Palo Alto Networks NG Firewalls vs Sophos XG comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 10, 2022
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
314
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (2nd), WAN Edge (1st)
Palo Alto Networks NG Firew...
Ranking in Firewalls
5th
Average Rating
8.6
Number of Reviews
165
Ranking in other categories
No ranking in other categories
Sophos XG
Ranking in Firewalls
7th
Average Rating
8.2
Number of Reviews
194
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 22.6%, up from 18.8% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 2.1%, down from 3.3% compared to the previous year. The mindshare of Sophos XG is 13.3%, up from 9.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
Unique Categories:
Software Defined WAN (SD-WAN) Solutions
19.7%
WAN Edge
21.4%
No other categories found
No other categories found
 

Q&A Highlights

NC
Nov 17, 2021
 

Featured Reviews

William Nogueira - PeerSpot reviewer
Dec 11, 2023
Helps reduce our mean time to remediate and our security risk, and provides good visibility into our environment
While FortiGate offers a wide range of security features, I sometimes feel that the platform could benefit from more extensive improvements. Given the multitude of functions it provides, I wonder if the developers have enough time to adequately refine each aspect. However, for our specific needs, FortiGate currently performs adequately. The debugging and troubleshooting has room for improvement. I would like to see greater integration with third-party solutions. For instance, one example would be integrating Endpoint Protection with FortiGate, such that if an issue arises with Endpoint Protection, an action could be automatically triggered on FortiGate. I am concerned about Fortinet's ability to help us meet regulatory compliance because its optimal functionality requires deploying all solutions within the mesh as Fortinet products. This raises questions about the compatibility and integration of non-Fortinet technologies within the Fortinet Security Fabric.
MC
Apr 28, 2023
Enables us to secure environments that may pose more significant security challenges
The centralization capability is the most valuable feature of this solution as it enables us to monitor our systems efficiently. Additionally, the firewalls are excellent, with straightforward configuration and comprehensible interfaces that our engineers can set up with ease. The cloud firewall solution offers a unified platform that integrates social security capabilities, but it comes at an additional cost. I think having the ability to see the big picture is important for us, and that's not always easy to achieve. As for how important it is for us to have Palo Alto NG Firewalls and defense machine learning at the core of the firewall for real-time attack prevention, I think it's a bit premature to say. There are many players in that field currently, and I would prefer to see them get it right before jumping in just for the sake of being there.
BO
Dec 4, 2023
Crucial for safeguarding data, enforcing user access controls, and ensuring secure communication
I use Sophos XG for network security and VPN policies. It is crucial for safeguarding data, enforcing user access controls, and ensuring secure communication. The firewall features, like application control and intrusion prevention, provide a strong defense against cyber threats. With centralized…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"FortiGate has a very strong unified threat management system."
"We use a southern institution that's audited for IT security and the reporting that automatically comes off the unit makes it much easier to meet compliance standards and makes it easier as far as the amount of time that has to be spent to compile that information. If you get your reporting set up correctly when you initially set it up, you just select the one you want and hit print. The auditing trail on it is the best feature."
"Consolidated our network environment at all locations, but mainly at our datacenter."
"With FortiClient, you can easily connect when you are home, check out what you want to do, and connect to your network when you are not at work. You can switch on servers and you can check what is wrong."
"The dashboard I have found the most valuable in Fortinet FortiGate."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"Web filtering and two-factor authentication are great features."
"LinkGreat firewall capabilities"
"IoT security is most valuable in the current version. Content IDs, DDoS protection, zone protection, and DLP are the most prominent features in Palo Alto Networks NG Firewall. It is easier to configure than other solutions."
"Palo Alto Networks NG Firewalls' IPS is more complete and is very good. This is a user-friendly solution that is easy to install, and it provides the best protection."
"In general, I appreciate the regular firewall function of Palo Alto Networks NG Firewalls."
"One of the best firewalls on the market."
"You can easily integrate it with Active Directory, and you can use the GlobalProtect VPN for internal and external purposes. The URL Filtering is also clear and the application filtering is a plus. The application filtering is much better when you compare it to FortiGate or other firewall vendors."
"Comments have some delay, but overall, it's a good product."
"The fact that the Next-Gen firewalls are integrated with identity is the best. It gives us the ability to track what an individual is doing and helps us provide access to only what they need in order to do their job."
"Some of the valuable features in this solution are traffic monitoring, GUI functionality, and it very easy to troubleshoot if there is any problem that happens."
"The most valuable feature, according to the setup we have at our work place here, is the flexibility of the system or the firmware that's running the appliance. It's so flexible, performing multiple rules with different configurations. According to the set up here, we need to implement several firewalls with different access levels, because we have a variety of users. For this requirement, it's very flexible and very easy to use."
"We find it easy to use. Its internal configuration is very easy. It is not complicated in terms of use and configuration. It has been fairly stable, and it is also scalable."
"The two most valuable feature of Sophos XG is, one the option to filter according to different applications and two, the integration with the Active Directory."
"So far, I'm happy that they have recently added a firewall role, so I feel a little more comfortable with the security. The threat management is good."
"Because of the pandemic, the VPN is the most valuable feature."
"We can configure rules with the user, traffic, etc., making it a very versatile solution for our network."
"Sophos XG's price is right, and it's easy to manage. It's a good fit for our current needs at the moment."
"The stability of Sophos XG is very good. However, there have been some issues with other weaker models because they are limited in hardware in resources."
 

