It depends of the features needed. If you only need Network Protection and Web Protection XG is the way to go. Including Sandstorm and Hearbeat compatibility. But If you need e-mail filtering SG is still the better product.
XG works quite good as Web Proxy and as Network Firewall. Even WAF is not bad at all. HeartBeat is something XG's unique but before you can go for one product or another spend at least one month to understand what is missing. For example, XG does not work well into bridge mode (there are so many limitations: https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/16903630-bridge-like-utm9) and as Email Filtering is not working good.
For the VPN part, XG works quite well (apart you cannot change the SSL VPN port, you cannot bind the VPN service to a single WAN ip).
So read XG threads and perform a full 30 days test. I would recommed even 60 days.
XG works quite good as Web Proxy and as Network Firewall. Even WAF is not bad at all. HeartBeat is something XG's unique but before you can go for one product or another spend at least one month to understand what is missing. For example, XG does not work well into bridge mode (there are so many limitations: https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/16903630-bridge-like-utm9) and as Email Filtering is not working good.
For the VPN part, XG works quite well (apart you cannot change the SSL VPN port, you cannot bind the VPN service to a single WAN ip).
So read XG threads and perform a full 30 days test. I would recommed even 60 days.
