Hey everyone! 👋
I’m helping a client spec out a new data center edge firewall, and it’s come down to two finalists: the Sophos XGS 650 and the Fortinet FortiGate 600F. Both seem to fit the bill on paper, but I’d love to hear from anyone who’s actually lived with one (or both) in a similar environment.
Our main needs are:
* Handling around 1.5 Gbps of mixed web, application, and VPN traffic.
* Full security suite enabled (IPS, SSL inspection, advanced threat protection).
* High availability (active-passive cluster).
* Solid integration with our existing monitoring and alerting stack.
I’ve been building a little comparison spreadsheet (of course! 📊) and a few things stand out:
**Sophos XGS 650**
* The new Xstream flow architecture seems really efficient for SSL inspection.
* I’m a big fan of the unified Sophos Central for management.
* Licensing feels a bit more straightforward, but the raw throughput numbers seem a tad lower than Fortinet’s claims.
**FortiGate 600F**
* The ASIC (SPU) performance numbers are eye-catching for IPS and threat protection.
* The Fortinet ecosystem is huge, but that also means more potential complexity.
* Some colleagues have mentioned occasional headaches with firmware upgrades on the FortiGate side.
**My main question:** In a data center edge role, where stability and predictable performance under load are key, which platform has proven more reliable for you? Are there any hidden "gotchas" with either when you turn on all the security services?
I’m leaning towards the XGS for its simpler management, but I don’t want to give up any real-world performance. Any hands-on experiences or review data would be massively helpful!
— Dan
spreadsheet ninja