Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks PA-Series vs Sophos XGS comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.5
Fortinet FortiGate is valued for affordability, cost savings, enhanced security, operational efficiency, quick implementation, and long-term ROI benefits.
Sentiment score
7.5
Palo Alto Networks PA-Series offers comprehensive security management and cost efficiency, with issues only in the PA-800 model.
Sentiment score
2.5
Sophos XGS offers valuable ransomware protection for small businesses, reducing operational costs despite higher licensing fees.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
The costs have increased with Sophos XGS in the last few years, with license prices going up by 30%, doubling from $2,500 to about $5,000, which is a big challenge for us.
 

Customer Service

Sentiment score
7.0
Fortinet FortiGate's customer service varies, with praise for responsiveness but criticism for slow, sometimes inadequate technical support.
Sentiment score
6.5
Palo Alto Networks PA-Series support is praised for helpfulness and accessibility, though initial response times could improve.
Sentiment score
6.9
Sophos XGS customer service varies, praised for responsiveness but criticized for slow responses and expertise in initial support stages.
I would rate their support for FortiGate a nine out of ten.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
Initially, it took one or two hours to get a Palo Alto engineer, which is quite slow.
Any issues are quickly addressed by their support team, which is not common among all OEM manufacturers.
The technical support of Sophos rates at 10.
The response time from Sophos technical support can be slow in most cases, which can be challenging.
 

Scalability Issues

Sentiment score
7.3
Fortinet FortiGate scales well for diverse enterprises, though planning and licensing are crucial to avoid hardware limitations.
Sentiment score
7.2
Palo Alto Networks PA-Series excels in scalability, handling thousands of connections, suited for large enterprises, often highly rated.
Sentiment score
7.0
Sophos XGS is versatile for various environments, but some hardware limitations exist, suitable for small to medium enterprises.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
The solution can handle more than ten thousand users in my organization.
I can change what I want easily without interfering with other services or routines.
I would rate its scalability seven out of ten since modules can be added.
 

Stability Issues

Sentiment score
7.9
Fortinet FortiGate is generally stable and reliable, with minor issues arising from new features, firmware updates, or hardware constraints.
Sentiment score
8.5
Palo Alto Networks PA-Series is stable and reliable, with minor glitches; users favor stable OS versions over new releases.
Sentiment score
7.6
Sophos XGS is praised for stability and reliability, with high ratings despite occasional performance drops when capacity limits are exceeded.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
We have not had any problems with the operating systems or maintenance of subscriptions.
It is rated at nine out of ten for stability and is very reliable.
Sophos XGS is stable now, and I would rate its stability as a ten out of ten.
When Sophos introduced firmware version twenty, there was a bug in DCC.
 

Room For Improvement

Fortinet FortiGate needs enhancements in firmware, usability, integration, support, reporting, VPN, cloud integration, and documentation for seamless use.
Palo Alto Networks PA-Series requires improved security features, user interface, and support to better protect remote work environments.
Sophos XGS requires improved integration, scalability, and support, while addressing high costs and complex configurations for better user experience.
By providing an integrated solution, users would have access to all features and functionalities within a single window, eliminating the need to navigate through multiple windows.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
The constant daily revisions necessitate meticulous identification of the relevant documents to prevent the use of outdated information that could jeopardize our environment.
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
It would be beneficial if Sophos XGS offered an end-to-end solution with competitive pricing.
The DDNS features are essential for any organization, as it is better not to have a static IP address from an ISP.
After version 18.5, creating a NAT rule has become more complex, requiring the creation of a separate policy and an additional component.
 

Setup Cost

Fortinet FortiGate offers competitive pricing with upfront affordability, simple licensing, and long-term value, despite potentially high renewal costs.
Palo Alto Networks PA-Series offers robust features and strong security, though it's priced higher than competitors like Fortinet and Cisco.
Sophos XGS offers flexible pricing with competitive discounts, balancing cost-effectiveness and functionality compared to rivals like Fortinet and Palo Alto.
The most expensive part is the renewal of the license subscription.
FortiGate is priced lower than Palo Alto.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
The firewall is expensive for every company, but the cost is worth it to ensure maximum security.
The price of Palo Alto Networks PA-Series is expensive.
The last instance I purchased was for three years, around $3,700 for SDG 125.
pricing is rated eight out of ten, indicating that it may be relatively expensive.
Sophos XGS is quite expensive, potentially a nine out of ten in terms of cost.
 

