Try our new research platform with insights from 80,000+ expert users

Fortinet FortiGate vs Sophos XGS comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Sophos XGS
Ranking in Firewalls
14th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
82
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of Sophos XGS is 1.8%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Q&A Highlights

RS
Dec 13, 2022
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
Jaffar Ali - PeerSpot reviewer
Has provided stability, security, ease of management, and better reporting options
People use Sophos XGS because the overall channel support is very good, so they don't face issues. Additionally, it is competitive in pricing against Fortinet in some cases, especially when considering high availability, email subscriptions, and gateways Sophos XGS has provided stability,…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I'm pretty happy with its reliability. It is also very scalable."
"The most valuable features are the enterprise modeling and the simple interface."
"The stability and scalability of this solution are satisfactory. Its SD-WAN, VPN, and URL filtering features are very useful."
"Our security improved from being able to put in rules and close off unwanted traffic."
"Initial setup is straightforward. There weren't too many issues with setting it up. It takes one hour or so."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"The UTM feature is quite good. FortiAP is easy to deploy because both Fortigate and FortiAP are under the same brand. Otherwise, you need to do more work on the configuration."
"The threat prevention is the solution's most valuable aspect."
"Sophos has a centralized management system where I can manage and control all the Sophos firewalls at the same time."
"The stability of Sophos XGS is very high."
"The most valuable feature of Sophos is the VPN solution. I also value their threat management, IPS IDS features and login features with single sign-on."
"XGS' most valuable feature is ransomware protection."
"The scalability of Sophos XGS is very good."
"I think Sophos technical support's immediate response is good compared to Fortinet's. If the technical engineer is good, they get the solution immediately. If not, it might take two days. For improvement, immediate response is required, whether by email, phone call, or WhatsApp. Sometimes, we can't wait three or four days for a solution. In urgent situations, we might use a spare Sophos device while waiting for support."
"The most valuable features of Sophos XGS are the ease of use and powerful interface."
"The solution is cost-effective and easy to manage."
 

Cons

"There aren't really any negative aspects to discuss."
"If they could extend their fabric towards other vendor environments for integration, that would be great."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"Scalability is one of the disadvantages. When it comes to scalability, you have to actually change the box. If you want to upgrade it, you need to actually change the existing box and probably you take the system off to other sites."
"Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."
"The support team for Fortinet FortiGate needs to be more customer friendly."
"The security of Fortinet FortiGate could improve."
"If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox."
"Sometimes, we haven't received proper support. They couldn't find the solutions that we required. One thing that we need is an NTP server facility. The Sophos XGS device does not have this capacity or this feature."
"The price of Sophos XGS could improve, it is high."
"Sophos pricing is very high. The last instance I purchased was for three years, around $3,700 for SDG 125."
"The configurations can be a bit complex."
"We'd always like the solution to be a bit less in terms of cost."
"The reporting could be better."
"The solution could improve by using fewer hardware resources compared to other products like Palo Alto, which has better performance."
"The functionality of SD-WAN compared to other boxes is lacking."
 

Pricing and Cost Advice

"Fortinet FortiGate gives you most of the features in one license."
"Their licensing costs are annual. The UTM feature license along with their support is called FortiCare. We include that as a part of the annual maintenance cost. Palo Alto or Juniper also have an annual subscription charge for UTM. Price, of course, can always be more competitive, but it is not the most expensive product. The price-performance ratio is quite high for FortiGate."
"Work through partners for the best pricing."
"There is a license to use Fortinet FortiGate."
"Fortinet FortiGate as a less expensive solution than Palo Alto."
"The pricing is justified. It's a little pricey, but what you pay for is what you get."
"The pricing is flexible."
"Its pricing is good. It's average or normal as compared to Palo Alto and Check Point firewalls."
"A central firewall on the cloud with a cluster might be 70,000 to 80,000 euros for a three-year license."
"Sophos XGS's pricing is very affordable."
"The cost of Sophos XGS is based on per unit, per appliance, and capacity."
"There are additional costs involved apart from the licenses."
"The price of Sophos XGS depends on the type of license. However, the licensing cost is approximately 60 percent of the total cost."
"It's highly effective and well-suited for medium and small companies. The pricing is attractive, and our customers find it suitable for regular license renewals."
"The pricing for Sophos XGS is reasonable."
"We paid around 17,000 pounds for a three-year package."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
831,071 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Answers from the Community

RS
Dec 13, 2022
Dec 13, 2022
Hi Rahul, I'm an IT consultant, specializing in networking and firewalls. Actually, I'm implementing Fortigates 100F and Sophos XGS2100 in customers' infrastructures. They are two big advantages for Sophos XGS: 1) The second CPU XStream, dedicated to firewalling and UTM functions, like Web Filtering, Web Application Firewall, IPS, etc.: https://news.sophos.com/en-us/... 2) The Sophos "Synchroni...
2 out of 4 answers
AR
Dec 12, 2022
Hi Rahul, I'm an IT consultant, specializing in networking and firewalls. Actually, I'm implementing Fortigates 100F and Sophos XGS2100 in customers' infrastructures. They are two big advantages for Sophos XGS: 1) The second CPU XStream, dedicated to firewalling and UTM functions, like Web Filtering, Web Application Firewall, IPS, etc.: https://news.sophos.com/en-us/... 2) The Sophos "Synchronized Security", interaction with the client protection, centralized in a cloud console: https://www.sophos.com/en-us/c... With this Xstream processor (ASIC), an XGS2100 is more powerful than a Fortigate 100F...and no way with pricing, Sophos is cheaper. Regards, A.Rastello
Pieter Plas - PeerSpot reviewer
Dec 12, 2022
We have a lot of Sophos firewalls in the field. I agree to the answer from Alexandre. The Sophos Firewall is the more powerfull firewall. But maybe it's a good idea to explore the XGS 3100 because of the hardware like 10gbit.With kind regards,
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
17%
Manufacturing Company
8%
Comms Service Provider
7%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage at large. In my opinion, Fortinet would be the best option and l use Fortinet too...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know the firewalls change every 5 to 7 years as stated but you really do need to upg...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite good. The most valuable features for me are their web and email filtering. I wou...
What do you like most about Sophos XGS?
The policies are the greatest feature. They allow us to configure granular control over our network traffic.
What is your experience regarding pricing and costs for Sophos XGS?
The pricing is justified, and the solution is considered budget-friendly compared to other vendors.
What needs improvement with Sophos XGS?
Hardware stability needs improvement. I have experienced multiple hardware complaints, particularly during firmware updates that sometimes cause crashes. Improvements to the hardware would be a cri...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
 

Learn More

 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Information Not Available
Find out what your peers are saying about Fortinet FortiGate vs. Sophos XGS and other solutions. Updated: January 2025.
831,071 professionals have used our research since 2012.