Try our new research platform with insights from 80,000+ expert users

Netgate pfSense vs Sophos UTM comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Number of Reviews
316
Ranking in other categories
Firewalls (2nd), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Netgate pfSense
Average Rating
8.6
Number of Reviews
206
Ranking in other categories
Firewalls (1st)
Sophos UTM
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
111
Ranking in other categories
Unified Threat Management (UTM) (3rd)
 

Q&A Highlights

it_user1093146 - PeerSpot reviewer
Mar 31, 2020
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Sep 25, 2024
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
Vincent Hamm - PeerSpot reviewer
Jul 1, 2024
I appreciate the depth of what the solution can do and the simplicity of the initial setup
We do a lot of managed services and are currently trying to get people off of L2TP VPN. Apparently, we can download a mobile config file from a configured NetGate device, and we're primarily Apple. We've experimented with it on a device that's not a production device, and we can't seem to get the phase one IPSec set correctly so that the Apple config will accept it. We've tried looking at the documentation but haven't found anything. While it's not the highest priority, it is rather frustrating. We'd like to do this, and the feature is right there, but we can't get it configured. We certainly don't want to try it on a production machine because it will break the current VPN. I would like to download the Apple mobile config so that I can tell it to configure my VPN connection to do that. We have some cross-platform things. So there's also a Windows VPN. You can download a script or a PowerShell, put it on a Windows machine, and it can connect to the VPN. It would be nice if I could say I want Mac only, Windows only, or both. I wish it could configure the IPSec phase one and phase two, or at least give me solid instructions on how to configure that. It doesn't supply out-of-the-box visibility to drive decisions. You get 75 log lines, so if you're trying to troubleshoot something, you have to look at one log and then another. It integrates with SysLog systems, but our customers are not at the level where they want to pay for some third-party SysLog system. Usually, we can get things taken care of fairly quickly. I would like to have the ability to control all my devices from one place. With Ubiquiti, you can get a controller that allows you to control all of your Wi-Fi devices, switches, and routers. From one area, you can switch to that customer and see what's happening in their environment. That's not part of pfSense. I understand why it's not because pfSense is open source and community supported. That's something that someone in the community needs to pick up and run with. It's not something the pfSense can easily implement. If they could, that'd be great.
SherifFouad - PeerSpot reviewer
Nov 30, 2022
Gives us the ability to manage our firewalls from the cloud and deploy a unified configuration onto them
From Cyberoam and the early builds of Sophos SG, they have developed higher integration between Sophos UTM and the computers' endpoint antiviruses. We can isolate the infected machine from the network, but an IT technician or cybersecurity professional can remove it from the machine and disinfect it. It has the capability of blocking HTTPS traffic, but you need the Sophos Central Intercept X subscription for that. It gives us the ability to manage our firewalls from the cloud and deploy a unified configuration onto them. Other competitors like Meraki have that ability, but they fail to optimize it in the way that Sophos has.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The stability and scalability of this solution are satisfactory. Its SD-WAN, VPN, and URL filtering features are very useful."
"​Easy to implement, and it is also reliable.​"
"The solution is scalable."
"The initial setup is very straightforward and easy, with wizards helping to configure the device efficiently."
"The features that I have found most valuable are that it is good to use, and most importantly, the pricing. The customer especially likes the discount when they trade up or something like that."
"The most valuable features are the policies, filtering, and configuration."
"Our security improved from being able to put in rules and close off unwanted traffic."
"The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus."
"What I found most valuable is the cost of the platform, the flexibility of the platform, and the fact that the ongoing fees are not there as they are with the competitor. Some people may think you're taking a risk with using Opensource. I think it just provides the end user, specifically for us small, medium business providers of services, the flexibility we need at the right cost to provide them a higher end, almost enterprise type service."
"Firewall system for small, medium, and large data networks. It allows you to provide security to your environment: DMZ networks, LAN, WAN, etc."
"Centralized administration with multiple services, which allows for execution in several important functionalities of information security."
"The flexibility of adding new kinds of services without spending any money can't be beaten."
"The most valuable features are the VPN and the capture photo."
"Remote access with two-factor authentication was a big one for us. Pulling in things like Endpoint NG to monitor traffic has been quite helpful. The pfBocker has been good. It helps us limit who's trying to bash away at access to the systems."
"My company mainly works in the health and educational domain, schools and universities. I prevent the improper use of content from schools and universities. I defend the medical records for the patients in our hospitals. That is the main use case for me for the firewall."
"The interface and the integrated services are very useful."
"Installing Sophos UTM is straightforward. The deployment itself doesn't take long, but you have to spend some time planning and waiting for the hardware to be delivered."
"Sophos UTM's best feature is SIM in the cloud, which combines the gateway solution and endpoint solution to send telemetry data to the cloud and provides full contact visibility regarding security."
"Sophos UTM provides security for our network here and access through a VPN connection for our remote users. It also offers the flexibility to create different tools for accessibility."
"Sophos UTM is very user-friendly and has good integration with other solutions."
"Sophos is a unified solution. We have anti-virus protection, firewall rules, knotting, and DACC all in one box."
"It's easy to use."
"We find all of the features valuable because together they fit the needs of our customers."
"It does not take much effort or thinking to understand how it works.​"
 