Valuable Features

Fortinet FortiGate delivers robust security features and intuitive management, offering scalable and affordable network protection solutions.
The Palo Alto Networks PA-Series offers stability, strong security features, ease of management, and effective integration capabilities for enhanced utility.
Sophos XGS provides centralized management, strong security features, and scalability, ensuring efficient and cost-effective network control across industries.
The firewall, IPS, and VPN functions are the most valuable features.
FortiGate provides solid protection against viruses, malware, and other threats.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges.
The most valuable feature of Palo Alto Networks PA-Series is that it is highly customizable.
It's able to detect cloud applications like Zoom or Microsoft Teams and allows traffic shaping based on the application.
I find it much easier than others, like FortiGate, which is complicated in its installation, but Sophos XGS is really easy.
The threat detection capabilities are effective, especially against CNC and certain viruses not coming through emails.
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
357
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Palo Alto Networks PA-Series
Ranking in Firewalls
14th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Sophos XGS
Ranking in Firewalls
11th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
84
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.4%, up from 17.8% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 0.6%, up from 0.1% compared to the previous year. The mindshare of Sophos XGS is 2.5%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Jorge Martínez - PeerSpot reviewer
Offers good SD-WAN capabilities and integrates easily with Fortinet devices
I am not part of the initial setup or deployment process since I work in presales. The setup or deployment is quite easy, as you can do a one-touch deployment that automatically connects to the FortiManager cloud when you connect it to a broadband or dynamic IP, allowing you to start the configuration from that point. We usually sell it for on-premises setups. It's on the cloud only when the client has virtual machines or their own service. Sometimes they have a service on the cloud like AWS, but it's more difficult to sell now because AWS has an e-commerce option where you can buy FortiGate directly. The only thing you need is someone to manage and configure.
Deminda Dilan - PeerSpot reviewer
Good for enterprise-level businesses and offers many features like URL filtering and antivirus capabilities
Palo Alto can improve the web application firewall (WAF) feature at layer 7. Currently, I don't think it's available. If they can improve that, it would be better. We wouldn't need to purchase a separate WAF solution because they already have advanced URL filtering. But I don't think that advanced URL filtering has the same features as a dedicated WAF, like F5 or other solutions. That is an area for improvement. If they can improve the WAF feature, customers won't have to buy a separate WAF solution. They could do it with the same Palo Alto firewall, perhaps through a subscription-based model. So the web application firewall feature has to be improved.
Nassif  Kaleny - PeerSpot reviewer
Dynamic web and mail filtering contribute to improved security measures
The reporting system is very poor. I cannot trace any traffic to our site if it feels some threats. It just tells me that there is something during a certain time but does not provide information about the type of threats or how to get rid of them. This needs improvement.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
15%
Computer Software Company
15%
Comms Service Provider
8%
Manufacturing Company
6%
Computer Software Company
16%
Manufacturing Company
12%
Comms Service Provider
9%
University
8%
Computer Software Company
13%
Manufacturing Company
9%
Comms Service Provider
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Palo Alto Networks PA-Series?
The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to...
What needs improvement with Palo Alto Networks PA-Series?
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
What do you like most about Sophos XGS?
The policies are the greatest feature. They allow us to configure granular control over our network traffic.
What is your experience regarding pricing and costs for Sophos XGS?
I am satisfied with the price, rating it a nine. There are no extra expenses required after buying the product.
What needs improvement with Sophos XGS?
There is room for improvement in Sophos XGS, specifically in three areas: slowness, centralized synchronization, and ...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Information Not Available
Information Not Available
Find out what your peers are saying about Palo Alto Networks PA-Series vs. Sophos XGS and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.