We performed a comparison between Fortinet FortiGate, Sophos Cyberoam UTM, and WatchGuard XTM [EOL] based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."Good performance, stability, and virtual domain ability."
"It enables our organization to become more productive. Also, it protects our NEtWare from viruses and malware."
"The integration with Active Directory is one of the good features. Most of the customers are now looking for the Single Sign-on feature. So, being able to integrate Active Directory with the firewall is useful. It is also easy."
"It is a safe product."
"The Fortinet FortiGate local partners were good. I did not have direct contact with Fortinet support."
"It's very easy to configure."
"We use a southern institution that's audited for IT security and the reporting that automatically comes off the unit makes it much easier to meet compliance standards and makes it easier as far as the amount of time that has to be spent to compile that information. If you get your reporting set up correctly when you initially set it up, you just select the one you want and hit print. The auditing trail on it is the best feature."
"The security fabric is excellent."
"The solution has good load balancers."
"Good user interface."
"I found that the best feature of Sophos Cyberoam UTM is reporting. Its reporting feature is excellent, fast, and easy to prep and launch."
"Web application filtering eases internet access control."
"We are using it as a security shield. It does not allow access before that in case we have restricted a few things from users, so it helps me in that."
"The most valuable feature of this product is the threat protection."
"The product has helped control bandwidth utilization, as well as enhanced connectivity and security to remote locations."
"I'm more inclined towards the conventional firewall. So for me, I'm more geared towards the standard firewall type functionalities as well as the web application firewall because that seems to work fine."
"It is stable and does not require you to reboot all the time."
"Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process."
"After installing the product, we achieved awareness of our data protection needs and email misuse."
"We have used technical support for WatchGuard many times and overall, we are satisfied with it. They are always listening and there is a good reaction time to our findings. When there are issues, they really try to resolve them."
"It configures in all-in-one place."
"WatchGuard XTM is fairly basic. We use it as the perimeter firewall. The main point is to protect from attack software and hacking."
"Monitoring of network activity is included in the box."
"I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site."
"MTBF: Hardware failure is more common when compared to SonicWall or Cisco ASA."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."
"The user interface could be improved to make it less confusing and easier to set up."
"I'm not sure if it's something that they already have or are developing something, however, we need some dedicated features for container security."
"Lacks sufficient security options."
"The price of FortiGate should be reduced because there are some other leading products that are cheaper."
"FortiGate should have a better way of detecting and managing the system memory because otherwise if the memory is too low, a system restart is required."
"Needs a mail alert/notification when the device loses any of its connections, during ISP redundancy implementation."
"It should have better VPN protection. Some of the VPN applications are not blocked by this firewall. Some VPNs are able to get through this firewall, which is why I am planning to replace this firewall with a good one in the near future."
"The solution is at its end of life and some of the appliances are finishing."
"The solution should improve its scalability because it cannot support enterprise networks."
"Sometimes, users are timed out intermittently."
"I would like to see improvements in the development of reports. The process needs to be made simple."
"I would say there's room for improvement in terms of the GUI. Because it is better than some of the other standard firewalls. They have the drag and drop features."
"The implementation policy needs improvment."
"One huge issue with WatchGuard XTM is that I'm not getting reports in a readable format. Readable means, I don't want Excel online. We repeat auditing when we trigger the report or setup calendar. That functionality is what we are looking for from WatchGuard XTM here."
"Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer)."
"I would like them to improve the product's overall protections. This would be good for all product users."
"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."
"The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out."
"Sometimes we have had issues with stability of the product."
"The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic."
"The VPN errors are not helpful when troubleshooting."
Earn 20 points
