Which firewall to choose for an SMB to prevent malware damage: Cisco Firepower or Sophos XG?

My preference is the Sophos XGS, particularly when you team it up with the Sophos Endpoint Protection client and configure it for synchronized security.  

Both can be managed through Sophos Central and are available at a decent price for the power they offer the SMB.

I recommend Sophos XGS firewall. It will offer the best solution for malware protection. 

Also, I recomend Sophos CIXA with XDR (Sophos Endpoint), so you can use Syncronized Security.

I prefer Sophos. I find it easy to use and it has better features on malware and threat management.