Cons

"The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility."
"They should improve the interface to make it more user-friendly."
"Regarding challenges, customers initially faced issues like internet dropping, but after firmware upgrades, everything worked well."
"The initial setup is complex."
"WAN load-balancing could be a lot better at detecting when a link is poor or inconsistent, and not just flat out dead."
"It needs more available central management."
"There are some tiny bugs that sometimes affect the operations. In the past revision of it, there was a bug. Because of the bug, we had to downgrade the version. It happened only with the last revision."
"Vulnerability scanning could be improved."
"It could use a little bit of improvement in the reporting."
"The GUI. There are TONS of plugins for pfSense, as such, if a user wants to add quite a bit of functionality, the GUI will feel a little congested."
"It would be nice if the solution had a wizard for some of the complex functions."
"I would like to see pfSense integrate WireGuard. Currently, pfSense uses OpenVPN, and there's nothing wrong with it, but WireGuard is a lot leaner and meaner."
"They could always make pfSense slightly more user-friendly and modernize the interface a little."
"I've encountered persistent issues with the solid-state drives built into pfSense hardware devices."
"Some of the features I am looking for are still not there in pfSense, like, for example, content control. Because I have kids, I want to control the content or what they watch. There is a feature in pfSense called pfBlocker, but it is limited."
"Maybe Netgate needs to see if a medium-level Netgate pfSense Plus can be created for smaller organizations."
"Initially, there were issues with the wireless network as wireless access points were disappearing from the dashboard after some time."
"It is a pretty straightforward setup, but it should be some sort of documentation that takes you step-by-step to help set it up for your VPC."
"Anti-phishing functionality should be improved."
"In Sophos UTM there is always a problem with the routing tables. If you want to see the routing table, you have to use the UI. You can't do it via a web browser. The routing table is better in Fortinet."
"The product could be simplified and made more self-explanatory."
"I would like to see Sophos UTM add support for all the new threat-detection technologies and the ability to respond to novel security threats that come along every day."
"The UI can be cumbersome and, sometimes, features are not where you think they should be."
"The reporting could be a lot better."
 

Pricing and Cost Advice

"They need to be competitive with other solutions."
"The product pricing is reasonable."
"Fortigate's pricing is competitive."
"Fortinet is reasonable in pricing and licensing. Overall, FortiGate is affordable. The licensing fee can be a little high, depending on the budget for your project."
"The price for the device and software is high. However, the solution is of good quality and has a lot of features."
"The price of Fortinet FortiGate could improve, it is expensive."
"Compared to other firewall products, it's a little cheaper in terms of pricing."
"The price is highly competitive when compared to other brands that offer similar functionality."
"For what they charge for it, which is maybe $100 a year, it's still good. If you wanted to build your own router, pfSense is more than worth $100 a year to have all that flexibility and maybe your own piece of custom hardware that you want to run it on."
"PFSENSE turns out to be very economical, the license is free and for little money you get very good support"
"They are on the higher end, but you do not get stuck with spending thousands of dollars every year. You do not have recurring license costs to have people use a simple feature like VPN. That makes it more cost-effective in the long term."
"It is open source."
"I am using the community version of the solution and it is priced well. There is a cost of learning how to use the solution, if it was free it would be better."
"Compared to other business routers, pfSense's pricing is reasonable."
"I will not call it a cheap tool, but it is very cost-efficient."
"While pfSense hardware from Netgate might have a higher upfront cost, I've had very little trouble with it. Plus, buying from them directly helps fund the software's development, making it a worthwhile investment in my eyes."
"The solution's pricing is based on a licensing model and is competitive."
"Pricing for Sophos UTM is OK. Here in Egypt, many companies use the solution because of its price and features. My company pays the Sophos UTM license fee yearly."
"The solution is affordable compared to others, such as FortiGate. The price is important."
"Purchasing through the AWS Marketplace is pretty straightforward. Because were entirely on AWS and don't have anything anywhere else. It made the most sense for us as a one stop shop."
"There is a license for the device and for the software. We pay annually for the solution and the cost is competitive."
"There was an up-front charge of around $70,000, to purchase the hub and license. Beyond the initial cost, licenses are charged for annually, but they are good value for the service we receive."
"Go to a vendor and let them assess your needs so you can get a right-sized device."
"It will cost approximately $67 US per device. We have 300 devices in our organization."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
815,854 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Answers from the Community

