Cisco Firepower 4100 Series vs. Sophos SG Firewall Appliances

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Incentivized

It is a great fit for small to medium enterprises who are low on budget. The pricing is very competitive when compared with other major players like Palo Alto and the features match any NGFW Firewall in the market. However, in my opinion when it comes to massive performance requirements, I would say the Sophos SG Firewall Appliances lacks the sheer power that other devices in the market have.

Incentivized

• Policy management in the GUI. I'm old-school, and still create ACLs in the CLI, but using the GUI for this is very nice.
• Event monitoring and reporting is great, and you can get very granular when it comes to what information you are viewing.
• I really like the troubleshooting features that are built in, especially the packet tracer and the ability to generate and download a troubleshooting package to review or send to TAC.

• Sophos' support is actually pretty decent compared to Fortinet. We as a customer who uses both have first-hand experience in that. Sophos' way of support is much more hands-on. For instance, if you raise a ticket, they will contact you via chat, email, or phone in a timely manner and based on your SLA.
• Sophos antivirus can speak with your firewall natively so that when a threat happens it can be blocked on a network level. We had first-hand experience of this where there was a potential outbreak on the network but the machines were getting isolated and prevented the spreading of malware.
• Sophos comes with a whole suite of products like Intercept X, MDM, Antivirus, On-premise, and a virtual firewall. So they are like a one shop stop for all your security needs. We liked Sophos compared to our other firewall, which only had on-premise and virtual firewall boxes.

Incentivized

• When deployed as Firepower Threat Defense, configurations cannot be made within the device itself.
• Troubleshooting can be difficult if the Cisco Firepower 4100 Series firewall is managed by the Cisco Firepower Management Center.
• There are two operating systems in Cisco Firepower 4100 Series, firmware upgrade process will take a long time.

• The user interface could use a refresh. It's been a few years.
• Not having the ability to use an Open VPN configuration is a little disappointing.
• Home license is too restrictive with only 50 IPs.

Incentivized

The biggest selling point for sophos is their vendor support. Those guys put a smile on our faces. There are multiple ways you can contact their support like chat, or telephone or email. They are very responsive and they do have very knowledgable and patient support staff. We have raised tickets at all odd hours and they have been addressed correctly

Incentivized

As I mentioned before, the Fortigates have better failover. I think the Cisco interface is easier to use that that of the FortiGate. My only criticism would be that with multiple CLIs, it can get a bit confusing when you are trying to configure something or troubleshoot from the CLI.

Both are equally good when comparing the features, FortiGate has a better dashboard while Sophos SG Firewall Appliances has good vpn texhniques.Overall price was better for Sophos SG Firewall Appliances,So we considered this for our Remote Branch Location .

Incentivized

• Positive impact would be our increased security network wide.
• Another positive would be the increased processing power, saving us time and [from] needing more equipment.
• A negative impact would be the increased need for having to learn a new interface.

Incentivized

• Positive ROI due to the competitiveness of the product.
• Positive impact as the device is fully functional and easy to operate.
• Negative impact when it comes to log integration as it does not support industry logging standards.

Incentivized