Sophos XGS vs Zscaler Cloud Firewall comparison

Sophos and Zscaler are both solutions in the Firewalls category. Sophos is ranked #10 with an average rating of 8.6, while Zscaler is ranked #24 with an average rating of 8.3. Sophos holds a 2.4% mindshare in Firewalls, compared to Zscaler’s 0.4% mindshare. Additionally, 94% of Sophos users are willing to recommend the solution, compared to 92% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Zscaler Cloud Firewall and Sophos XGS Firewall are two prominent players in network security. Zscaler's cloud-native approach and pricing are appreciated, but Sophos XGS offers superior features and value.

Features: Zscaler Cloud Firewall has seamless cloud integration, robust threat detection, and a cloud-first design. Sophos XGS offers advanced AI-driven analytics, flexible deployment options, and extensive reporting capabilities.

Room for Improvement: Zscaler could enhance its reporting mechanisms and customization options. Sophos XGS could streamline complex configuration processes and improve performance in high-traffic environments.

Ease of Deployment and Customer Service: Zscaler provides quick, cloud-based deployment and responsive customer support. Sophos XGS has a more complex initial setup due to its feature-rich nature but offers solid customer service.

Pricing and ROI: Zscaler is cost-effective with lower initial setup costs and steady ROI. Sophos XGS has higher upfront costs but offers significant ROI due to its extensive features.

To learn more, read our detailed Sophos XGS vs. Zscaler Cloud Firewall Report (Updated: July 2025).

Buyer's Guide

Sophos XGS vs. Zscaler Cloud Firewall

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of August 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.8%, up from 17.8% compared to the previous year. The mindshare of Sophos XGS is 2.4%, up from 1.2% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 0.4%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Nassif Kaleny

IT Manager at Bavaria Egypt S.A.E.

Dynamic web and mail filtering contribute to improved security measures

The reporting system is very poor. I cannot trace any traffic to our site if it feels some threats. It just tells me that there is something during a certain time but does not provide information about the type of threats or how to get rid of them. This needs improvement.

Read full review

Bhaskar Rao

Network manager admin at Yamaha

Though it helps deal with web traffic or any malicious traffic, it needs to work on its DC performance issues

The product's initial setup phase is moderate in level, so it is neither very complex nor very easy. For the deployment, my company first needs to gather all the requirements of the users and the domain names and consider how many users there are in the company. In the implementation and planning part, my company needs to consider what kind of policies we will create while ensuring that the policies are created based on the requirements of the users. There is a need to segregate the users' requirements since there are separate departments in the company, like the HR department, sales department, IT department, and manufacturing department, so that our company can create policies depending on their requirements. On-site, if you want a GRE tunnel, our company can handle GRE tunnel traffic routing and Zscaler Cloud Firewall, after which Zscaler will take action based on the policies created by our organization. For the deployments and maintenance, a team of five members consisting of two managers and three engineers is required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"FortiOS is quite good in my experience with Fortinet FortiGate, and it works very effectively and is stable for companies. The customers have given feedback that FortiOS has been very stable for a long time."

"Fortinet FortiGate provides superior protection compared to other firewalls, with high processing capabilities."

"Fortinet FortiGate positively provides my clients' organizations with a high return on investment."

"I like that they have given me a solution at a fair price."

"The web filtering feature and the intrusion protection system are the most valuable. It is a resilient appliance. I never had an issue with it in terms of any security breaches."

"The solution is scalable."

"Its user interface is good, and it is always working fine."

"The multi-tenancy feature is most valuable. It integrates very well with FortiManager and FortiAnalyzer."

More Fortinet FortiGate pros

"The solution is stable."

"It's easy to deploy and connect."

"The most valuable feature of Sophos XGS is the application control."

"The solution is scalable."

"The Sophos XGS product is highly versatile and well-suited for various companies, including small, medium, and large enterprises. Its effectiveness lies in its inspection firewall capabilities, making it a commonly chosen option in our country due to its reasonable pricing. Sophos Firewall's support for VPN encryption and thorough inspection makes it a suitable choice for many companies, and I recommend it accordingly. At the moment, I can't propose any new features. The primary concern is the traffic stability, which needs improvement. Although the traffic stability is generally good, it has been noted that it can impact RAM and CPU, affecting workflow and inspection."

