No more typing reviews! Try our Samantha, our new voice AI agent.

Sophos UTM vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.4
Sophos UTM offers quick returns, efficient network management, and cost savings, benefiting managed service providers and ensuring data protection.
Sentiment score
7.0
Trellix Network Detection boosts security efficiency, reducing response times by 30-40% and enhancing threat prevention without extra staff.
I have seen a return on investment with Sophos UTM, and I can share that the price is around thirty percent better, especially if you count in the employee time.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
Investigations are generally faster because analysts have immediate access to relevant network context instead of manually piecing together information from multiple sources.
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
The time was reduced because of the automated detections.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
If a threat can enter any endpoint that is exposed to the internal network, there is a potential gateway for hackers, leading to a loss of production or significant financial impact to the network.
Security Engineer at Digitaltrack
 

Customer Service

Sentiment score
6.5
Sophos UTM's customer service receives mixed reviews for response times but is praised for expertise and community resources.
Sentiment score
7.2
Trellix Network Detection and Response's support is praised for responsiveness, though some users experience delays but remain generally satisfied.
The technical support by Sophos is amazing, especially when I pay for the enhanced support.
Associate Director - Management Support Services at CIHP
I would rate the technical support by Sophos a 10.
Network and Infrastructure Manager at Sonysugar
I would rate the technical support with Sophos a seven because sometimes the time of the first resolution is not ideal.
IT Manager at a consultancy with 51-200 employees
The support team was responsive and knowledgeable.
Business development executive at Digitaltrack solution Pvt Ltd
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Scalability Issues

Sentiment score
5.4
Sophos UTM is highly scalable, supporting growth via licenses, hardware, and clustering, adaptable to varying deployment sizes.
Sentiment score
8.0
Trellix Network Detection and Response offers scalable, adaptable solutions, integrating well despite minor legacy connection issues, maintaining performance.
You can have high availability clusters, so very, very scalable in my opinion.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
The scalability of Trellix Network Detection and Response is easy; I just have to add another license in the same cloud, and I can easily increase the number of endpoints.
Cyber Security Engineer at a retailer with 51-200 employees
Trellix Network Detection and Response has handled that growth while continuing to provide consistency, visibility, threat detection, and investigation capabilities.
Business development executive at Digitaltrack solution Pvt Ltd
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Stability Issues

Sentiment score
7.4
Sophos UTM is praised for stability and reliability, with few issues occurring mainly during updates or resource demands.
Sentiment score
8.0
Trellix Network Detection and Response is reliable and robust, ensuring stability with minimal disruptions and quick issue resolution.
In my day-to-day use, it has consistently provided the visibility and detection capabilities we rely on for security monitoring and investigations.
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
In our experience, it has had a positive impact on our production environment and has proven to be a dependable part of our security operations.
Business development executive at Digitaltrack solution Pvt Ltd
I encounter no issues with health or reliability when the recommended specifications are met.
CyberSecurity Architect at a comms service provider with 51-200 employees
 

Room For Improvement

Sophos UTM needs enhancements in reporting, UI, threat protection, VPN, technical support, scalability, pricing, and configuration simplicity.
Trellix needs better reporting, integrations, UI, user support, and alert management to enhance threat detection and response.
If you want to really implement some rules that are a little bit more difficult, Sophos always recommends getting the dedicated WAF, or web application firewall, but I would prefer to have more features on the web application firewall in the firewall itself because it would make more sense.
System Engineer SDDC / VCF at a tech services company with 51-200 employees
I would prefer to see additional features in the next release of Sophos UTM because cyber crime increases every day, so we also need to improve our game to prevent any chances for intrusion.
Network and Infrastructure Manager at Sonysugar
In Sophos UTM, we could define IP hosts and use this IP host.
CEO at iSource GmbH
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Network & Security Lead at Net-International
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
Presales Manager
 

Setup Cost

Sophos UTM offers flexible pricing with incentives, praised for its features and value despite some regional variances.
Trellix Network Detection pricing is high but justified; straightforward licensing, pricey maintenance, and competitive with Cisco or Palo Alto.
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria.
Associate Director - Management Support Services at CIHP
The value between what I receive and what I pay is the best in the industry.
System Administrator at a training & coaching company with 11-50 employees
The pricing would be more economical if sold directly to the user compared to going through a partner, as they need to take their percentage.
Network and Infrastructure Manager at Sonysugar
Trellix Network Detection and Response is an enterprise-grade security solution, so it represents a significant investment, but we believe that the value it provides in terms of threat detection, network visibility, and incident response justifies the cost.
Business development executive at Digitaltrack solution Pvt Ltd
The pricing model is not transparent, as they do not provide pricing ranges upfront, complicating the evaluation of costs across regions.
CyberSecurity Architect at a comms service provider with 51-200 employees
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
Network & Security Lead at Net-International
 

