Try our new research platform with insights from 80,000+ expert users

Netgate pfSense vs Sophos UTM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers cost-effective, robust security, reducing expenses, enhancing efficiency, easy implementation, quick ROI, and improved network management.
Sentiment score
5.5
Netgate pfSense provides high ROI by reducing hardware and licensing costs, enhancing reliability, and lowering support and maintenance expenses.
Sentiment score
6.0
Sophos UTM users report positive ROI, citing network security, cost savings, and flexible pricing within six to sixteen months.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
If they can save their data from attackers then it would save them at least two days of not working plus the cost of recovery, which would be much more than the cost of the system and maintenance.
CEO at In.sist d.o.o.
Since the memory leak fixes, it's been incredibly stable and requires minimal maintenance.
Network Engineer at a media company with 51-200 employees
In four years of using it, that payment of 189 dollars per year has already paid off.
L2 Systems Administrator at a comms service provider with 201-500 employees
I have seen a return on investment with Sophos UTM, and I can share that the price is around thirty percent better, especially if you count in the employee time.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's customer service is generally praised for responsiveness, though some users experience delays in critical situations.
Sentiment score
7.9
Netgate pfSense users often rely on forums, yet paid support is praised for its responsiveness and problem-solving expertise.
Sentiment score
7.0
Sophos UTM customer service is generally reliable and fast, though experiences vary due to language barriers and responsiveness.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
When I provide detailed information about the problem, they've been able to reply quickly with a solution or go research the problem and get back to us quickly with a fix.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
They are highly responsive.
Network Administrator at a healthcare company with 51-200 employees
I couldn't imagine having better support.
Director of IT at Cutting Edge Hair Salon RSS
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
Associate Director - Management Support Services at CIHP
I would rate the technical support by Sophos a 10.
Network and Infrastructure Manager at Sonysugar
I would rate the technical support with Sophos a seven because sometimes the time of the first resolution is not ideal.
IT Manager at a consultancy with 51-200 employees
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and popular for SMEs but requires careful design and may incur scaling costs and licensing constraints.
Sentiment score
6.5
Netgate pfSense offers exceptional scalability and performance, efficiently managing various environments with seamless hardware integration and virtualization.
Sentiment score
6.8
Sophos UTM offers scalable performance, efficiently supporting various organization sizes with proper sizing, though planning is crucial for upgrades.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
If I put things into a certain context and say that we have a network that has around 100 people, then you don't put up a device that can manage 100 people. Instead, you need to get a device that can manage 150 to 200 people, and then you can create room for growth.
CTO at Vigon Business Solutions Limited
I don't think Netgate pfSense can offer much scalability for big enterprises.
Director at a tech vendor with 5,001-10,000 employees
Even with a jump from a 50 megabit to a 500 megabit internet connection and approximately 65 active VPN clients, our firewall operates smoothly without any strain.
IT Manager at a healthcare company with 11-50 employees
You can have high availability clusters, so very, very scalable in my opinion.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its stability, with effective long-term performance and improvements in newer firmware versions.
Sentiment score
7.0
Netgate pfSense is highly stable and reliable, with user-reported issues typically tied to hardware or outdated versions.
Sentiment score
7.5
Sophos UTM is highly reliable, with users praising its stable performance despite rare concerns about hardware and resource demands.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
I rate the solution's stability a ten out of ten.
Infrastructure and integration Architect at CommunityForce
I've noticed a substantial improvement in stability and ease of use for upgrades and patching over the past year or two.
Technical Sales Specialist at a tech vendor with 10,001+ employees
When I replace consumer routers with pfSense for small businesses with two or three employees, they are often amazed to discover the router can run for a year without a reboot.
Partner and Owner at Free Range Geeks
 

Room For Improvement

Fortinet FortiGate needs enhanced UI, simplified licensing, improved performance, reporting, third-party integration, and expanded automation features.
Netgate pfSense users seek improvements in interface, management, features, reporting, and third-party integration for enhanced usability.
Sophos UTM needs better interface, documentation, threat detection, VPN setup, load balancing, scalability, and enhanced security features.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
There is some trade-off between having a certain level of security and maintaining acceptable performance.
CEO at In.sist d.o.o.
If I need to go between different VLANs, I have VLAN 19.1 and VLAN 19.2, and I strictly use Netgate pfSense, but it doesn't route very efficiently and works quite slowly.
Information Security Manager at a tech services company with 11-50 employees
They should support the idea of configuration management as code from source code and provide a more robust API for managing the pfSense configuration.
Co-Owner at Steffi and Tim
If you want to really implement some rules that are a little bit more difficult, Sophos always recommends getting the dedicated WAF, or web application firewall, but I would prefer to have more features on the web application firewall in the firewall itself because it would make more sense.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
I would prefer to see additional features in the next release of Sophos UTM because cyber crime increases every day, so we also need to improve our game to prevent any chances for intrusion.
Network and Infrastructure Manager at Sonysugar
I would love to see artificial intelligence capabilities integrated into Sophos UTM.
Associate Director - Management Support Services at CIHP
 