"The initial setup is very user-friendly because they have graphical user interface options and command line interface options. I would give the initial setup a rating of five out of five."

"The most valuable features of Sophos XGS are a set of functionalities that are quite commendable, they call it synchronized security, where all the solutions share defense lines with each other."

"Sophos XGS that's a good firewall. If you use the endpoint, then you have what Sophos calls synchronized security. That will mean that if one of the endpoints is affected, it will be automatically set in isolation."

More Sophos XGS pros

"The solution is scalable."

"The visibility and log availability offered are highly valued for troubleshooting purposes, and this is a key factor driving customer interest in the firewall module."

"If malicious traffic attacks our on-premises servers, then it gets blocked by Zscaler Cloud Firewall."

"The scalability is okay. We have around 2200 people using this solution."

"Zscaler is still a very good product."

"Includes advanced tech protection."

"Zscaler Cloud Firewall understands the applications in the current generation and adapts to the present generation cloud applications."

"The product’s firewall and VPN package are fantastic compared to any other solution."

More Zscaler Cloud Firewall pros

Cons

"In an incident, after a restart, Fortinet FortiGate did not connect to FortiGuard servers. Due to that reason, on the customer end, all websites got blocked."

"Bandwidth usage in reporting could be improved for Fortinet FortiGate."

"They could improve the response time and quality of support."

"I wish that they could integrate zero-trust technology into Fortinet FortiGate. I am not sure whether it has been done already, but if they could implement that, it would help significantly."

"It could use more templates for third-party site-to-site VPN setups other than FortiGate and Cisco."

"The solution could be improved by addressing limited local reporting. It requires obtaining the FortiAnalyzer for proper visibility because you can't do much from a reporting perspective with just the firewall alone."

"Vulnerability scanning could be improved."

"In terms of what could be improved, the SD-WAN is quite difficult, because if you install the new box, 15 is okay, but if you change from an old configuration, if there is already configuration and a policy when you change to SD-WAN, you must change the whole policy that you see in the interface."

More Fortinet FortiGate cons

"The solution could be easier to manage and configure."

"Sophos XGS could improve the automation system. It could be better if there was some level of automation, attacks automation, meaning if this happens, then it automatically executes a particular process."

"I rate Sophos' support five out of 10. It's sometimes difficult to contact them, and finding a solution is not easy."

"There are some bugs relating to the product that allow VPN users to bypass the firewall."

"The reporting could be better."

"Sophos pricing is very high. The last instance I purchased was for three years, around $3,700 for SDG 125."

"Sophos XGS could be improved by adding a built-in hyper-converged solution."

"Its pricing could be better."

More Sophos XGS cons

"Zscaler Cloud Firewall should have a better understanding of all dynamic cloud applications."

"Pricing is a challenge."

"It would be better if they improved their policy, package visibility, and flexibility while we're creating rules for inspection. It could also be cheaper or more things could be included in the basic package. In the next release, I would like better coverage in the Asia Pacific region and better quality of service."

"They do not provide a few components that are fundamental to differentiate the products"

"The product could improve its integration with some legacy systems."

"Data Leak Prevention is only for web filtering and there is no protection for email."

"It would be nice to have some sort of a form factor, a physical form factor perhaps, or virtual machine that you could install on devices or on a cloud, and have some cloud computing."

"There are several areas for improvement. Firstly, the GUI is outdated, with noticeable lags and delays, especially when generating reports for past transactions."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"Licensing for Fortinet FortiGate is on a yearly basis. Pricing for it is a bit high. It could be cheaper."

"Cost-wise, there is not much difference from Sophos, but feature-wise, we get more features."

"The pricing is perfect."

"Pricing is good. They offer a lot of things, the most important is the support. Every time you upgrade your license, you also get insurance for the equipment. If you have any problem with equipment, they send in new equipment."

"We saved a bundle by not needing all the past appliances from an NGFW."

"Fortinet FortiGate gives you most of the features in one license."

"I give the pricing a nine out of ten."

"The price is highly competitive when compared to other brands that offer similar functionality."

