Cisco Firepower 4100 Series vs. Sophos UTM

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Incentivized

Sophos is a very powerful anti-virus program that can be used in small and big businesses. Sophos has multiple features that can be customized to fit IT and business needs. Sophos would be less appropriate for IT personnel that do not have the time or knowledge of implementing the problem. The setup of its policies can be very complex.

Incentivized

• Policy management in the GUI. I'm old-school, and still create ACLs in the CLI, but using the GUI for this is very nice.
• Event monitoring and reporting is great, and you can get very granular when it comes to what information you are viewing.
• I really like the troubleshooting features that are built in, especially the packet tracer and the ability to generate and download a troubleshooting package to review or send to TAC.

• Firewall Protection. The protection is unmatched, setup it a little daunting, but once set up it pretty much runs itself.
• Site-to-site VPN. Super easy to deploy so we are able to network all our sites together.
• The DHCP server function is actually really nice, I prefer using it over the traditional way of using a DC for DHCP.

Incentivized

• When deployed as Firepower Threat Defense, configurations cannot be made within the device itself.
• Troubleshooting can be difficult if the Cisco Firepower 4100 Series firewall is managed by the Cisco Firepower Management Center.
• There are two operating systems in Cisco Firepower 4100 Series, firmware upgrade process will take a long time.

• Better standard support, it used to be great, now, not so much (for paying customers, that only aquired the Hardware)
• Better wireless solution, there is always room for that, now that everybody needs robust wifi, even at home!
• Faster and more robust wireless Access Points, or different vendor-like compatibility.

Incentivized

It not easy to understand the different features it offers. Sometimes you need to spend a couple of minutes to implement a change or even open a ticket with cisco tac to figure it out. Once support is on the phone with you they know how to resolve problems. But it's not an intuitive tool

Incentivized

The interface is no non-sense and easy to understand. No need for any consultants to help implement this solution. The performance is consistent and solid. Paired with a good amount of firmware and definitions, it's hard to find any fault in this product. It's interoperability with other Sophos products make a compelling argument to invest in more Sophos products.

Incentivized

I find the support fair. The wait can be frustrating when dealing with fire. The pandemic has not helped with this. Although the wait can be long, the support reps are knowledgeable and was able to resolve the issues I was facing.

Incentivized

We switch to Palo Alto due the amount of tickets open with Cisco Firepower 4100 Series. It was taking a great amount of time for our engineers to fix problems. But it was a great tool when it was working as we were expecting. The fact it has a lot of instability on the releases was the deciding factor.

Incentivized

The Linksys was a router, so the comparison isn't quite the same, but I previously worked on a SonicWall firewall. The setup is by far easier on the Sophos UTM device. That alone makes it enticing, but thrown multiple services options such as email and web filtering, endpoint support, seamless WAP and RED device integration and it wasn't a very hard decision to make.

Incentivized

• Quickly respond to incidents using vpn remote access
• VPN L2L used to establish connections with global providers
• Up to 2000+ vpn access without having performance issues
• Granular access with policy groups based on the AD user

Incentivized

• Sophos has provided a secure Firewall for us.
• Integration with Sophos Central makes it easier to manage both.
• Site to site VPN Failover groups has caused more trouble than it's worth.
• High availability doesn't recognize when you are restarting for an update.

Incentivized