Valuable Features

Sophos UTM excels in configuration ease, real-time reporting, cost-effectiveness, and flexible security features, benefiting efficient management.
Trellix Network Detection and Response enhances security with real-time threat detection, swift incident response, and seamless tool integration.
The zero-day protection and firewall rules are some of the most effective features for threat management.
Associate Director - Management Support Services at CIHP
It helps us quite a lot, especially because since we use Sophos UTM, malware intrusions are not rampant.
Network and Infrastructure Manager at Sonysugar
Sophos UTM's valuable features include the cost, which is very competitive when compared with other vendors, balanced with the features that it delivers.
IT Manager at a consultancy with 51-200 employees
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Network & Security Lead at Net-International
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
Presales Manager
 

Categories and Ranking

Sophos UTM
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
120
Ranking in other categories
Unified Threat Management (UTM) (5th)
Trellix Network Detection a...
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
53
Ranking in other categories
Advanced Threat Protection (ATP) (6th), Network Detection and Response (NDR) (4th)
 

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. Sophos UTM is designed for Unified Threat Management (UTM) and holds a mindshare of 9.9%, up 7.5% compared to last year.
Trellix Network Detection and Response, on the other hand, focuses on Advanced Threat Protection (ATP), holds 4.1% mindshare, up 4.1% since last year.
Unified Threat Management (UTM) Mindshare Distribution
ProductMindshare (%)
Sophos UTM9.9%
Fortinet FortiGate23.7%
Check Point Quantum Force (NGFW)8.7%
Other57.7%
Unified Threat Management (UTM)
Advanced Threat Protection (ATP) Mindshare Distribution
ProductMindshare (%)
Trellix Network Detection and Response4.1%
Palo Alto Networks WildFire7.1%
Microsoft Defender for Office 3656.4%
Other82.4%
Advanced Threat Protection (ATP)
 

Featured Reviews

HR
CEO at iSource GmbH
Integrated security tools have supported critical infrastructure and improved network performance
Regarding Secureworks Taegis VDR Vulnerability Management, I do not have all these shortcuts in my head. Perhaps I have to ask my technicians, but we are in full stress because we have to change this entire firewall equipment, also the entire access points, because of the end of life. We also have the full product in for XDR and extensions. We are also part of the webinars from Sophos. It would be better if there were also some important webinars in German. Everything needs improvement, because also the wireless, also RED box and so on. The handling was much easier on the old equipment than on the new XGS. I think there should also be a little more automatic for SD-WAN routing and so on. Because we have to learn some things from the basic completely new because it is different than Sophos UTM, the XGS. The features that could be improved about Sophos UTM include the new features we have in XGS with a simpler interface. For example, in Sophos UTM, we could define IP hosts and use this IP host. We did not have to insert on every, for example, for wide area networks, we had to put the IP addresses from the other side by hand. In Sophos UTM, we could define it under definitions and then use this IP host where we needed it. In the new XGS, if there is a change in the IP address, we have to do it on all, for example, site-to-site VPN tunnels and so on. We have much more work and it is not so easy because we have to check all the definitions. It is also, for example, some of the male technicians like me, we have a biology handicap. For example, male technicians in Europe also have a red-green problem. So we use these light colors on the interface. In some cases, it is not easy to see the, for example, letters or numbers because of the contrast.
Twinkle Solanki - PeerSpot reviewer
Business development executive at Digitaltrack solution Pvt Ltd
Continuous network insight has improved early threat detection and streamlined investigations
Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.
report
Use our free recommendation engine to learn which Unified Threat Management (UTM) solutions are best for your needs.
907,372 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Construction Company
12%
Outsourcing Company
9%
Comms Service Provider
9%
Manufacturing Company
9%
Manufacturing Company
16%
Financial Services Firm
12%
Outsourcing Company
12%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise28
Large Enterprise27
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise11
Large Enterprise23
 

Questions from the Community

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite good. The most valuable features for me are their web and email filtering. I wou...
What is your experience regarding pricing and costs for Sophos UTM?
The pricing for Sophos UTM is reasonable; I do not have an issue with it, though I was considering RED because I have different sites I wanted to connect, and instead of doing site-to-site, the RED...
What needs improvement with Sophos UTM?
I would like to improve Sophos UTM in that there is software I use that goes deeper in the reporting on usage. There is software called Fastvue that breaks down everything in the firewall and whate...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is positive, as the setup process was straightforward, licensing was flexible, and the value deliver...
What needs improvement with FireEye Network Security?
Based on my experience with the solution, I do not see any improvements needed for Trellix Network Detection and Response at present; it might be required in the future, but there is no space to im...
What is your primary use case for FireEye Network Security?
Our main use case for Trellix Network Detection and Response is to maintain oversight of our network traffic and catch any threats or unusual activity as early as possible. Trellix Network Detectio...
 

Also Known As

Astaro
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

One Housing Group
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Fortinet, Check Point Software Technologies, WatchGuard and others in Unified Threat Management (UTM). Updated: June 2026.
907,372 professionals have used our research since 2012.