Business Security Software

Sophos firewalls haven’t changed much in terms of functionality in years. The configuration may come with a newer UI, but underneath it still feels like the same basic firewall.

What’s been most frustrating for me is that there still isn’t a straightforward way to manage VoIP—an extremely common part of any modern network—without having to drop into the CLI backend and disable VoIP inspection. It ends up being an all-or-nothing setting: either it’s on or it’s off.

I’ve run into a similar limitation with DHCP options. Yes, the feature exists and it has been added, but it’s still very basic and doesn’t really support more modern management approaches for other devices, like Unifi APs. Review collected by and hosted on G2.com.

We initially deployed Sophos Firewall because we needed a way to manage firewalls in remote geographic locations where we couldn’t dispatch a technician. It also provided customer reports that met our clients’ requirements, which was an important part of why we chose it. Review collected by and hosted on G2.com.

The main downside is the complexity, especially during the initial setup and policy configuration. It’s not very beginner-friendly and often requires experienced engineers to deploy and manage properly. Licensing can also be confusing, with multiple bundles and add-ons that are not always clearly structured. Additionally, the cost is relatively high compared to competitors, and in some cases, support response times or update processes can be slower than expected. Review collected by and hosted on G2.com.

Check Point NGFWs help solve the challenge of protecting the network from increasingly sophisticated cyber threats while maintaining visibility and control across all environments. Instead of relying on multiple disconnected security tools, it consolidates threat prevention features like intrusion prevention, anti-malware, sandboxing, and encrypted traffic inspection into a single platform. This significantly reduces security gaps and ensures that threats—including zero-day attacks—are detected and blocked in real time. Review collected by and hosted on G2.com.

One downside is that advanced configuration options are limited. If you want very deep or custom networking rules, it may feel restrictive. Pricing can feel a bit high for small teams, especially when compared to basic VPN tools. Some features require time to fully understand, especially if the team is new to zero trust concepts. The product works very well, but debugging rate connection issues can still take time. Another small drawback is that logs and advanced analytics could be more detailed for deeper troubleshooting. Review collected by and hosted on G2.com.

NordLayer solves the problem of secure access for modern, distributed teams. Traditional VPNs were built for offices, not for remote-first teams and cloud systems. The biggest benefit is simplicity with security. I don't need to design complex network rules or manage VPN servers. NodeLayer handles most of that for me. It helps reduce security risks by limiting access based on roles and identity. Even if credentials are compromised, access is still controlled and limited. From a backend and operations point of view, the NoderLayer keeps internal services private. APIs, admin panels, and databases don't need public exposure. Another major benefit is easy onboarding and offboarding. New team members can get access in minutes, and leaving users can be removed instantly. It supports remote work very well. Team members can securely access systems from anywhere without complicated setup. NordLayer also helps with compliance and audits. Centralized access control and visibility make reviews much easier. It reduces operational overhead. No need to manage VPN infrastructure, patch servers, or rotate certificates manually. Another benefit is consistency. Access behavior stays the same across locations, devices, and teams, which avoids confusion. It improves incident response. If something looks risky, access can be restricted or revoked immediately. Norlayer also supports scaling without pain. As teams or systems grow, security doesn't become harder to manage. It helps reduce developer friction. As a backend developer, I don't have to constantly think about IP whitelisting or temporary access rules. Things just work once access is given. NordeLayer makes environment separation safer. Access to staging, production, and internal tools can be clearly separated, which reduces the chance of human mistakes. It works well with cloud-based systems. Whether services are on AWS, GCP, or internal servers, NORDLayer fits naturally into a cloud-first setup. The platform encourages better security habits without forcing strict or painful workflows on the team. It reduces the need for shared credentials. Each user has their own controlled access, which is safer and easier to track. The setup feels future-proof. As security needs to change, NordLayer already follows modern best practices like identity-based access. It gives peace of mind during external access scenarios, such as vendors or short-term collaborators, because access can be limited and time-bound. It saves time during onboarding and offboarding. When someone joins or leaves the team, access can be added or removed quickly, touching multiple systems. It lowers the risk of accidental exposure. even if someone's device is compromised. Access is still controlled through identity and policies. The dashboard makes it easy to understand who has access to what without digging through configs or documentation. It works quietly in the background. Once set up, developers don't need to think about it daily, which is ideal when focusing on backend work. It helps teams stay audit-ready. Access logs and user activity are available when needed, without extra tooling or manual tracking. It reduces dependency on the office network. Team members can work securely from anywhere without needing a fixed IP or VPN setup. It helps avoid misconfigurations by providing a clear default, which is useful when setting things up quickly. It gives peace of mind during deployments because access rules are already in place and don't need last-minute changes. Review collected by and hosted on G2.com.

