Sophos XG vs Zscaler Cloud Firewall comparison

Sophos and Zscaler are both solutions in the Firewalls category. Sophos is ranked #4 with an average rating of 8.3, while Zscaler is ranked #23 with an average rating of 8.5. Sophos holds a 11.5% mindshare in Firewalls, compared to Zscaler’s 0.3% mindshare. Additionally, 92% of Sophos users are willing to recommend the solution, compared to 100% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Sophos XG and Zscaler Cloud Firewall are competitors in the network security category. Zscaler may have the upper hand due to its cloud-centric approach and in-depth threat protection.

Features: Sophos XG offers advanced web and application filtering, synchronized security, and a robust IPS and anti-malware protection. It also provides centralized management for high visibility. Zscaler Cloud Firewall features comprehensive threat protection, CASB, DLP, and strong integration capabilities.

Room for Improvement: Sophos XG needs improvements in VPN stability, load balancing, and documentation, along with more intuitive configuration processes. Zscaler Cloud Firewall could enhance its service customization, reporting, and integration with legacy systems.

Ease of Deployment and Customer Service: Sophos XG provides flexible deployment options: on-premises, cloud, and hybrid. Its support has been reported as variable. Zscaler Cloud Firewall offers straightforward cloud-focused deployment but lacks certain on-premises features. Users cite robust cloud solutions but request better customer service.

Pricing and ROI: Sophos XG is competitively priced with flexible licensing and bundled deals, showing good ROI due to its feature set. Zscaler Cloud Firewall offers tiered pricing, potentially high for small businesses, but justified by the advanced features for cloud deployments, offering a premium solution with strong ROI potential.

To learn more, read our detailed Sophos XG vs. Zscaler Cloud Firewall Report (Updated: January 2025).

Buyer's Guide

Sophos XG vs. Zscaler Cloud Firewall

January 2025

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of Sophos XG is 11.5%, up from 9.2% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 0.3%, down from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

SherifFouad

ICT Manager at a mining and metals company with 1,001-5,000 employees

Gives us customizable policies, modifiable templates, and customized rules for single users

The major problem that I am facing, and I know that others are facing as well, is with the HTTPS classic, in general, or any classic that works on Secure Socket Layers. Let's say I set up a rule to block users from accessing YouTube or Facebook. The rule will only block the HTTP traffic, which is non-secure traffic. But most websites right now, most of the reputable web services providers, for extra security for their own web servers and for the user's security, provide a connection over Secure Socket Layer. The problem comes when you are trying to block, or allow, similar traffic that uses HTTPS. You have to create a certificate and import it into the users' web browsers, whatever they are using. Now, this is not a problem when you're dealing with users stationed and fixed in a specific site or location. They are using desktops, they will never take the desktops and go home with them, nor will they ever take the desktops and travel to another country, or another site with it. The problem occurs when you're dealing with roaming users who use laptops and have to move between different sites that have different types of policies applied to them. You have to import all sorts of certificates from each site into their browser. Doing so will most probably conflict with something else that is totally irrelevant and cause a problem. A way around this is if you are using authentication with Active Directory. But most of the time, especially if you're operating in a remote site with a very slow internet connection, if it's available in the first place, authentication with Active Directory is impossible. So it needs an easier way to apply HTTPS filters, without importing certificates into users' browsers and without the need for using an Active Directory. There must be a way around it. There are workarounds. But with applied workarounds, it will work out once, it won't work out properly 10 other times. That is my only request. Also, since Sophos took over Cyberoam, the online technical library and support library have become super messy. To get a piece of information is becoming a nightmare. They need to reorganize the online technical support and technical library. The easiest way to overcome this is to look at how the Cyberoam online technical library was structured and to build the Sophos technical library the same way. It is messy, totally unorganized, time-wasting. Instead of getting what you want in five minutes it takes half an hour.

Read full review

Bhaskar Rao

Network manager admin at Yamaha

Though it helps deal with web traffic or any malicious traffic, it needs to work on its DC performance issues

The product's initial setup phase is moderate in level, so it is neither very complex nor very easy. For the deployment, my company first needs to gather all the requirements of the users and the domain names and consider how many users there are in the company. In the implementation and planning part, my company needs to consider what kind of policies we will create while ensuring that the policies are created based on the requirements of the users. There is a need to segregate the users' requirements since there are separate departments in the company, like the HR department, sales department, IT department, and manufacturing department, so that our company can create policies depending on their requirements. On-site, if you want a GRE tunnel, our company can handle GRE tunnel traffic routing and Zscaler Cloud Firewall, after which Zscaler will take action based on the policies created by our organization. For the deployments and maintenance, a team of five members consisting of two managers and three engineers is required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Our security improved from being able to put in rules and close off unwanted traffic."

"The pipe filter application is an outstanding feature."

"Fortigate's most valuable feature is that it doesn't need a push policy when writing rules."

"A strong point of FortiGate is the graphical interface is complete and easy to use."

"The wireless control is helpful."

"The reporting you receive out of this appliance is excellent. You will not need an external management system."