Cons

"The non-error conserve mode has room for improvement."
"We would like to have the ability to disable some of the security functionalities."
"Some of the software stability could improve."
"​It needs to improve its ISP load balancing.​"
"There are problems with the custom reporting of the unique traffic. The data is there, but it is too difficult for us to extract."
"It is stable, but its stability can be improved."
"Fortinet FortiGate can improve the integration with Active Directory. Additionally, I would like to have a Cloud Controller, such as they do in the Cisco Meraki solution."
"This product could be improved with Active directory integration and better handling in IPsec and GRE Tunnels."
"People sometimes find it more expensive as compared to other solutions. There are also fewer training opportunities for Palo Alto than Cisco and other vendors."
"I would like to see more integration."
"If you enable SSL you will face a problem. The throughput of the firewall will be degraded. SSL is a big issue on all firewalls. All products suffer from issues with SSL, but Palo Alto firewalls suffer more from it."
"I would like to see better integration with IoT technologies."
"The solution could be more cost-effective."
"Customers don't want to buy extra things for extra capabilities"
"I would like them to bring in some features that would encourage traffic shaping or bandwidth routing, like other UTM firewalls, because the solution should be capable of limiting the bandwidth for rules."
"We would like to see improvement in the web interface for this solution, so that it can handle updates without manual intervention to put the data in order."
"The solution could improve by having better security."
"It could offer a DNS Filter for blocking botnet networks."
"In the next release, I would like to see improvements to simplify the interface and more policy deployments."
"In the Firewall, the Intrusion Prevention System can be improved."
"Sophos XG does not have the ability to disconnect a user."
"We are having challenges when using Zoom with Sophos XG deployed."
"We are facing some technical issues with Sophos XG right now. We have already escalated this issue with the Sophos technical support. They seem to be working on it. We are satisfied with the technical support. They reply quickly to our queries, but sometimes take time upgrading their systems."
"The support engineers of the product are not very tech-savvy, making it an area where improvements are required."
 

