Sophos Firewall Alternatives

The Fortigate NGFW contains excellent features to customize policies across orgs, locations and even policy or user specific. The graphics are easy to navigate and understand with the management console. The reporting for threat prevention across multiple blades of the firewall is accurate. Cloud integration takes about a couple of hours but the status checks and performance can be handled both in person and with remote access.

Checkpoint Quantum has performed very well due to its stability, high level of security, and ease of administration; although some advanced configurations can be complex initially.

Palo alto is a fantastic vendor to work with and their firewalls are the most advanced and best I've configured and used.

The teams at Cisco have gone above and beyond in consulting and supporting our organization as the need arise

Destined for a portion of our business network, Huawei's USG devices have provided us with a fast, powerful, and efficient solution for managing this infrastructure. The level of integration with the existing infrastructure has been a pleasant surprise, as has their robust data encryption capabilities.

- Issues that didn't go well For a project to install a UTM at a new site, we planned to create a clone of an already operational M270 and install it there. When creating the clone, we took a backup in FXI format instead of XML format and imported it into an identical unit in our inventory. However, we discovered that we couldn't manage or monitor the device from the WG management server. Ultimately, we learned that importing in FXI format to a different unit, even if it's the same model, is not supported, requiring us to restore from a backup made before the import. While this was mentioned in the documentation, it was very unclear, and we hope for improvement. We believe that adding a function to check whether the image was taken from a different unit during FXI format restoration would prevent such incidents, and we hope for its implementation. Furthermore, although it's unclear if it was related to this process, monitoring by the WG cloud and WG management server stopped working. We contacted the support center, but it took three weeks of back-and-forth communication to resolve the issue. We received advice on workarounds and recovery methods and were able to recover, but it took far too long. In particular, the process of obtaining logs and reproducing events for the support team to understand the situation was repeated multiple times, which was time-consuming. - What went well While there were many issues with the management functions, and although the management functions in general were almost unusable, we were able to launch the service according to the planned schedule.

Juniper equipment has been reliable, keeping our company's site-to-site networks always up and running with failover.

We are very satisfied the use of the firewall in Microsoft Azure. We use it more than eight years. In combination with the onpremise NG in our central DC and offices, we have a meshed infrastructure managed from one central point.