Setup Cost

Enterprise buyers find Fortinet FortiGate costly initially, but cheaper overall, despite some high renewal and setup costs.
Netgate pfSense offers enterprises cost-effective, open-source security with free software and optional, competitively-priced support subscriptions.
Sophos UTM provides flexible, cost-effective pricing models, with competitive options and discounts, valued by larger organizations despite higher costs.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The price of setup is approximately €500 to €800, which also includes the initial monitoring.
CEO at In.sist d.o.o.
The product is free of cost.
Director of Information Technology at MASFinancials
Opting for twenty-four-seven support significantly increases the price, reaching around ten thousand to thirteen hundred dollars.
IT Manager at Gandia Consulting Group
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
Associate Director - Management Support Services at CIHP
The value between what I receive and what I pay is the best in the industry.
System Administrator at a training & coaching company with 11-50 employees
The pricing would be more economical if sold directly to the user compared to going through a partner, as they need to take their percentage.
Network and Infrastructure Manager at Sonysugar
 

Valuable Features

Fortinet FortiGate provides robust, flexible security solutions with key features like web filtering, SSL VPN, SD-WAN, and centralized management.
Netgate pfSense is a cost-effective, scalable, customizable firewall offering security, VPNs, traffic management, and strong community support.
Sophos UTM offers robust security with firewalls, VPN, web filtering, scalability, intuitive interface, and integrated management for enhanced protection.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
Head IT at Burraq Cyber Security Solutions
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
With pfSense, network configurations adhere to standard practices, facilitating troubleshooting without the need for complex overlays or policies.
IT Manager at Gandia Consulting Group
The price point is the most valuable aspect of the solution.
Director at InfoVale Ltd.
I like the tool's flexibility in the sense that you do not have to buy an appliance. You can put it on your own hardware, and it can be very simplistic hardware with simple configurations.
Information Security Manager at a tech services company with 11-50 employees
The zero-day protection and firewall rules are some of the most effective features for threat management.
Associate Director - Management Support Services at CIHP
It helps us quite a lot, especially because since we use Sophos UTM, malware intrusions are not rampant.
Network and Infrastructure Manager at Sonysugar
Sophos UTM's valuable features include the cost, which is very competitive when compared with other vendors, balanced with the features that it delivers.
IT Manager at a consultancy with 51-200 employees
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Netgate pfSense
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
220
Ranking in other categories
Firewalls (2nd)
Sophos UTM
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
118
Ranking in other categories
Unified Threat Management (UTM) (5th)
 

Q&A Highlights

it_user1093146 - PeerSpot reviewer
Regional Manager with 11-50 employees
Mar 31, 2020
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
MC
Chief information security officer at Center for Information Management, Inc.
Provides visibility that enables users to make data-driven decisions
pfSense flexibility overall is pretty good. They are making some really big improvements. That said, they're a long way from enterprise. They advertise things that they don't have. I've worked for probably 30% of the Corporate 100, and they won't tolerate the high availability and it being as buggy as it is. The fact that if you configure it incorrectly without any visual indications that it's not done in the way Netscape does, then it will not only break the firewall, it will break both firewalls. The only way you can even try to recover is by getting new images from Netgate. You have to open up a tech support case, download the image for, then reimage the firewalls, and reapply your configuration. The fact that you can completely brick your firewalls just by having a configuration that they allow, and they don't even don't tell you there's a problem until they both go down. That's totally unacceptable in an enterprise. As a standalone firewall, they're excellent. As an enterprise, we're not touching it with a ten-foot pole. It’s difficult to configure and use add-on features. It's really easy to add them. On the website, they say “Oh, we do this, this, and this.” However, they do a lot through third-party add-ons. The problem is, if there's any problems at all, the very first thing they want you to do is disable those add-ons. So that's not really supporting anything. There are two ways that firewalls are viewed: talking to the firewall and talking through the firewall. If you're talking about “to the firewall,” then it's a very robust, very secure firewall. However, it doesn't have things that they claim helps with protecting data, most of it's third party. If you want to do all these things that are typically associated with enterprise-level firewalls, most of them are done by a third party. It's not actually cooked into their product. I like their OSPF. I wish it was more current. The only bugs that are in the OSPF are ones that have been known about for almost two years. Maybe they're they're victims of their own success. Their growth curve has outstripped their technical support and has outstripped their ability to develop. They're just growing so fast. They're trying to do everything. Updates from third parties can take too long. For example, if there's a problem with a package and no available update is available, you have to wait. Since it's via a third party, there's no definable schedule, as the update needs to come from a third-party open organization with no financial interest to make the process faster. Sometimes, there's more finger-pointing than resolution. In, OSPF, they give you lots of information. However, when it comes to hardcore troubleshooting of different routing zones or things like that, then you had to keep dropping down to the CLI in order to get it. And that's where your experience can change quite a bit. If you're running OSPF on Cumulus or some of the other big routing or switching solutions, then they're running much newer versions of it, which are all bug-patched and fixed. However, pfSense is running on an operating system that is not theirs. They don't necessarily have full control over it. When you get a real enterprise firewall, and when you hook up the redundancy, you expect redundancy to work and be predictable. And never ever will the redundancy crash your system. If you don't create the interfaces in the exact same order on both firewalls every single time, if so much as one interface is out of order, if the command line is different because of the way the operating system works, you will slowly corrupt your configuration to the point where it'll break.
Thomas Zimmerman - PeerSpot reviewer
System Engineer SDDC / VCF at a tech services company with 51-200 employees
Integrated firewall and VPN have provided cost savings and strengthened customer security
The needed improvements for Sophos UTM include that the GUI could be a little more high-resolution-aware because it's still stuck in the small, low-resolution admin days, and those are long over. I choose a rating of nine out of ten for Sophos UTM because, as I mentioned, the graphical user interface is stuck in the past, and some things here and there are not implemented to the full, such as the reverse gateway thing, reverse proxy, and web application firewall. If you want to really implement some rules that are a little bit more difficult, Sophos always recommends getting the dedicated WAF, or web application firewall, but I would prefer to have more features on the web application firewall in the firewall itself because it would make more sense. Other than that, it's a very smooth experience, and I really appreciate it.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Answers from the Community

