Try our new research platform with insights from 80,000+ expert users

Cisco Secure Firewall vs Sophos UTM comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 8, 2024
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Firewalls (2nd), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Cisco Secure Firewall
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
406
Ranking in other categories
Firewalls (6th), Cisco Security Portfolio (4th)
Sophos UTM
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
111
Ranking in other categories
Unified Threat Management (UTM) (2nd)
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
Daniel Going - PeerSpot reviewer
Is intuitive in terms of troubleshooting, easy to consume, and stable
Licensing is complex, and I'd like it to be simplified. This is an area for improvement. If we could create a Firepower solution that became like an SD-WAN or a SASE solution in a box, then perhaps we could exploit that on remote sites. We've already kind of got that with Meraki, but if we could pull out some of the features from ASA Firepower and make those available in SD-WAN in SASE, then it would be pretty cool.
Emanuele-Gnali - PeerSpot reviewer
Enhances security by providing intuitive firewall policy settings 
The primary use case for the solution is as a perimeter protection firewall, which includes functionalities such as VPN, web control, and traffic inspection. It is used in various customer environments, providing comprehensive security management and network protection The platform's most…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are very happy with the general bandwidth agility we have seen from one website to another website."
"The solution has very good threat and content filtering switches."
"SSL-VPN is very useful for us and has been very reliable."
"The most valuable feature of this solution is the analytics."
"User-friendly and affordable security solution that's recommended for SMB customers. This solution has good technical support."
"It does a lot for you for intrusion protection and as an antivirus. The threat management bundle is worth the money. You don't need another company to monitor your web traffic for you. You can do everything yourself on the firewall. You restrict your own black list for people on the firewall. You don't need to pay some other company for another product to do that for you. The firewall can do that for you. So, it's an easy-to-use product for people to be independent. They don't need to rely on other vendors to do what the firewall can do. They can do everything."
"It performs very well."
"Fortinet has a very good solution for Secure SD-WAN. One very good feature is that they have robust and simple FortiOS through which they provide all solutions. That's their strength. There's not much complexity involved with the Secure SD-WAN solution of Fortinet as compared to Cisco's solution, which has a lot of flexibility but complexity also comes with that flexibility."
"Signature-based detection; user-defined signatures with regular expressions; integrated URL and content filtering; custom URL categories filtering."
"Stability is perfect. I haven't had any problems."
"The feature set is fine and is rarely a problem."
"Cisco ASA has an okay CLI with a nice GUI."
"My confidence continues to build upon using Cisco firewalls."
"Cybersecurity resilience has been paramount. Because there is a threat of losing everything if ransomware or another sort of attack were to happen, the cybersecurity resilience has been top-notch."
"Cisco Secure Firewall's security solutions, advanced malware protection, and DDoS communication are very good."
"A good intrusion prevention system and filtering."
"The most valuable feature is ransomware protection."
"Sophos UTM's best feature is SIM in the cloud, which combines the gateway solution and endpoint solution to send telemetry data to the cloud and provides full contact visibility regarding security."
"If a computer does get infected the Sophos appliance lets us know via it's Advanced Threat Protection so we can get a much faster response time."
"The implementation with the AWS environment was good."
"It gives us the ability to manage our firewalls from the cloud and deploy a unified configuration onto them. Other competitors like Meraki have that ability, but they fail to optimize it in the way that Sophos has."
"The initial setup was easy."
"The UTM features are reasonably strong and the patterns are updated on a regular basis"
"I would recommend UTM over XG because it's easier to manage."
 

