We just raised a $30M Series A: Read our story

Compare Check Point CloudGuard Network Security vs. Sophos XG

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about Check Point CloudGuard Network Security vs. Sophos XG and other solutions. Updated: November 2021.
555,139 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"Firepower has been used for quite a few enterprise clients. Most of our clients are Fortune 500 and Firepower is used to improve their end to end firewall functionality.""It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS.""The integration of network and workload micro-segmentation helps a lot to provide unified segmentation policies across east-west and north-south traffic. One concrete example is with Cisco ACI for the data center. Not only are we doing what is called a service graph on the ACI to make sure that we can filter traffic east-west between two endpoints in the same network, but when we go north-south or east-west, we can then leverage what we have on the network with SGTs on Cisco ISE. Once you build your matrix, it is very easy to filter in and out on east-west or north-south traffic.""Another benefit has been user integration. We try to integrate our policies so that we can create policies based on active users. We can create policies based on who is accessing a resource instead of just IP addresses and ports.""The most valuable feature is stability.""The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable.""It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective.""The most valuable features of this solution are the integrations and IPS throughput."

More Cisco Firepower NGFW Firewall Pros »

"Check Point has pretty simple solutions, like the virtual appliance which you just download and it is imported into VMware and you just start using it.""The visibility, the one-pane-of-glass which allows me to see all of my edge protection through one window and one log, is great. Monitoring everything through that one pane of glass is extremely valuable.""Check Point CloudGuard technical support is good.""The initial setup is pretty easy.""What's most valuable to me is that it's a contiguous solution that aligns well with the components that we've relied on and trusted from a traditional hardware, firewall, and unified threat management system. My engineers and analysts don't have to learn another platform. We have already entrusted our security controls to Check Point for perimeter and physical security, and now we can do so at the virtual layer as well, which is key to us.""The most valuable feature is that we can use the same manager server that we use on our own Check Point firewalls. We integrated CloudGuard on that manager and we can use the same kind of protections that we use on the on-prem firewalls, like the IPS and antivirus policy. We can have the same kind of protection on the Cloud environment that we have on-premise.""Auto-scaling and zero touch are valuable features.""We have complete visibility of attacks originating from email including spear-phishing, spoofing, etc."

More Check Point CloudGuard Network Security Pros »

"The user interface is very good.""The VPN is easy and has good logging, monitoring and notifications.""I like the dashboard, the interface, the management console, and the remote login.""Using Sophos endpoint and the firewall, synchronized security is easy.""A valuable feature involves the solution's manageability.""There are many valuable features.""The solution has good performance and is easy to use.""The installation is easy. There is a wizard that can be used for a single connection making it simple and if you have multiple connections you can configure it manually."

More Sophos XG Pros »

Cons
"This product is managed using the Firepower Management Center (FMC), but it would be better if it also supported the command-line interface (CLI).""Cisco Firepower NGFW Firewall can be more secure.""We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond.""FirePOWER does a good job when it comes to providing us with visibility into threats, but I would like to see a more proactive stance to it.""One of the few things that are brought up is that for the overall management, it would be great to have a cloud instance of that. And not only just a cloud instance, but one of the areas that we've looked at is using an HA type of cloud. To have the ability to have a device file within a cloud. If we had an issue with one, the other one would pick up automatically.""The solution could offer better control that would allow the ability to restrictions certain features from a website.""The configuration in Firepower Management Center is very slow. Deployment takes two to three minutes. You spend a lot of time on modifications. Whereas, in FortiGate, you press a button, and it takes one second.""The price and SD-WAN capabilities are the areas that need improvement."

