Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks K2-Series vs Sophos UTM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
575
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (2nd), Unified Threat Management (UTM) (1st)
Palo Alto Networks K2-Series
Average Rating
8.4
Reviews Sentiment
7.7
Number of Reviews
34
Ranking in other categories
Firewalls (36th)
Sophos UTM
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Unified Threat Management (UTM) (5th)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Krishnakumar M - PeerSpot reviewer
One of the best tools for the prevention of evasive threats
There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.
Samaila Yusuf - PeerSpot reviewer
Network protection strengthens through effective threat management features and secure access control
The zero-day protection and firewall rules are some of the most effective features for threat management. I can set the rules and features, and also use IPsec to connect all my on-premises servers and link them to Sophos UTM so that they are protected even when in the cloud. Additionally, I use it to control access into the building through a captive portal integrated across all the PCs we have, ensuring secure access only for authenticated users.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of Fortinet FortiGate are the ability to work in proxy mode, which other solutions, such as Palo Alto cannot. There are some features that are better that come at no extra license or subscriptions cost, such as basic SD-WAN. The DLT is useful, other solutions have the same feature too, such as Palo Alto."
"The SD-WAN is the most valuable feature."
"The impact of SD-WAN on the network performance has been significant."
"The ability to set up remote systems is the most valuable feature."
"Fortinet FortiGate is among the best options in the market."
"It has very easy management and an amazing ETM configuration."
"The most valuable feature of Fortinet FortiGate is security. They are known for efficiency and are on the top of Gartner Quadrant reviews. Fortinet FortiGate has an easy-to-use platform with a good graphical interface. The configuration is simple and the solution provides an overall good layer of security."
"The initial setup is very easy."
"The most valuable features are the intuitive user interface, ease of use, and reporting."
"Palo Alto has better and finer controls than, say, Cisco or Check Point."
"Palo Alto has a unique solution for DNS security, which is very good."
"Mainly, it is very easy to understand, and the logs are very good."
"The scalability of the product is quite high."
"This firewall is very good for our customers because they don't have to write their own rules for adding an application."
"Simple integrations with the domain controllers and other inventories"
"The most valuable feature is availability."
"Sophos UTM is the simplest of these products to setup."
"It gives us the ability to manage our firewalls from the cloud and deploy a unified configuration onto them. Other competitors like Meraki have that ability, but they fail to optimize it in the way that Sophos has."
"The initial setup is pretty easy."
"It now controls all the security aspects of our web servers with Sophos UTM WAF.​"
"The technical support by Sophos is amazing, especially when I pay for the enhanced support."
"The most valuable feature is ransomware protection."
"An easy solution to learn because the graphics are very intuitive."
"I have no problem with the cost or licensing of this solution. This is a primary reason whay I wanted this solution. It does the same thing cheaper than other name brands."
 

Cons

"Fortinet FortiGate can improve performance. There was a huge challenge in terms of CPU and memory where the IPS engine would keep triggering. There were random spikes of overutilization in the CPU and memory resources. They have to work on CPU and memory stability considering these IPS engines. A few versions were very unstable."
"We have experienced a number of failures when trying to upgrade firmware and the process takes a long time. We only experienced this when doing major upgrades between versions."
"At the moment, the main concern is the pricing and the type of licensing. Fortinet offers different types of licensing, and my idea is that the best approach is to have only one, two, or a maximum of three types of licensing."
"The support from Fortinet FortiGate could improve. They are not easily accessible when we need them. They could improve their response time."
"Fortinet FortiGate could improve by adding FortiAnalyzer to its solution, we should not have to use another solution. FortiAnalyzer can provide more detailed information."
"Vulnerabilities owing to viruses in the OS need to be reduced in FortiGate Next Generation Firewall from an improvement perspective."
"One area for improvement is the IPS engine."
"The support costs and licensing are sometimes so expensive."
"The graphical user interface is a little complex and difficult to manage. L1 engineers cannot work on the Palo Alto Networks K2-Series because it's too complex, which requires L2 and above level of engineers."
"It is recommended that the Palo Alto Networks K2-Series be implemented step by step for the Panorama. Sometimes we can't overwrite the configurations because it fails."
"We had some issues with upgrading in the past. They could make the process easier."
"I cannot think of anything specific to improve at the moment."
"They should implement the features that the other firewalls have."
"Palo Alto doesn't have extended visibility to the end point in their firewalls."
"When it comes to renewing the solution, they tend to try to jack up the pricing."
"The URL Filtering module needs to have more categories added to it."
"The solution is not scalable."
"The solution needs to do better at covering mobile devices, although they may have an integrated solution for that purpose."
"Sophos UTM could be simplified, and they can improve on the many other features, like SD-WAN and load balancing. Sophos UTM is missing a few features that their competitors have. For example, if you have multiple branches you would like to connect, the load balancing features aren't available on multilink. If we create a VPM for multiple LAN links, we cannot load balance the traffic."
"The reporting could be a lot better."
"Sophos UTM sometimes falls short in high-availability environments. They used to launch firmware that didn't work very well in a high-availability environment."
"Enhancing the user interface to achieve the same level of flexibility as the older UTM interface could improve the product."
"Flexibility in pricing could be improved. It's more rigid in its pricing compared to its competitor: Kaspersky."
"During initial configuration, I encountered a few issues."
 