it_user1093146 - PeerSpot reviewer
Regional Manager with 11-50 employees
Mar 31, 2020
Mar 31, 2020
I'd agree with Karl's comment above. PfSense is a great product but treat it like a firewall and the big bonus is it's free. It's great at what it does. Sophos UTM on the other hand can be a beast as it's an all in one solution and can get as complex as you would like it. We have failover clustering, load balancing and make use of all of their proxies. Very easy to make initial configuration er...
2 out of 9 answers
reviewer772704 - PeerSpot reviewer
IT Manager with 51-200 employees
May 16, 2019
I´m afraid I am not able to help in this matter. We´ve decided to for FortiGate as services, based on our relationship with our IT security provider and the FortiGate reviews available on the net. We used to use pfSence for one particular open network but let the full control on de FortiGate. During the investigation and analysis period we thought of Sophos but felt more comfortable going for FortiGate pretty much based on price and our relationship with our IT security provider. Hence my experience wouldn´t help in this case. My best advice would is to refer to the article available on: https://www.itcentralstation.com/products/comparisons/pfsense_vs_sophos-utm
it_user794232 - PeerSpot reviewer
CIO LATAM at i-Track Systems Development, S.A. de C.V.
May 16, 2019
Hello Nick, we are Sophos’ silver partner. Sure we will. When do you need it back? Israel Caravantes. El 16 may 2019, a la(s) 7:22, Nick Regan from IT Central Station > escribió: Hi Israel, Can you help out a colleague with the following question about Sophos UTM: ----- What Is The Biggest Difference Between Sophos and pfSense? I am trying to compare Sophos and pfSense for my company. Which one is best and why? What is the biggest difference between Sophos and pfSense? Thanks for helping me with this important decision. ----- Please reply to this email with your response or post your answer here. User's background: Regional Manager with 11-50 employees You've been a member of IT Central Station since December 2017. In a market full of vendor hype, we provide free connections between real users of Sophos UTM to share advice and make better buying decisions. Thanks for being part of the community. Nick Regan Community Director, IT Central Station IT Central Station 244 Fifth Avenue New York, NY 10001 (646) 328-1944 um-nqn 264744 To change notifications, please visit your subscription page or unsubscribe completely. gitbdelaGVkbHpranQ4TlNueHhtaTIwOWRXdFhDV0xMRGtaNGlxQjRnRmo4dUs5NjlvSmNwSURiZGNrcGxBczBET1h4dS0tTzdTYUFzM291OG9iV1ZpbzZkcENqQT09--1a3146227d771b2ce6a16a5909980aa6859c7a9agitbdel
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
15%
Comms Service Provider
13%
Manufacturing Company
6%
University
6%
Computer Software Company
10%
Manufacturing Company
9%
Comms Service Provider
9%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business168
Midsize Enterprise33
Large Enterprise29
By reviewers
Company SizeCount
Small Business74
Midsize Enterprise28
Large Enterprise25
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
I have no declaration regarding my experience with pricing, setup cost, and licensing for Sophos UTM.
What needs improvement with Sophos UTM?
The needed improvements for Sophos UTM include that the GUI could be a little more high-resolution-aware because it's...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
Astaro
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
One Housing Group
Find out what your peers are saying about Netgate pfSense vs. Sophos UTM and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.