Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks WildFire vs Sophos UTM vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.5
Palo Alto Networks WildFire efficiently prevents threats, reduces costs significantly, and integrates seamlessly for comprehensive real-time security.
Sentiment score
6.9
Sophos UTM offers competitive pricing and extensive security coverage, leading to swift ROI and improved network management efficiency.
Sentiment score
8.5
Trellix Network Detection and Response exceeded expectations by improving threat prevention and detection, boosting productivity and reducing response times.
The service generates a low rate of false positives, reducing the overhead of managing false positive events.
 

Customer Service

Sentiment score
7.3
Palo Alto Networks WildFire support excels for large companies, with varied quality and responsiveness for others, depending on region.
Sentiment score
6.9
Sophos UTM is praised for responsive, knowledgeable support, despite occasional complaints, earning high marks for customer service.
Sentiment score
6.8
Trellix's support is praised for responsiveness, but improvements in expertise and incident response promptness are suggested by some.
There is a lack of SLA adherence, and third-party partners do not provide prompt responses.
The support is quite difficult to access promptly.
The service response times are aligned with standards, responding within a few hours based on the problem's criticality.
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
 

Scalability Issues

Sentiment score
8.2
Palo Alto Networks WildFire excels in adaptability, scalability, and seamless integration, meeting diverse organizational demands and high-performance standards.
Sentiment score
8.5
Sophos UTM scales well with proper sizing, enabling easy expansion in various environments from small setups to large networks.
Sentiment score
7.8
Trellix Network Detection and Response scales effectively in various industries, performing well in large enterprises without latency issues.
Wildfire is highly scalable.
Palo Alto Networks WildFire is scalable, and I give it a nine for scalability.
 

Stability Issues

Sentiment score
8.4
Palo Alto Networks WildFire is highly reliable, stable, and efficient, excelling in large-scale deployments and seamless cloud integration.
Sentiment score
8.3
Sophos UTM is stable and reliable, with minimal issues, though updates can occasionally cause temporary problems.
Sentiment score
7.7
Trellix Network Detection and Response is stable and reliable, with consistent performance and high user satisfaction despite occasional minor issues.
 

Room For Improvement

Palo Alto Networks WildFire needs improvements in cost, user interface, ease of deployment, integration, detection capabilities, and support efficiency.
Sophos UTM users seek improved scalability, performance, VPN capabilities, interface usability, cost transparency, support, and simplified management features.
Trellix Network Detection needs improved customization, integration, AI capabilities, support services, and a more user-friendly interface at reduced pricing.
The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings.
The support could be improved, as it takes a while to get assistance from the vendors.
With artificial intelligence, there is room for improvement in all antivirus and security software.
I would love to see artificial intelligence capabilities integrated into Sophos UTM.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
 

Setup Cost

Palo Alto Networks WildFire is valued for advanced security despite high costs, preferred by enterprises but challenging for smaller firms.
Sophos UTM offers competitive pricing with varied licensing options, though some users find it costly compared to alternatives.
Trellix Network Detection is costly but effective, with yearly licensing, discounts, and competitive pricing against some competitors like Palo Alto.
I would rate it an eight out of ten in terms of affordability.
The value between what I receive and what I pay is the best in the industry.
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
 

Valuable Features

WildFire offers sandboxing, App-ID, and automation, excelling in threat detection with real-time updates and seamless integration.
Sophos UTM provides scalable security with web protection, VPN, centralized management, and integration, suitable for all business sizes.
Trellix excels in threat protection with AI-driven analysis, automation, and enhanced visibility, benefiting security operations and incident management.
Integrating Palo Alto Networks WildFire with various security protocols similar to a firewall has significantly improved the overall threat detection capabilities in our organization.
The most valuable feature of Wildfire is its sandboxing capability for examining suspicious files or locations.
The zero-day protection and firewall rules are some of the most effective features for threat management.
This integration of the antivirus and the firewall works together to enhance security.
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
 

Mindshare comparison

Advanced Threat Protection (ATP)
Unified Threat Management (UTM)
Advanced Threat Protection (ATP)
 

Featured Reviews

AjayKumar17 - PeerSpot reviewer
Enhanced cybersecurity with advanced sandboxing and effective in controlling DNS issues
Improvements are needed in the UI part. The dashboard should provide better visibility, especially in showing how many files are sent to Wildfire and their findings. This information should be integrated with the Dashboard so that system admins can see what is happening. Furthermore, technical support needs a lot of improvement, particularly in terms of responsiveness and adhering to service level agreements.
Samaila Yusuf - PeerSpot reviewer
Network protection strengthens through effective threat management features and secure access control
The zero-day protection and firewall rules are some of the most effective features for threat management. I can set the rules and features, and also use IPsec to connect all my on-premises servers and link them to Sophos UTM so that they are protected even when in the cloud. Additionally, I use it to control access into the building through a captive portal integrated across all the PCs we have, ensuring secure access only for authenticated users.
BiswabhanuPanda - PeerSpot reviewer
Offers in-depth investigation capabilities, integrates well and smoothly transitioned from a lower-capacity appliance to a higher one
The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
861,803 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
9%
Government
8%
Computer Software Company
17%
Comms Service Provider
8%
Manufacturing Company
7%
Government
7%
Financial Services Firm
13%
Comms Service Provider
12%
Computer Software Company
10%
Government
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Cisco Firepower NGFW Firewall compare with Palo Alto Networks Wildfire?
The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one conside...
Which is better - Wildfire or FortiGate?
FortiGate has a lot going for it and I consider it to be the best, most user-friendly firewall out there. What I like...
How does Cisco ASA Firewall compare with Palo Alto's WildFire?
When looking to change our ASA Firewall, we looked into Palo Alto’s WildFire. It works especially in preventing advan...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
The value between what I receive and what I pay is the best in the industry.
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. Wi...
What is your experience regarding pricing and costs for FireEye Network Security?
While I do not handle pricing directly, it is known that there is a variety of customers with different licensing nee...
What needs improvement with FireEye Network Security?
The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would...
 

Also Known As

No data available
Astaro
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Novamedia, Nexon Asia Pacific, Lenovo, Samsonite, IOOF, Sinogrid, SanDisk Corporation
One Housing Group
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Palo Alto Networks, Microsoft, Fortinet and others in Advanced Threat Protection (ATP). Updated: July 2025.
861,803 professionals have used our research since 2012.