Being in an environment that has mobile users bringing their own devices and using public wifi the pay per device model is difficult to stomach. Over 150 of our licenses are just user's cell phones. Review collected by and hosted on G2.com.

Tunneling, traffic shaping, and more. It is like an eye in the sky. The dashboard on our parter portal allows us to see all of our appliances at once and manage from afar. Review collected by and hosted on G2.com.

One thing i dislike about its licensing might be complex, it have different license types like CPU cores VM models makes it a little confusing. the others are like the dependance in the performance of the VM as we know it is a VM based unlike the hardware appliance this one depends on the RAM, Hyper-V performance, and also its CPU allocation. so the firewall performance is dependable on the VM. if the VM resources are not optimized the firewall may not perform as expected. Review collected by and hosted on G2.com.

1 Reducing Security tool Complexity - as we know many organization this days use separate tools, FortiGate-VM integrates multiple security capabilities like antivirus IPS, VPN in a single platform and integrates with Fortinet Security Fabric.

2 It Support Business scalability - it can scale easily by adjusting VM resources or deploying additional instances. Review collected by and hosted on G2.com.

Initial configuration and integrating with your organisation EDN will be rigid and somewhat tedious process initially.

For beginners it would really take quite some time to root through all the options it has considering its powerful nature across security aspects. Review collected by and hosted on G2.com.

Its integration with majority of clouds.

Dashboards at different layers like WAF, network, CISP,CDR< workload protection makes it ideal choice for most projects.

Manual effort in securing or monitoring is really less when compared to regular products. Review collected by and hosted on G2.com.

The depth of the available features can feel a bit overwhelming and complicated at times, but overall there isn’t much to dislike. Review collected by and hosted on G2.com.

Palo Alto NGFW has helped us secure our network at the edge, and it also provides added monitoring and troubleshooting capabilities that make it easier to pinpoint network issues and address security concerns. Review collected by and hosted on G2.com.

Nothing special. Actually, I'm very satisfied with GassWire. Review collected by and hosted on G2.com.

So basically, I use GlassWire to monitor my network usage. I have limited internet connection. So I need to manage my data package for the entire month. By using GlassWire, I can get an overall idea about which apps on my laptop use more data and, according to that, adjust their usage. Review collected by and hosted on G2.com.

I can't point out anything bad in particular. Review collected by and hosted on G2.com.

With their Firebox devices, I protect my clients' perimeter networks, securing them against external intrusions, allowing secure remote connections, etc. They are a great ally and together with Endpoint Security, they provide a completely free XDR layer. Review collected by and hosted on G2.com.

he configuration software is only available for Windows. Some firewalls offer Wireguard support, which is still missing here, as this is the only solution available, especially for smaller third-party companies that we connect with. Review collected by and hosted on G2.com.

Except for a second firewall (for UCM), it is the only authenticator, access point, network protection and router we have. The configuration is logical and easy after a short training period. This creates more time for other activities. Review collected by and hosted on G2.com.

The initial deployment can be complex, especially when scaling across multiple virtual networks. Fine-tuning policies and integrating with other monitoring tools took longer than expected, requiring extra training for the team. Pricing can become significant as the number of virtual instances grows. While the firewall is powerful, the documentation could be more user-friendly for first-time administrators. Review collected by and hosted on G2.com.

The VM-Series Virtual Firewall has helped us centralize security across multiple virtualized environments, including cloud and on-premises workloads. Before using it, managing separate firewalls for each instance created inefficiencies and increased the risk of misconfigurations. Now we can enforce consistent policies, detect threats faster, and reduce manual monitoring. This has improved our incident response times and overall confidence in network security. However, setting up complex policies and integrating with existing monitoring tools still requires extra effort, and scaling the solution can increase costs. Review collected by and hosted on G2.com.

If I had to point out a downside, it would be that the interface can feel a bit overwhelming at first, especially if you’re new to networking. Some advanced features take time to understand, and the learning curve can be steep. It’s powerful, but you do need some technical knowledge to get the most out of it. Review collected by and hosted on G2.com.

Netgate pfSense solves the problem of having limited control and weak security with typical off-the-shelf routers. It gives you advanced firewall protection, better traffic management, and reliable VPN options in one place. For me, that means more control over my network, better security, and the ability to customize everything based on my needs instead of being stuck with basic features. Review collected by and hosted on G2.com.

I'm not happy with the complexity involved when using Azure Firewall, especially when migrating. Also, there should be a feature to check if an app is blocked, and this should include a mailing mechanism. It would be better if there were no profile view, and it needs better integration with Outlook's backend. The initial setup wasn't very easy, requiring our team leaders to handle the integration. Review collected by and hosted on G2.com.