it_user1093146 - PeerSpot reviewer
Mar 31, 2020
Mar 31, 2020
I'd agree with Karl's comment above. PfSense is a great product but treat it like a firewall and the big bonus is it's free. It's great at what it does. Sophos UTM on the other hand can be a beast as it's an all in one solution and can get as complex as you would like it. We have failover clustering, load balancing and make use of all of their proxies. Very easy to make initial configuration er...
2 out of 9 answers
reviewer772704 - PeerSpot reviewer
May 16, 2019
I´m afraid I am not able to help in this matter. We´ve decided to for FortiGate as services, based on our relationship with our IT security provider and the FortiGate reviews available on the net. We used to use pfSence for one particular open network but let the full control on de FortiGate. During the investigation and analysis period we thought of Sophos but felt more comfortable going for FortiGate pretty much based on price and our relationship with our IT security provider. Hence my experience wouldn´t help in this case. My best advice would is to refer to the article available on: https://www.itcentralstation.com/products/comparisons/pfsense_vs_sophos-utm
it_user794232 - PeerSpot reviewer
May 16, 2019
Hello Nick, we are Sophos’ silver partner. Sure we will. When do you need it back? Israel Caravantes. El 16 may 2019, a la(s) 7:22, Nick Regan from IT Central Station > escribió: Hi Israel, Can you help out a colleague with the following question about Sophos UTM: ----- What Is The Biggest Difference Between Sophos and pfSense? I am trying to compare Sophos and pfSense for my company. Which one is best and why? What is the biggest difference between Sophos and pfSense? Thanks for helping me with this important decision. ----- Please reply to this email with your response or post your answer here. User's background: Regional Manager with 11-50 employees You've been a member of IT Central Station since December 2017. In a market full of vendor hype, we provide free connections between real users of Sophos UTM to share advice and make better buying decisions. Thanks for being part of the community. Nick Regan Community Director, IT Central Station IT Central Station 244 Fifth Avenue New York, NY 10001 (646) 328-1944 um-nqn 264744 To change notifications, please visit your subscription page or unsubscribe completely. gitbdelaGVkbHpranQ4TlNueHhtaTIwOWRXdFhDV0xMRGtaNGlxQjRnRmo4dUs5NjlvSmNwSURiZGNrcGxBczBET1h4dS0tTzdTYUFzM291OG9iV1ZpbzZkcENqQT09--1a3146227d771b2ce6a16a5909980aa6859c7a9agitbdel
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
15%
Manufacturing Company
6%
Comms Service Provider
6%
Computer Software Company
15%
Comms Service Provider
9%
Government
8%
Educational Organization
7%
Computer Software Company
18%
Government
8%
Educational Organization
7%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What Is The Biggest Difference Between Sophos UTM and Sophos XG?
The Sophos UTM is a UTM and Sophos XG is the NGFW. First, you must know about the difference between a UTM and NGFW. ...
What do you like most about Sophos UTM?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What is your experience regarding pricing and costs for Sophos UTM?
The product pricing and licensing are higher, but they offer good value for the features and stability provided.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
No data available
Astaro
 

Learn More

Video not available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
One Housing Group
Find out what your peers are saying about Netgate pfSense vs. Sophos UTM and other solutions. Updated: October 2024.
815,854 professionals have used our research since 2012.