Pricing and Cost Advice

"The license of Fortinet FortiGate should be reduced."
"It is around $50,000 per month."
"The tool's pricing is neither cheap nor expensive. Overall, I find it to be competitive in the market."
"It's very competitive."
"There is an annual license to use this solution. The prices have been increasing over the years."
"It is an expensive solution."
"Fortinet FortiGate IPS' licensing is quite simple to understand."
"It's not the cheapest, but it's value for money. Given everything we've got out of it: the DMZ port, the VPN, and the high availability, it's a pretty reasonable price."
"The price of the solution is expensive."
"When comparing Palo Alto Networks K2-Series with other solutions it is on the higher end of the price scale."
"Palo Alto firewalls are very expensive."
"We are on an annual license to use Palo Alto Networks K2-Series."
"The price of this solution is too high."
"If you compare K2-Series' quality with its price, I think it is reasonable."
"Products by the leader in the field are justifiably a bit more expensive compared to other vendors."
"It is an expensive solution."
"We pay for the service on a yearly basis. The last time we paid was in June, for a year. At the time, it was about $20,000."
"The solution's pricing is based on a licensing model and is competitive."
"Sophos UTM is moderately priced, but it could be improved."
"Our licensing fees are paid on a monthly basis."
"Sophos UTM has very reasonable pricing."
"I would recommend to follow Sophos’ sizing guidelines for choosing which license and model to use. Sophos has their own way of going about this and supplies partners with all the information required. If you follow their documentation and guidelines, there should be zero questions about licensing and sizing."
"The problem with the Sophos is not the cost of the hardware but the cost of the modules, packages, and the subscription."
"The biggest issue with Sophos is the pricing. It's definitely more expensive. As I said, we looked at Webroot, which is a big alternative, and Sophos was almost three times the price of Webroot. That's a pretty big difference."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Performing Arts
24%
Computer Software Company
16%
Manufacturing Company
9%
Comms Service Provider
6%
Computer Software Company
13%
Comms Service Provider
9%
Manufacturing Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business350
Midsize Enterprise130
Large Enterprise187
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise8
Large Enterprise13
By reviewers
Company SizeCount
Small Business71
Midsize Enterprise27
Large Enterprise26
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
What is your experience regarding pricing and costs for Palo Alto Networks K2-Series?
The pricing for the Palo Alto Networks K2-Series solution is affordable and there are no complaints about the licensing.
What needs improvement with Palo Alto Networks K2-Series?
The graphical user interface is a little complex and difficult to manage. L1 engineers cannot work on the Palo Alto N...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
The value between what I receive and what I pay is the best in the industry.
What needs improvement with Sophos UTM?
For the challenges I've faced, zero trust is one area where I haven't worked much or have sufficient experience.
 

Also Known As

No data available
No data available
Astaro
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME
One Housing Group
Find out what your peers are saying about Palo Alto Networks K2-Series vs. Sophos UTM and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.