More Fortinet FortiGate pricing and cost advice

"We must purchase separate web server licenses, as they are not included in the regular device license. I would rate the product an eight out of ten in terms of price. It's relatively affordable."

"Sophos XGS costs around $6,000 for a basic license."

"The price of the solution is reasonable and their target market is small to medium-sized companies."

"We pay about $150."

"I can't recall the exact amount that was paid. It was likely around $12,000 or less - around $4,000 a year."

"The licensing is reasonable. Comparing the cost of Sophos XGS with that of Fortinet or Palto Alto firewalls, for instance, it's not that expensive. However, the overall cost depends on the hardware you're using in addition to the licensing cost."

"Sophos XGS costs around $75,000 for fifty units."

"I live in Bolivia and the price of Sophos XGS is high. However, they have adjusted their price a little over the past while but the price could still be less expensive to be affordable."

More Sophos XGS pricing and cost advice

"There are licensing costs, and I would not say that it's a cheap vendor."

"It is expensive for small businesses."

"There is an annual license required for the use of the Zscaler Cloud Firewall."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."

"It comes at a significantly reduced cost while ensuring control and effectiveness."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

"There are different subscription models available."

"Zscaler is priced too high compared to the cost of Fortinet."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

13%

Manufacturing Company

Comms Service Provider

Educational Organization

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Sophos XGS?

The policies are the greatest feature. They allow us to configure granular control over our network traffic.

See all answers

What is your experience regarding pricing and costs for Sophos XGS?

I am satisfied with the price, rating it a nine. There are no extra expenses required after buying the product.

See all answers

What needs improvement with Sophos XGS?

There is room for improvement in Sophos XGS, specifically in three areas: slowness, centralized synchronization, and ...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

What do you like most about Zscaler Cloud Firewall?

The product’s firewall and VPN package are fantastic compared to any other solution.

See all answers

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

Zscaler Cloud Firewall is quite expensive compared to competitors. However, it offered moderate value for money.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 12% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 11% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

OPNsense vs Sophos XGS

Compared 15% of the time

Sophos XG vs Sophos XGS

Compared 15% of the time

Netgate pfSense vs Sophos XGS

Compared 9% of the time

Check Point Quantum Force (NGFW) vs Sophos XGS

Compared 6% of the time

Palo Alto Networks NG Firewalls vs Sophos XGS

Compared 6% of the time

More Sophos XGS Competitors

Azure Firewall vs Zscaler Cloud Firewall

Compared 15% of the time

Check Point Quantum Force (NGFW) vs Zscaler Cloud Firewall

Compared 10% of the time

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 10% of the time

OPNsense vs Zscaler Cloud Firewall

Compared 7% of the time

Cisco Secure Firewall vs Zscaler Cloud Firewall

Compared 5% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

August 2025

Download Fortinet FortiGate product report

Buyer's Guide

Sophos XGS

July 2025

Download Sophos XGS product report

Buyer's Guide

Zscaler Cloud Firewall

July 2025

Download Zscaler Cloud Firewall product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Sophos XGS is a comprehensive network security solution designed to protect organizations from advanced threats. It combines next-generation firewall capabilities with advanced threat protection, web filtering, and application control.

XGS has powerful deep learning technology and can detect and block even the most sophisticated malware and ransomware attacks. It also offers granular control over web access, allowing organizations to enforce policies and prevent access to malicious or inappropriate websites. Additionally, XGS provides application control features, enabling organizations to manage and prioritize network traffic based on specific applications or user groups.

With its intuitive management interface and centralized reporting, XGS offers easy deployment and monitoring of network security.

Sophos

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world. Its flagship services, Zscaler Internet Access and Zscaler Private Access, create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler services are 100% cloud-delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, Zscaler operates the world’s largest cloud security platform, protecting thousands of enterprises and government agencies from cyberattacks and data loss.

Check more details: https://www.zscaler.com/produc...

Zscaler

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Zenith Live, Azure, Carlsberg Group

Buyer's Guide

Sophos XGS vs. Zscaler Cloud Firewall

July 2025

Free Report: Sophos XGS vs. Zscaler Cloud Firewall

Find out what your peers are saying about Sophos XGS vs. Zscaler Cloud Firewall and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our Sophos XGS vs. Zscaler Cloud Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.