I use Azure Firewall to block unwanted IPs and enable access to specific IPs. It's easy to integrate with our environment and more user-friendly than other solutions, which is beneficial for us. Review collected by and hosted on G2.com.

Nothing as you guys are helping to build firewalls to protect us from cyber attacks, so i feel there is nothing i can say, i feel thhis is helpful for people Review collected by and hosted on G2.com.

Cloud NGFW acts as a security measure for cloud operations. It protects cloud applications by preventing unauthorized access and ensures smooth operation, reducing team workload. Cloud NGFW stops threats, provides clear visibility, and reduces the time needed for security management. It offers a smart, automated security system for all cloud operations. Review collected by and hosted on G2.com.

I dislike that some Cloudflare SSE & SASE features still feel newer and less mature than long-established competitors, and the dashboard can be confusing when you’re first learning it. Policy setup sometimes takes more steps than expected, and certain advanced integrations or detailed documentation aren’t always as complete as they could be. Review collected by and hosted on G2.com.

Cloudflare’s SSE and SASE platform addresses the challenge of securing users, devices, and applications without the need for slow VPNs or complicated on-premises hardware. It unifies Zero Trust access, web filtering, threat protection, and traffic inspection within a single system, which has helped me reduce the number of separate tools I need to oversee. Since everything runs on Cloudflare’s global network, both remote and on-site users experience improved performance, and security policies remain consistent. In summary, it streamlines operations, accelerates access, and enhances security throughout the organization. Review collected by and hosted on G2.com.

One of the main drawbacks of Zscaler Internet Access is performance and latency issues. Since all traffic is routed through Zscaler’s cloud, users sometimes experience slower internet speeds and delays, especially during peak hours or in certain regions.

I also find that troubleshooting can be difficult. Logs and visibility are sometimes limited, making it harder to quickly identify and resolve issues when something breaks.

Additionally, Zscaler can feel overly restrictive at times. Its aggressive security policies may block legitimate websites or applications, requiring frequent manual adjustments and exceptions.

concern is cost. Zscaler is considered a premium solution, and licensing—especially for advanced features—can be expensive compared to traditional firewalls or alternative solutions. Review collected by and hosted on G2.com.

Zscaler Internet Access (ZIA) primarily solves the limitations of traditional firewall-based security, which struggle to protect modern, cloud-driven environments. Legacy setups often fail to detect advanced threats, lack visibility into encrypted traffic, and create performance bottlenecks due to backhauling traffic through data centers.

One major problem it addresses is cybersecurity threats like malware, ransomware, and phishing. ZIA inspects all internet traffic (including SSL/TLS encrypted traffic) in real time.

Benefit: Users get secure and seamless connectivity without performance degradation from VPN backhauling.

ZIA also solves the problem of poor visibility and control over user activity and cloud applications. It provides centralized policy enforcement and granular controls over web traffic and SaaS usage. Review collected by and hosted on G2.com.

Occasionally, alerts may require manual review to determine their real impact, which can add extra steps to the workflow.

That said, these limitations are relatively minor and can usually be managed with proper configuration and familiarity with the platform. Review collected by and hosted on G2.com.

It helps me stay protected from malware, viruses, and suspicious files without having to think about it all the time. I don’t need to constantly check settings or worry if my computer is exposed, because it runs in the background and does its job.

Overall, it helps me avoid infections and interruptions, so I can focus on what I’m doing instead of worrying about security. Review collected by and hosted on G2.com.

The quality of the support team is not good, and not providing the support on time and making too long to support.

It is tough to export the logs and reports and not user-friendly. Review collected by and hosted on G2.com.

Everyone should use this product so make our data safe. Firewall will help us in many ways like vpn,load balancing, content filtration, Ip filtration, logs and reports. So we have many features in buying the firewall so choose the best products like Huawei. Review collected by and hosted on G2.com.

We got more problems before using this firewall. We need to balance the load manually, and that makes us very hard. We were allowing all our employees to use all websites and that is not fair. So these are the reasons to switch to a firewall. Review collected by and hosted on G2.com.

The initial setup is time taking and it will require some time for you to get the whole idea about it. Review collected by and hosted on G2.com.

We are having an Azure cloud infrastructure and we are using fortigate as the firewall also the same is used as the vpn to connect from on premise to cloud. Review collected by and hosted on G2.com.

It Consumes a significant amount of CPU and memory resources, which can impact the performance of the underlying virtualization infrastructure.ASAV firewall software offers a comprehensive solution for network security; it requires significant resources to deploy, configure, and manage. Review collected by and hosted on G2.com.

Cisco ASAv solves a range of network security problems and provides several benefits, including enhanced security, simplified management, improved scalability, and compliance Review collected by and hosted on G2.com.