management Support Services at CIHP
The value between what I receive and what I pay is the best in the industry.
System Administrator at a training & coaching company with 11-50 employees
The pricing would be more economical if sold directly to the user compared to going through a partner, as they need to take their percentage.
Network and Infrastructure Manager at Sonysugar
 

Valuable Features

Fortinet FortiGate excels with ease of use, robust security, and affordability, featuring web filtering, VPN, SD-WAN, and IPS.
Palo Alto Networks NG Firewalls provide advanced security, ease of use, and integration, excelling in application ID and URL filtering.
Sophos UTM offers robust security with firewalls, VPN, web filtering, scalability, intuitive interface, and integrated management for enhanced protection.
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
IT Manager at Daltons Limited
The most valuable features of Palo Alto Networks NG Firewalls are DNS sync calls, enabled security features, and Wildfire.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
Threat Vault allows us access to a comprehensive threat database, enabling us to get detailed information on threats and how to mitigate them.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
The most valuable feature of Palo Alto Networks NG Firewalls is Cortex Data Lake.
Solution Architect at a retailer with 201-500 employees
The zero-day protection and firewall rules are some of the most effective features for threat management.
Associate Director - Management Support Services at CIHP
It helps us quite a lot, especially because since we use Sophos UTM, malware intrusions are not rampant.
Network and Infrastructure Manager at Sonysugar
Sophos UTM's valuable features include the cost, which is very competitive when compared with other vendors, balanced with the features that it delivers.
IT Manager at a consultancy with 51-200 employees
 

Mindshare comparison

Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.7%
OPNsense10.5%
Sophos Firewall9.8%
Other61.0%
Firewalls
Firewalls Market Share Distribution
ProductMarket Share (%)
Palo Alto Networks NG Firewalls5.2%
Fortinet FortiGate18.7%
OPNsense10.5%
Other65.6%
Firewalls
Unified Threat Management (UTM) Market Share Distribution
ProductMarket Share (%)
Sophos UTM8.1%
Fortinet FortiGate31.3%
WatchGuard Firebox9.5%
Other51.1%
Unified Threat Management (UTM)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
SV
Solution Architect // Network Consultant at Group S
Network security has improved and allows detailed user-based control over encrypted traffic
Bandwidth usage is not something we use much, but it depends on the SD-WAN plugin because the application load balancing is based on the SD-WAN product. That functionality does not work as it should, although the App-ID is working very well. SD-WAN functionality is working, but when you compare it with other products on the market, it is very limited. Palo Alto also has ION devices, and ION devices together with Prisma Access or Strata Cloud Manager now are more the way to go than using Palo Alto Networks NG Firewalls on-premises. At the moment I have some issues, but the issues are more related to the general way of working of many vendors. They implement new things very fast and it is not always bug-free. With new releases, sometimes you still have some issues. This is the main concern. If you look back five or maybe ten years ago, the products were more stable and you had more decent releases, but that is something in general for many vendors. Palo Alto is also a factor with that. They want to bring new features to the market too fast. Features are a concern because all vendors try to compete against each other. If one vendor comes out with a new feature, then other vendors do the same. Sometimes they want to be the first on the market with it, and that sometimes introduces bugs or issues with the product.
Thomas Zimmerman - PeerSpot reviewer
System Engineer SDDC / VCF at a tech services company with 51-200 employees
Integrated firewall and VPN have provided cost savings and strengthened customer security
The needed improvements for Sophos UTM include that the GUI could be a little more high-resolution-aware because it's still stuck in the small, low-resolution admin days, and those are long over. I choose a rating of nine out of ten for Sophos UTM because, as I mentioned, the graphical user interface is stuck in the past, and some things here and there are not implemented to the full, such as the reverse gateway thing, reverse proxy, and web application firewall. If you want to really implement some rules that are a little bit more difficult, Sophos always recommends getting the dedicated WAF, or web application firewall, but I would prefer to have more features on the web application firewall in the firewall itself because it would make more sense. Other than that, it's a very smooth experience, and I really appreciate it.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
881,928 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
8%
Educational Organization
6%
Comms Service Provider
10%
Manufacturing Company
9%
Computer Software Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise189
By reviewers
Company SizeCount
Small Business74
Midsize Enterprise56
Large Enterprise85
By reviewers
Company SizeCount
Small Business74
Midsize Enterprise28
Large Enterprise25
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
I have no declaration regarding my experience with pricing, setup cost, and licensing for Sophos UTM.
What needs improvement with Sophos UTM?
The needed improvements for Sophos UTM include that the GUI could be a little more high-resolution-aware because it's...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
Astaro
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
One Housing Group
Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: January 2026.
881,928 professionals have used our research since 2012.