Cons

"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."
"Fortigate's hardware capacities could be improved."
"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."
"Fortinet FortiGate is not very easy to use. The navigation could be improved to make it easier to use."
"The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware."
"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."
"The license renewal process, annual renewal price, and the web application firewall features should be improved."
"Sometimes you do need to know some CLI commands, so it's a bit harder for technicians or new people that don't know it."
"Usually, the customers are satisfied, but I am going to recommend that all clients upgrade to FirePOWER management. I want Cisco to improve the feature called anti-spam. We use a Cisco only email solution, that's why we need the anti-spam on email facility."
"The application detection feature of this solution could be improved as well as its integration with other solutions."
"VPNs are weak as this product still does not support route-based VPNs."
"I would like it if they made the newer generation a bit simpler. You can do ASA code and FXOS. It is just a bit confusing with the newer generational equipment on what it can do."
"In general, they can make it easier to manage the solutions. They can make it easier in terms of administration and provide a single tool for different firewalling solutions. They have different tools to manage different firewalls, such as Firepower or ASA. Sometimes, both are on the same thing. You have ASA with Firepower modules, so you manage some of the things via HTML, and then you manage some of the things via another management tool. It's not seamless."
"I would like to see the inclusion of a protocol that can be used to protect databases."
"I think the ASA layer is thin. It's always Layer 3 or Layer 4 source controller and doesn't control the Layer 7 traffic. It's important, and you'll need an additional firewall."
"It can probably provide a holistic view of different appliances because many customers do not have only one brand, besides the traditional SNMP protocols, to cover all their devices. There are some specific requirements in terms of configurations or actions that sometimes have to be done in a very manual way because of the different versions or brands in a customer's infrastructure. It could also have some additional analytics capabilities. It has some very interesting ways to monitor the traffic and identify false positives from the architecture and the environment. It would be good if there is a way to patch with some other industry-specific solutions and synchronize some of the information, such as what other customers experience in their operations and probably share some additional information that could be leveraged or shared among the industry. Such information would be something interesting to see. It could have AI capabilities related to how the appliances could benefit from learning the current environment and different exposures."
"I didn't like it much. It suits only small businesses. It isn't scalable and reliable. There is a very critical issue with the power supply."
"Stay away from the wireless models, since you cannot put them in HA. They start to give you some weird issues once you start getting into multiple SSIDs and networks."
"Needs to improve the certificate management (ex. Let's Encrypt support)."
"The reporting system needs to allow for customizations because many reports do not include details that we expect."
"The solution needs to do better at covering mobile devices, although they may have an integrated solution for that purpose."
"The initial setup may be difficult for those not familiar with the product."
"The solution is not scalable."
"We would like to have unique viewable IDs for rules and in the packet filter logfile, for easier debugging of old log files."
 

Pricing and Cost Advice

"The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto. In terms of pricing, it's probably a better-priced firewall solution overall."
"Fortinet is reasonable in pricing and licensing. Overall, FortiGate is affordable. The licensing fee can be a little high, depending on the budget for your project."
"Licensing is usually on a three-year period."
"It is affordable. Palo Alto is much more expensive than Fortinet."
"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."
"The pricing for the product is alright."
"There is a license to use Fortinet FortiGate."
"The price is fine."
"Pricing is high."
"When we purchased the firewall, we had to take the security license for IPS, malware protection, and VPN. If we are using high availability, we have to take a license for that. We also have to pay for hardware support and technical support. Its licensing is on a yearly basis."
"This product requires licenses for advanced features including Snort, IPS, and malware detection."
"License capacity needs to be extended and the vendor needs to work on the pricing."
"Licensing, recently, has been getting more complicated. In particular, the Smart Licensing that came out is quite complicated. I don't know what's going on.... They call it Smart, but it's complicated. I prefer the traditional license where you buy it once."
"​Price point is too high for features and throughput available.​"
"We are partners with Cisco. They are always one call away, which is good. They know how to keep their customers happy."
"Watch out for hidden licensing and incredibly high annual maintenance costs."
"For under 50 users, MSP licensing is profitable."
"It will cost approximately $67 US per device. We have 300 devices in our organization."
"The AWS Marketplace product should be a better fit, but it is a little pricier."
"Sophos offers free training when selling their products from within the partner portal.​"
"The prices can be better, they could make it a lot cheaper."
"This solution is less expensive than FortiGate."
"The solution is very low cost compared to competitors. You have a good firewall, a lot of functions for less than the price of some omni firewall competitors."
"The price is something that one will need to consider."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Educational Organization
35%
Computer Software Company
15%
Government
5%
Manufacturing Company
5%
Computer Software Company
18%
Government
8%
Educational Organization
7%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...
Which is better - Meraki MX or Cisco ASA Firewall?
Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...
What Is The Biggest Difference Between Sophos UTM and Sophos XG?
The Sophos UTM is a UTM and Sophos XG is the NGFW. First, you must know about the difference between a UTM and NGFW. ...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
The product pricing and licensing are higher, but they offer good value for the features and stability provided.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Cisco ASA Firewall, Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Cisco ASA, Adaptive Security Appliance, ASA, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall
Astaro
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
One Housing Group
Find out what your peers are saying about Cisco Secure Firewall vs. Sophos UTM and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.