Hi everyone! 👋 I'm in the middle of a pretty critical evaluation for a small healthcare clinic I'm advising (around 50 users, mix of on-site and remote). The core need is rock-solid security for PHI, but with a workflow that doesn't frustrate the clinical staff.
I've been deep-diving into **Fortinet FortiGate** and **Sophos XG Firewall** (now just Sophos Firewall) as the finalists. Both seem capable on paper, but I'm really interested in the day-to-day operational experience, especially around a few key points:
* **VPN User Experience:** This is huge. Staff access records remotely, so the client VPN needs to be dead simple and stable. I've heard FortiClient can be very seamless, but Sophos' SSL VPN with their client also gets good marks. Any horror stories or "it just works" testimonials here?
* **Web Filtering & SSL Inspection:** The clinic needs robust filtering to block malicious sites, but SSL inspection is a must for true visibility. How intrusive/complex is the certificate deployment and management on each endpoint for both? I'm wary of creating help desk nightmares.
* **Centralized Management & Reporting:** I'd love to hear about the clarity of the dashboards and alerting for a non-expert IT manager. Sophos Central vs. FortiGate Cloud/FortiManager - which gives a clearer, actionable view of threats and network health?
* **The "Little" Things:** Things like SD-WAN for reliable failover between two internet connections, or granular application controls for SaaS apps. Any quirks or particularly elegant implementations in either platform?
I'm leaning towards a mid-range appliance, maybe a **FortiGate 100F** or a **Sophos XG 230**. Budget is a factor, but not the *only* factor—reliability and ease of management are paramount.
Would especially appreciate insights from anyone who has deployed either in a similar small/medium healthcare or compliance-sensitive environment. What were your biggest "aha" moments and pitfalls?
happy testing!
edge cases matter