

Find out what your peers are saying about Fortinet, Check Point Software Technologies, WatchGuard and others in Unified Threat Management (UTM).
I have seen a return on investment with Sophos UTM, and I can share that the price is around thirty percent better, especially if you count in the employee time.
The time was reduced because of the automated detections.
It has saved us money and time, and the overall investment has been profitable.
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
I would rate the technical support by Sophos a 10.
I would rate the technical support with Sophos a seven because sometimes the time of the first resolution is not ideal.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
They help and support us promptly, allowing us to resolve issues immediately.
You can have high availability clusters, so very, very scalable in my opinion.
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Trellix Network Detection and Response is scalable.
Trellix Network Detection and Response is designed to scale based on our workloads, and it performs well when we scale.
Trellix Network Detection and Response is somewhat stable but there is a bit of downtime sometimes during the off-hours.
If you want to really implement some rules that are a little bit more difficult, Sophos always recommends getting the dedicated WAF, or web application firewall, but I would prefer to have more features on the web application firewall in the firewall itself because it would make more sense.
I would prefer to see additional features in the next release of Sophos UTM because cyber crime increases every day, so we also need to improve our game to prevent any chances for intrusion.
It would make my work much simpler because it makes decision-making much easier.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
The value between what I receive and what I pay is the best in the industry.
The pricing would be more economical if sold directly to the user compared to going through a partner, as they need to take their percentage.
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
The price for Trellix Network Detection and Response is reasonable.
I am sure the ROI was definitely fine for this because we were using this tool for three years.
The zero-day protection and firewall rules are some of the most effective features for threat management.
It helps us quite a lot, especially because since we use Sophos UTM, malware intrusions are not rampant.
Sophos UTM's valuable features include the cost, which is very competitive when compared with other vendors, balanced with the features that it delivers.
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
| Product | Mindshare (%) |
|---|---|
| Sophos UTM | 9.4% |
| Fortinet FortiGate | 26.6% |
| Check Point Quantum Force (NGFW) | 8.5% |
| Other | 55.5% |
| Product | Mindshare (%) |
|---|---|
| Trellix Network Detection and Response | 4.1% |
| Palo Alto Networks WildFire | 7.4% |
| Microsoft Defender for Office 365 | 6.7% |
| Other | 81.8% |


| Company Size | Count |
|---|---|
| Small Business | 75 |
| Midsize Enterprise | 28 |
| Large Enterprise | 27 |
| Company Size | Count |
|---|---|
| Small Business | 22 |
| Midsize Enterprise | 8 |
| Large Enterprise | 21 |
Sophos UTM delivers comprehensive network security with features like firewall, intrusion prevention, and endpoint protection. Its user-friendly interface and scalable options make it ideal for businesses of varying sizes, ensuring seamless integration with AWS, cloud services, and other Sophos offerings.
With robust Advanced Threat Protection, Sophos UTM offers a holistic approach to security through its intuitive platform. It includes a centralized console for enhanced threat visibility, integrated web application firewall, and secure remote access via SSL VPN and RED device. Critiques focus on limited reporting capabilities, complex licensing, and requiring improvements in VPN and email protection, centralized management, and application control.
What are the key features of Sophos UTM?Sophos UTM sees implementations in industries needing strong perimeter protection and secure remote access, such as finance, healthcare, and education. It supports seamless network integration, ensuring businesses maintain compliance and safeguard their digital environments effectively.
Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.
Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.
What key features does Trellix offer?Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.
We monitor all Unified Threat Management (UTM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.