Forcepoint NGFW vs. Sophos SG Firewall Appliances

If you are looking for a smaller network/security team, the ease and low complexity create an easy to manage environment. One engineer can easily manage 100 nodes/locations. If you are just starting to get security conscious and predict regular adjustments to policy, routing, and access, this is a very good system for making easy to understand and low impact changes on a regular basis without operations interruption.

Incentivized

It is well-suited for all sizes of organizations. It will help them to safeguard their network from various cyber threats like ransomware, phishing, malware, etc. It will provide them with many features like deep packet inspection, web filtering, application control, etc. in one place. It will also help them optimize bandwidth usage

Incentivized

• Easy to manage and make changes on - ACL's are done with ease.
• Easy USB initial configuration - The easy initial setup of a new location and firewall saves massive time. Settings are automatically pushed to new nodes upon contact with the controller.
• Low Complexity - This system does not have a lot of complexity requiring extra hours, training, or personnel to manage.

Incentivized

• It helps you to protect your corporate network and data from external cyber threats.
• It provides you with with advanced features like load balancing, web and app access, etc., to optimize bandwidth uses.
• It enables you to configure an IPsec VPN to access organization resources remotely.

Incentivized

• Poor Reporting - It exists but even when calling in to support for assistance, they have no idea how to tackle customizing reports or searching for specific data.

Incentivized

• We would like more feature reach port blocking. This could be reorganized to make it easier on Network Admins to add or change ports.
• I would like easier access to the CLI
• I would like it to perform faster

Incentivized

I rated Sophos SG Firewall a 9 out of 10 because it has consistently provided strong and reliable security for our organization over the past five years. Its unified features like IPS, VPN, web filtering, and reporting make it easy to manage and highly effective in protecting our network. The interface is user-friendly, and support from Sophos has been timely and helpful. I deducted one point only because deeper cloud-native integration and more advanced analytics would further enhance its future readiness.

Incentivized

The Graphical User Interface is very easy to read, understand and work with. The usability of this product is very high.

Incentivized

Management could use some improvements. Sophos management and workflows has always been designed by Engineers for Engineers. They do not always follow logical workflows in the real world. Once you figure this out it is easier to use but no where as smooth as many other products on the market.

Incentivized

I rated the availability of Sophos SG Firewall a 10 because, in our experience, it has been highly reliable and available whenever we needed it. We have not faced any significant application errors or unplanned outages. The system has been robust, ensuring continuous protection and minimal downtime, even during firmware updates or configuration changes. Its stability and uptime have been consistent, allowing us to trust it as a critical part of our network security infrastructure.

Incentivized

I rated the performance of Sophos SG Firewall a 10 because it consistently delivers fast and reliable results. Pages load quickly, reports are generated within a reasonable time frame, even for complex queries, and overall system responsiveness is excellent. Additionally, the firewall integrates seamlessly with other software and systems without causing any noticeable slowdowns or performance degradation. Its optimized performance has contributed to smooth network operations and minimal disruption to other services, making it a highly reliable solution for our needs.

Incentivized

Support has varied over the history of the company. Terro is a name that comes up often with the best of service from this company.

Incentivized

The biggest selling point for sophos is their vendor support. Those guys put a smile on our faces. There are multiple ways you can contact their support like chat, or telephone or email. They are very responsive and they do have very knowledgable and patient support staff. We have raised tickets at all odd hours and they have been addressed correctly

Incentivized

I rated the in-person training a 10 because the sessions were thorough, engaging, and well-structured. The trainers had a deep understanding of the Sophos SG Firewall and were able to clearly explain both basic and advanced features. The hands-on approach allowed us to directly apply what we were learning, which made the training highly practical and valuable. Additionally, the trainers were available to address specific questions and provide real-time troubleshooting during the sessions, making it an overall positive experience.

Incentivized

I was very satisfied with the implementation of the Sophos SG Firewall, giving it a rating of 9. One key insight from the implementation process is that while the setup was relatively straightforward, it’s crucial to carefully plan the network configuration in advance, especially for high availability (HA) and VPN setups. Ensuring compatibility with existing infrastructure and performing thorough testing before going live can significantly reduce issues later on. Additionally, leveraging the built-in wizards and configuration guides helped streamline the process, but hands-on testing was essential to ensure everything worked as expected in our specific environment.

Incentivized

There are similar hardware and license costs between the two products. The Forcepoint NGFW product is by far easier to use and manage.

Incentivized

We use Sophos in conjunction with WatchGuard, for an extra added level of security. Sophos is a little more sophisticated and complicated but they work well together as added layers of protection against most cyber threats.

Incentivized

I rated the contract terms and pricing structure a 9 because, overall, they were fair and competitive. The unit pricing for the Sophos SG Firewall was reasonable considering the features and performance offered, and the billing frequency was flexible, allowing us to align it with our budget cycles. However, one area that could be improved is the pricing for multi-year commitments—there could be more significant discounts or additional incentives for long-term agreements. Overall, the structure worked well for our needs, but some adjustments could make it even more cost-effective.

Incentivized

I rated the product's scalability a 9 because Sophos SG Firewall offers excellent flexibility and can be easily scaled across multiple departments and sites. It provides the ability to add more firewalls, manage them centrally, and integrate with other security solutions as our network grows. However, the only reason I didn’t give it a perfect score is that, in some complex environments, managing a large-scale deployment with many firewalls can become a bit challenging, especially in terms of centralized management and monitoring. Despite this, the overall scalability is highly effective for most use cases.

Incentivized

I rated the professional services a 10 because the support we received was outstanding. The team was highly skilled, responsive, and provided tailored solutions to meet our specific needs. They guided us through the entire implementation process, from setup to optimization, ensuring that the firewall was configured efficiently and securely. Their expertise helped us avoid potential pitfalls and ensured a smooth deployment, which greatly contributed to the success of our project.

Incentivized

• Efficiency/Productivity increase. The company moved from Cisco firewall and routing hardware to Forcepoint NGFW. It now takes fewer people and fewer hours to manage the new product. This has allowed the company to put the man-hours to use on other projects and tasks.
• Long term viability. This has been a concern in the past when the company started as Stonegate, merged to become Stonesoft then got purchased by McAfee, then McAfee got purchased by Intel. However, with Forcepoint the product seems to have found a stable home.
• Low complexity. The Web GUI based system for management has reduced the cost of personnel and training required. There is no longer a need for the company to have higher trained and higher salary cost employees to manage the system. Mid-level admins at lower salaries are capable of managing the GUI based system with ease.

Incentivized

• Positive ROI due to the competitiveness of the product.
• Positive impact as the device is fully functional and easy to operate.
• Negative impact when it comes to log integration as it does not support industry logging standards.

Incentivized