We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"There are no issues that we are aware of. It does its job silently in the background."
"The Firepower+ISE+AMP for endpoint integration is something that really stands it out with other vendor solutions. They have something called pxGrid and i think it is already endorsed by IETF. This allows all devices on the network to communicate."
"If you compare the ASA and the FirePOWER, the best feature with FirePOWER is easy to use GUI. It has most of the same functionality in the Next-Generation FirePOWER, such as IPS, IPS policies, security intelligence, and integration and identification of all the devices or hardware you have in your network. Additionally, this solution is user-friendly."
"The Adversity Malware Protection (AMP) feature is the most valuable. It is also very easy to use. Every technical user can operate this solution without any difficulty. The dashboard of Cisco Firepower has every tool that a security operator needs. You can find every resource that you need to operate through this dashboard."
"The solution offers very easy configurations."
"I like the firewall features, Snort, and the Intrusion Prevention System (IPS)."
"One of the most valuable features of Firepower 7.0 is the "live log" type feature called Unified Event Viewer. That view has been really good in helping me get to data faster, decreasing the amount of time it takes to find information, and allowing me to fix problems faster. I've found that to be incredibly valuable because it's a lot easier to get to some points of data now."
"You do not have to do everything through a command line which makes it a lot easier to apply rules."
"In terms of specific features, I like FortiGate's load balancing, interface, and priority on the network."
"Overall, it's an excellent solution."
"The pricing of the solution is good."
"The support is good. We don't have any issues with the technical support."
"It is very versatile."
"The solution is very easy to set up. It doesn't take a lot of time and offers a quick deployment, so you can start using it almost right away."
"The most valuable features are the IPS and Antivirus."
"The functionality provided is very good."
"The product is very easy to explore. It has a very good layout."
"The multifactor authentication is helpful because whenever the user wants to connect to the firewall, they have to use the authenticator before they can access it."
"We found the initial setup to be straightforward."
"The solution is stable. I've had very few problems with it."
"The stability has been excellent."
"The most valuable feature of this solution is flexibility."
"The initial setup was straightforward."
"It is very easy to use. You can configure and monitor everything from one unique dashboard."
"FirePOWER does a good job when it comes to providing us with visibility into threats, but I would like to see a more proactive stance to it."
"The initial setup could be simplified, as it can be complex for new users."
"I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device."
"On the VPN side, Firepower could be better. It needs more monitoring on VPNs. Right now, it's not that good. You can set up a VPN in Firepower, but you can't monitor it."
"Cisco makes horrible UIs, so the interface is something that should be improved."
"This product is managed using the Firepower Management Center (FMC), but it would be better if it also supported the command-line interface (CLI)."
"The solution could offer better control that would allow the ability to restrictions certain features from a website."
"An area of improvement for this solution is the console visualization."
"The licensing needs to be improved. We need longer licensing periods, especially for POCs and trials. It should be for six months. Right now, it's too short of a timeframe."
"Customization needs improvement."
"With FortiGate, we sometimes encounter bugs in various operating systems."
"The user interface needs to be improved."
"They should keep us up to date about the latest version. That's the biggest thing. Currently, we have to go looking for the latest version. We should get notified about what's going on with the versions. I would like to see easier dual-factor authentication."
"There should be more options to use lower-end models in a high availability configuration."
"There should be a bit more automation."
"It is difficult to size the VM in terms of machine resources, and for this reason, clients prefer the appliance."
"Having a web portal where you could make requests for the categorization of non-categorized items, would be beneficial."
"We feel that the GUI can be improved a bit because it has a lot of information and looks a bit outdated."
"I'd like the dashboard to be improved. It could be a bit more customizable."
"Sophos needs improvements made to the console, such as host entry or defining rules directly from it."
"It would be helpful if they had a set of standard templates because it would assist in the beginning, when you are just getting started."
"The MTR feature needs enhancing."
"It would be better if they made their own hardware like Palo Alto and Fortinet. They use their own ASICs and claim it is more secure."
"The solution could improve by having better security."
"I know that licensing for some of the advanced solutions, like Intrusion Prevention and Secure Malware Analytics, are nominal costs."
"For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
"The price for Firepower is more expensive than FortiGate. The licensing is very complex. We usually ask for help from Solutel because of its complexity. I have a Cisco account where I can download the VPN client, then connect. Instead, I create an issue with Solutel, then Solutel solves the case."
"Its price is in the middle range. Both Firepower and FortiGate are not cheap. Palo Alto and Check Point are the cheapest ones. I don't remember any costs in addition to the standard licensing fees."
"The solution was chosen because of its price compared to other similar solutions."
"The price of Firepower is not bad compared to other products."
"Its pricing is good and competitive. There is a maintenance cost. It includes SecureX that makes it cost-effective as compared to the other solutions where you have to pay for XDR and SOAR capabilities."
"It definitely competes with the other vendors in the market."
"The price could be lower."
"It's a mid-ranged product."
"There is an annual license required to use the solution."
"This solution is very expensive."
"There is a support fee that can be bought on a yearly or two-yearly basis. I don't think they do five years. The best benefit is that the same pricing is guaranteed for that duration. If you can afford it, I would recommend using the longest possible time span."
"There is a benefit in terms of the cost of using this solution because the price is very good."
"There should be a reduction in the setup price and licensing costs."
"It's not a cheap solution but it comes with its benefits."
"Sophos allows for its product to be evaluated without any financial commitment."
"Its price should be better. Initially, the clients have to pay for the appliance. Then, they have to pay for the software that is installed on the appliance. Depending on whether they have a one-year, two-year, or three-year license, they just have to renew the license of the software after it expires. They don't have to renew the appliance license. So, they have to pay for the appliance only once, and after that, they just renew the software license. That's all."
"The price is reasonable but it would be great if it was reduced to half the price."
"This is a budget-friendly product with reasonable pricing."
"The hardware is inexpensive but the license is expensive."
"There is a license required for this solution that is priced well and all the features are included."
"The price can be a bit steep but for the number of features, it is worth it."
"It is not expensive, it's a reasonable price,"
Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.
FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.
Sophos XG Firewall is next gen firewall that is optimized for today’s business, delivering all the protection and insights you need in a single, powerful appliance that’s easy to manage.
Fortinet FortiGate-VM is ranked 12th in Firewalls with 54 reviews while Sophos XG is ranked 6th in Firewalls with 115 reviews. Fortinet FortiGate-VM is rated 8.2, while Sophos XG is rated 8.2. The top reviewer of Fortinet FortiGate-VM writes "Slightly unstable, needs a better user interface, and lacks good monitoring capabilities ". On the other hand, the top reviewer of Sophos XG writes "Light and stable with excellent real-time control ". Fortinet FortiGate-VM is most compared with Azure Firewall, Fortinet FortiGate, Palo Alto Networks VM-Series, OPNsense and Untangle NG Firewall, whereas Sophos XG is most compared with Fortinet FortiGate, pfSense, Sophos UTM, Meraki MX and Sophos Cyberoam UTM. See our Fortinet FortiGate-VM vs. Sophos XG report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.