Pricing and Cost Advice

"We are on an annual license to use Fortinet FortiGate."
"The pricing of the solution is very competitive."
"It is quite affordable for our customers. There is a separate cost for IPS, antivirus, web filtering, and other features. They have a great choice of licenses. You can go for the license that you want, which is quite useful."
"They need to be competitive with other solutions."
"The price of Fortinet FortiGate is reasonable for an SME."
"If you purchase a one-year subscription with the hardware and then you want to renew for the second year, it is very costly."
"The product pricing is reasonable."
"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."
"It's very expensive. However, we usually use all of the subscriptions and threat alerts on any firewall that uses the internet. For each edge security endpoint, we use all subscriptions. Otherwise, we just utilize the threat alert, the antivirus, WildFire, etc."
"We haven't had a problem with pricing or licensing because we consolidated other software to make Palo Alto more affordable."
"Its price is higher than other vendors. They need to re-think its pricing. With Fortinet, the SD-WAN feature is totally free, whereas, with Palo Alto, I need to pay for this feature. With Fortinet, there is one licensing, and I can get many things, whereas, with Palo Alto, I need to go for individual licensing."
"The licensing leaves a lot to be desired. We buy the license and then we can't transfer the license without paying an exorbitant fee to our client if they leave us, and that just seems to be a bit of a pain point for us, and there's really no way to partner effectively to make that more reasonable."
"The cost is steep, but most firewalls cost a lot."
"Its price can be better. Licensing is on a yearly basis."
"We are on an annual license for this solution. I am happy with the price and when comparing it to other solutions it is priced competitively."
"Licensing is a big issue for us because of the complexity and the lack of engagement from Palo Alto. It has been hard to talk with them as we don't get the best answers."
"Annual standard licensing fee."
"We generally buy it for a three-year license."
"I paid approximately 57,000 Rupees ($750 USD) for three years."
"The pricing was reasonable."
"The price of Sophos in PTR is significantly higher compared to Fortinet."
"Licensing fees are paid on a yearly basis."
"The tool's pricing is cheaper compared to other alternative products."
"The price is fair."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
793,295 professionals have used our research since 2012.
 

Answers from the Community

NC
Nov 17, 2021
Nov 17, 2021
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat signatures and updates. I also appreciate that I can just import addresses and URL objects from the external server. Palo Alto has a dedicated management interface, which makes it easy to manage the device and handle the initial configuration. It has fantastic throughput and its co...
See 2 answers
CL
Oct 19, 2021
As a Sophos specialist, I can tell you that XG Firewall will cover all that you'll need with a more affordable way.Sophos XG firewall will not disappoint you with its performance, resources or features.
Janet Staver - PeerSpot reviewer
Nov 17, 2021
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat signatures and updates. I also appreciate that I can just import addresses and URL objects from the external server. Palo Alto has a dedicated management interface, which makes it easy to manage the device and handle the initial configuration. It has fantastic throughput and its connection speed is pretty fair, even when dealing with a high traffic load. With Palo Alto I can configure and manage with REST API integration. And Palo Alto provides deep visibility into your network activity via Application and Command Control. Although Palo Alto has great things going for it, there are a few things I dislike about it. For example, when the CPU is 100%, the GUI can take a very long time to respond. Booting time is also time-consuming, and committing the configuration takes more time than I would like it to. Like Palo Alto, Sophos XG is quick and easy to configure. It is compact in size, and therefore does not weigh a lot either. Similar to Palo Alto as well, it can handle heavy traffic and has a solid performance. A good thing about Sophos XG is that it supports IPsec connection with multiple vendor firewalls. However, I am not impressed with the CLI which is not so useful, and I don’t like that there is no option to import bulk address objects. Conclusion: Palo Alto Networks NG Firewalls and Sophos XG are both good products. However, Palo Alto has certain features I really like and that’s why I chose it. For me, Palo Alto’s dynamic address group option is a big advantage because it is a huge time saver instead of having to create address groups manually. Another biggie for me was its DNS Sinkhole feature because it is something I rely on a lot and it is very effective in blocking C2 command control traffic.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
15%
Manufacturing Company
6%
Comms Service Provider
6%
Computer Software Company
17%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
Computer Software Company
17%
Comms Service Provider
7%
Manufacturing Company
7%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
What are the main differences in features between Sophos XG and FortiGate 80F?
Hi Arvind P , The Sophos XG firewall has a number of models right from XG86 to XG135w under the 1U Desktop Form Fact...
What Is The Biggest Difference Between Sophos UTM and Sophos XG?
The Sophos UTM is a UTM and Sophos XG is the NGFW. First, you must know about the difference between a UTM and NGFW. ...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
No data available
 

Overview

 

Sample Customers

1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
Information Not Available
Find out what your peers are saying about Palo Alto Networks NG Firewalls vs. Sophos XG and other solutions. Updated: July 2024.
793,295 professionals have used our research since 2012.