"The solution can scale well."

"We are a visual effects company, and there have been a number of high profile security issues in our industry. This has brought us to a higher standard of security, which our clients are very keen on these days."

More Fortinet FortiGate pros

"Over the past two years, during the COVID pandemic, the VPN has helped us a lot."

"We currently have multiple clients, and many users are working remotely. We need antivirus protection to guard against malware introduced from public networks. One of the most beneficial features of Sophos XG is its integration with Sophos Central. If any file is detected as malicious on any endpoint or firewall, Sophos Central immediately identifies the threat and publishes the information across all endpoints and firewalls. If a single system gets infected, the threat is communicated and addressed across the entire network, including all sites and remote users."

"I rate Sophos support 10 out of 10. When my device was freezing, I contacted them, and sent me a replacement. It only took a couple of days for Sophos to ship the device to Kenya. I didn't have a redundant device, so it was urgent."

"We have found that the simplicity of the XG 210 is its most valuable feature."

"I like the tunneling part which we are using for the VOIP. We have various other sites where we connect via tunneling. The tunneling part is very fast and easy to implement."

"The product has all the latest features."

"I like the dashboard, the interface, the management console, and the remote login."

"The antivirus features are valuable."

More Sophos XG pros

"The scalability is okay. We have around 2200 people using this solution."

"It provides in-depth visibility into your network, ensuring that traffic flowing into your organization, be it from offices or individual users, is effectively filtered and secured through multiple layers of protection."

"Zscaler provides effective protection against various cyber threats ensuring a safe environment"

"The visibility and log availability offered are highly valued for troubleshooting purposes, and this is a key factor driving customer interest in the firewall module."

"It is a stable solution."

"Once you have Zscaler running you have access to configure it however you want."

"Most of the features that Zscaler has to offer, we will deploy."

"The product’s firewall and VPN package are fantastic compared to any other solution."

More Zscaler Cloud Firewall pros

Cons

"There can be more security in hybrid implementations. When a customer has a hybrid environment where some parts are in the cloud, we need a consistent security solution for such scenarios."

"Difficult to add or define, and not that easy to configure and manage."

"I would like to see a more intuitive dashboard."

"The solution is very expensive."

"Its reporting and pricing need improvement."

"Lacks training for new features."

"As far as wanting more scalability or things in the network diagram, it's going to cost you."

"One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering."

More Fortinet FortiGate cons

"In feature releases of the solution, I would like there to be an increase in the detection capability."

"I would like to have more artificial intelligence in the web monitoring service that comes with it. It should alert us when particular events happen. It has already got some of that. I know that it is more of a service, and Sophos is already looking at it. It is called SIEM."

"Some businesses require Dynamic IP. This feature would be useful if it worked."

"The firewall could be made more robust, particularly by simplifying two-factor authentication."

"It would be beneficial if the platform provided more flexible support for a variety of devices."

"In the Sophos XG, the SD-WAN has all the rules done separately, such as net policy routing. In the previous version, they were all in a single rule and everything was done that way. The way it is now is difficult for us because we are not used to this newer version. The firewall rules should be easier to configure and create. Everything should be done with a single click."

"For the standard end user, self-based training is necessary. When you get into the Sophos XG firewall and try to start creating NAT rules, it can be a little cumbersome for a novice. It's pretty easy once you know how to do it, but it will be hard for anybody who doesn't have experience."

"We feel that the GUI can be improved a bit because it has a lot of information and looks a bit outdated."

More Sophos XG cons

"When it comes to customer support, there is room for improvement in Zscaler's service."

"I don't have the visibility of a control dashboard or a network management system."

"There are some areas it could improve when it comes to blocking, we have to block some things manually. For example, if we block a top-level domain we have seen that the new IPs come through, the IPs are not blocked. There should be some more granular way of doing it. My only request is if you're blocking something at a top level, the sub-level sub-domains and all those other IPs should be blocked too automatically."

"Data Leak Prevention is only for web filtering and there is no protection for email."

"Zscaler Cloud Firewall should have a better understanding of all dynamic cloud applications."

"The issue right now is probably that Zscaler is not providing web browser isolation. Another solution, Menlo, offers this. For one customer, we had to send traffic to Menlo to do the isolation for us. It was requested by the customer so that they could integrate any iframe. Zscaler needs to add this type of feature in their next release."

"It would be nice to have some sort of a form factor, a physical form factor perhaps, or virtual machine that you could install on devices or on a cloud, and have some cloud computing."

"Its technical support services could be better."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."

"For medium and enterprise organizations, FortiGate is more affordable."

"Compared to other firewall products, it's a little cheaper in terms of pricing."

"The license is yearly. We pay for the top end. It's called 360."

"I give the pricing a nine out of ten."

"The pricing for the product is alright."

"The Indian market is different than the European and American markets. When you compare they need to be a bit more aggressive on pricing."

"When you look at these end security systems and firewalls, these firewalls even five years ago were $50,000 or perhaps $25,000 to implement in some types of customer sites. Now we're talking about tools that are $1,000. In this case, it might have been $500 or something like that."

