If you want my word on NGFW, it doesn't include Sophos nor Fortinet. Those
are "light" UTM solutions who see mostly "clean" networks even when they
are seriously compromised
If you want to get serious, choose either Palo Alto Networks or Checkpoint
Security appliances.…