More Cisco Firepower NGFW Firewall Cons »

"I would like to see a step-by-step initial installation of the firewall. That would be really helpful. Like in Oracle appliances, when you start it asks you, what's your current IP address? An initial setup should be a step by step and intuitive process. You click on "begin," it asks you some simple questions. You fill in the blanks - your current IP address, what you want to do, you want to set up a site to site VPN, for example, that kind of thing. That would be the smartest thing to have.""As an administrator, I can say that among all of the Check Point products I have been working with so far, the Virtual Systems solution is one of the most difficult.""Check Point support, beyond CloudGuard, does need some improvement.""Easier optimization techniques can definitely help with better performance of the OS, as using the vanilla software doesn't actually showcase the real capability of the software.""Check Point Virtual Systems is a complete solution, but pricing can be better.""I hope that Check Point continues to improve its technical documentation regarding the Check Point CloudGuard IaaS gateway and management system.""CloudGuard functions just like any other firewall. It functions very well. The only thing that could maybe be improved would be to integrate some tools that are not integrated with the SmartConsole, like the SmartView Monitor that we need to open on a different application to access.""The documentation has been rough. Being able to do it yourself can be hit or miss given the constraints of the documentation."

More Check Point CloudGuard Network Security Cons »

"Sophos can improve the debugging of the WAPS function.""The initial setup is not straightforward.""The reaction time of the GUI is terrible when compared to other manufacturers.""The pricing can be high unless you choose a longer contract.""The cloud support needs to be improved.""Support for this product is something that is really important, and it needs to improve.""I am using the Azure Active Directory in my company and it was complicated to integrate this solution with Azure.""I would like to have a more efficient login process."

More Sophos XG Cons »

Pricing and Cost Advice
"Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed.""The price for Firepower is more expensive than FortiGate. The licensing is very complex. We usually ask for help from Solutel because of its complexity. I have a Cisco account where I can download the VPN client, then connect. Instead, I create an issue with Solutel, then Solutel solves the case.""For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive.""This product is expensive.""Cisco is not for a small mom-and-pop shop because of the cost, but if you're in a regulated industry where a breach could cost you a million dollars, it's a bargain.""When we purchased the firewall, we had to take the security license for IPS, malware protection, and VPN. If we are using high availability, we have to take a license for that. We also have to pay for hardware support and technical support. Its licensing is on a yearly basis.""I know that licensing for some of the advanced solutions, like Intrusion Prevention and Secure Malware Analytics, are nominal costs.""The price is comparable."

More Cisco Firepower NGFW Firewall Pricing and Cost Advice »

"The pricing is pretty high, not just for your capital, for what you have to pay upfront, but for what you pay for your annual software renewals as well, compared to a lot of other vendors. Check Point is near the top, as far as how much it's going to cost you.""The price could be better.""Although I don't have specifics for pricing, based on my overall experience, I can conclude that Check Point provides the best pricing when comparing to other vendors.""Pricing of CloudGuard is pretty fair when you have a single account. It's comparable with other cloud providers. But for our use case, it got really pricey when we had to deploy multiple CloudGuards on multiple accounts in different regions, because you can't have CloudGuard protecting multiple regions. That's the big thing.""Licensing is simply by the number of hosts that you are looking to protect within your environment. It makes it much easier to ensure that you are covering your environment.""The pricing and licensing have been good. We just had to do a license increase for our portion of it. We had that done within a couple of days. Given the fact that it's purely a software-based license, it ends up being even quicker than doing it for an on-prem firewall.""The cost is on the higher side, as it is based on workload, hence we need to decide which VPC or workload needs to be part of CloudGuard.""You get charged only for what resources you choose and how much traffic actually passes through the firewall, which in turn saves a lot of money."

More Check Point CloudGuard Network Security Pricing and Cost Advice »

"It's approximately $6,000 for each device.""Sophos allows for its product to be evaluated without any financial commitment.""The price of the solution is reasonable when comparing it to other solutions.""The price for the firewall is reasonable.""Its price is fair. It is cheaper and way better than others.""This is a budget-friendly product with reasonable pricing.""Its price should be better. Initially, the clients have to pay for the appliance. Then, they have to pay for the software that is installed on the appliance. Depending on whether they have a one-year, two-year, or three-year license, they just have to renew the license of the software after it expires. They don't have to renew the appliance license. So, they have to pay for the appliance only once, and after that, they just renew the software license. That's all.""The price is reasonable but it would be great if it was reduced to half the price."

