FortiGate all day long.   Sophos bought Cyberoam several years ago and basically put a prettier GUI on it.  So, you really are getting a Cyberoam with the Sophos GUI.  There are some other additions; but I don't all our Sophos device a few years ago.

These are some excellent comments.   I would add the throughput of NGFWs for the internal nets to my list.  Most people only focus on their WAN and forget they may have internal networks they need to protect from one another. Well, those networks operate at 1 GB normally if…

Go with the FortiGate all day long.   They are impressive boxes and even though the support is overseas you always get someone on the phone.

Great firewalls.   They are very expensive if you want HA though. It's basically double the licensing/support cost, which is the downside. But, their support is normally amazing and is much better than Cisco, Sophos, or WatchGuard.