More Fortinet FortiGate pricing and cost advice

"I don't think that it is expensive when you compare it with other solutions available on the market."

"The pricing was reasonable."

"There is no license required to use this solution."

"Its price is good. All features are grouped in the same license. It is an all-in-one license, and the license price is acceptable."

"Its licensing cost is around 700 bucks a year or something like that. It is 100 bucks a month at the most. It seems to be standard licensing with no additional costs."

"I paid approximately 57,000 Rupees ($750 USD) for three years."

"The hardware is inexpensive but the license is expensive."

"The price is not reasonable."

More Sophos XG pricing and cost advice

"Zscaler is priced too high compared to the cost of Fortinet."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

"It is not the most budget-friendly solution, but it's important to consider its overall value."

"It is expensive for small businesses."

"There are different subscription models available."

"There are licensing costs, and I would not say that it's a cheap vendor."

"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."

"There is an annual license required for the use of the Zscaler Cloud Firewall."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

22%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

17%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

14%

Financial Services Firm

11%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...

See all answers

What are the main differences in features between Sophos XG and FortiGate 80F?

Hi Arvind P , The Sophos XG firewall has a number of models right from XG86 to XG135w under the 1U Desktop Form Fact...

See all answers

What Is The Biggest Difference Between Sophos UTM and Sophos XG?

The Sophos UTM is a UTM and Sophos XG is the NGFW. First, you must know about the difference between a UTM and NGFW. ...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

What do you like most about Zscaler Cloud Firewall?

The product’s firewall and VPN package are fantastic compared to any other solution.

See all answers

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need ...

See all answers

Comparisons

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Meraki MX vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Netgate pfSense vs Sophos XG

Compared 11% of the time

OPNsense vs Sophos XG

Compared 8% of the time

Sophos XGS vs Sophos XG

Compared 5% of the time

SonicWall TZ vs Sophos XG

Compared 4% of the time

Meraki MX vs Sophos XG

Compared 3% of the time

More Sophos XG Competitors

Azure Firewall vs Zscaler Cloud Firewall

Compared 20% of the time

OPNsense vs Zscaler Cloud Firewall

Compared 10% of the time

Check Point NGFW vs Zscaler Cloud Firewall

Compared 8% of the time

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 6% of the time

Cisco Multicloud Defense vs Zscaler Cloud Firewall

Compared 6% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

January 2025

Download Fortinet FortiGate product report

Buyer's Guide

Sophos XG

December 2024

Download Sophos XG product report

Buyer's Guide

Zscaler Cloud Firewall

December 2024

Download Zscaler Cloud Firewall product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

Learn More

Fortinet

Sophos

Zscaler

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Sophos XG is a versatile network security solution that offers network protection, firewall management, VPN access, web filtering, and intrusion prevention, providing comprehensive security for businesses from small offices to large enterprises.

Sophos XG stands out for its Synchronized Security, easy setup, and robust templates. It manages VPN access, protects against threats, and handles load balancing and traffic monitoring. The cloud-based management, centralized dashboard, and detailed logging make it user-friendly and reliable. Integration of features like email protection, SD-WAN, and unified threat management ensures a broad spectrum of security needs are covered. However, it could benefit from improvements in network security, user portals, technical support, and more scalable SD-WAN features.

What are the key features of Sophos XG?

Synchronized Security: Orchestrates threat intelligence sharing between endpoints and firewall.
Unlimited SSL VPN Clients: Provides extensive VPN client support for secure remote access.
Cloud-Based Management: Facilitates remote administration with a cloud-hosted platform.
Intrusion Prevention: Detects and blocks potential threats in real-time.
Centralized Dashboard: Offers a comprehensive view of network security status.

What benefits and ROI should users look for in reviews?

Scalability: Easily adapts to growing business needs.
User-Friendliness: Simplified setup and intuitive management.
Effective Threat Protection: Provides robust security against a wide range of threats.
Comprehensive Reporting: Delivers detailed insights and analytics.
Cost-Effectiveness: Competitive in pricing with flexible deployment options.

Sophos XG is implemented across industries such as healthcare, education, and finance to secure sensitive data and ensure regulatory compliance. It aids in endpoint protection, application control, load balancing, and traffic monitoring essential for these industries. Enhancing network security, simplifying VPN setup, and integrating adaptive security features remain focal points for businesses.

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world. Its flagship services, Zscaler Internet Access and Zscaler Private Access, create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler services are 100% cloud-delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, Zscaler operates the world’s largest cloud security platform, protecting thousands of enterprises and government agencies from cyberattacks and data loss.

Check more details: https://www.zscaler.com/produc...

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Zenith Live, Azure, Carlsberg Group

Buyer's Guide

Sophos XG vs. Zscaler Cloud Firewall

January 2025

Free Report: Sophos XG vs. Zscaler Cloud Firewall

Find out what your peers are saying about Sophos XG vs. Zscaler Cloud Firewall and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,158 professionals have used our research since 2012.

See our Sophos XG vs. Zscaler Cloud Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.