More Sophos XG Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
555,139 professionals have used our research since 2012.
Questions from the Community
Top Answer:  When you compare these firewalls you can identify them with different features, advantages, practices and… more »
Top Answer:  The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
Top Answer: It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
Top Answer: Check Point has pretty simple solutions, like the virtual appliance which you just download and it is imported into… more »
Top Answer: The cost is on the higher side, as it is based on workload, hence we need to decide which VPC or workload needs to be… more »
Top Answer: In terms of what could be improved, we have no support with the current Check Point environment. It ended maybe three or… more »
Top Answer: Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat… more »
Top Answer: Sophos UTM is no longer being developed, according to our reseller. All the development effort is going into XG. So XG… more »
Top Answer: Sophos XG is easy to use.
Comparisons
Also Known As
Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
Learn More
Overview

Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

Check Point CloudGuard provides unified cloud native security for all your assets and workloads, giving you the confidence to automate security, prevent threats, and manage posture – everywhere – across your multi-cloud environment.

Sophos XG Firewall is next gen firewall that is optimized for today’s business, delivering all the protection and insights you need in a single, powerful appliance that’s easy to manage.

Offer
Learn more about Cisco Firepower NGFW Firewall
Learn more about Check Point CloudGuard Network Security
Learn more about Sophos XG
Sample Customers
Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
Physicians Choice Laboratory Services, Helvetica Insurance
Information Not Available
Top Industries
REVIEWERS
Comms Service Provider22%
Financial Services Firm16%
Manufacturing Company8%
Non Profit8%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company21%
Government7%
Manufacturing Company3%
REVIEWERS
Financial Services Firm19%
Government11%
Computer Software Company11%
Program Development Consultancy7%
VISITORS READING REVIEWS
Comms Service Provider30%
Computer Software Company26%
Government5%
Energy/Utilities Company5%
REVIEWERS
Financial Services Firm11%
Manufacturing Company10%
Healthcare Company9%
Comms Service Provider9%
VISITORS READING REVIEWS
Comms Service Provider40%
Computer Software Company18%
Government6%
Media Company4%
Company Size
REVIEWERS
Small Business43%
Midsize Enterprise28%
Large Enterprise29%
VISITORS READING REVIEWS
Small Business21%
Midsize Enterprise13%
Large Enterprise66%
REVIEWERS
Small Business38%
Midsize Enterprise27%
Large Enterprise35%
VISITORS READING REVIEWS
Small Business8%
Midsize Enterprise55%
Large Enterprise37%
REVIEWERS
Small Business64%
Midsize Enterprise23%
Large Enterprise12%
VISITORS READING REVIEWS
Small Business50%
Midsize Enterprise24%
Large Enterprise25%
Find out what your peers are saying about Check Point CloudGuard Network Security vs. Sophos XG and other solutions. Updated: November 2021.
555,139 professionals have used our research since 2012.

Check Point CloudGuard Network Security is ranked 7th in Firewalls with 25 reviews while Sophos XG is ranked 5th in Firewalls with 121 reviews. Check Point CloudGuard Network Security is rated 8.6, while Sophos XG is rated 8.2. The top reviewer of Check Point CloudGuard Network Security writes "Unified Security Management has enabled us to combine our on-prem appliances and cloud environments". On the other hand, the top reviewer of Sophos XG writes "Light and stable with excellent real-time control ". Check Point CloudGuard Network Security is most compared with Fortinet FortiGate, Palo Alto Networks NG Firewalls, Cisco ASA Firewall, Azure Firewall and WatchGuard Firebox, whereas Sophos XG is most compared with Fortinet FortiGate, pfSense, Meraki MX, Palo Alto Networks NG Firewalls and Sophos Cyberoam UTM. See our Check Point CloudGuard Network Security vs. Sophos XG report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.