We primarily use Cyberoam for securing our network. We also use it for VPN.
Senior IT Officer at a non-profit with 201-500 employees
Easy to use, provides VPN capabilities, and improves our network security
Pros and Cons
- "The user interface is well laid out and understandable."
- "Our experience with this product so far has been wonderful."
- "Sometimes, users are timed out intermittently."
- "Sometimes, users are timed out intermittently."
What is our primary use case?
What is most valuable?
It is not possible for anyone to enter our network until after they are able to log in, which is the most fascinating aspect for me.
The user interface is well laid out and understandable.
What needs improvement?
Sometimes, users are timed out intermittently.
We have had trouble logging into the firmware.
For how long have I used the solution?
We have been using Sophos Cyberoam UTM for almost 10 years.
Buyer's Guide
Sophos Cyberoam UTM
February 2026
Learn what your peers think about Sophos Cyberoam UTM. Get advice and tips from experienced pros sharing their opinions. Updated: February 2026.
884,976 professionals have used our research since 2012.
What do I think about the stability of the solution?
This is a stable product.
What do I think about the scalability of the solution?
Cyberoam UTM is a scalable solution. Everyone on our network uses it, so it protects the whole organization. There are perhaps 300 or 400 people.
How are customer service and support?
The customer support is wonderful. We only had to contact Sophos once. They helped us and it was awesome.
How was the initial setup?
The first time you configure the device, you may find it complex. However, in time, you will see that it is simple. It's well laid out and fine to use. The deployment will take approximately a week.
What about the implementation team?
We implemented in-house and when we experienced problems, we contacted the reseller to assist.
What's my experience with pricing, setup cost, and licensing?
We paid for a two-year FullGuard license that includes support.
Which other solutions did I evaluate?
Cyberoam will be reaching end-of-life in two years, so we will be moving to something else. We think that if we upgrade to Sophos XG, some of the problems that we are having could go away.
What other advice do I have?
Our experience with this product so far has been wonderful. Everything about it is fine and I would recommend it to everyone. That said, there is always improvement that one can make at all times.
I would rate this solution an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sales Engineer at a tech services company with 51-200 employees
It works fine but needs a better VPN client
Pros and Cons
- "It has been working fine. You just turn it on, and it works."
- "It has been working fine, you just turn it on and it works."
- "It should have a better VPN client. We decided to find something different than Cyberoam because of the VPN client software. It would be nice to have a user interface not only in English but also in different languages."
- "It should have a better VPN client. We decided to find something different than Cyberoam because of the VPN client software."
What is our primary use case?
It is the gateway to the internet connection in our company.
What is most valuable?
It has been working fine. You just turn it on, and it works.
What needs improvement?
It should have a better VPN client. We decided to find something different than Cyberoam because of the VPN client software.
It would be nice to have a user interface not only in English but also in different languages.
For how long have I used the solution?
I have been using Sophos Cyberoam UTM for ten years.
What do I think about the stability of the solution?
It is stable. There have been no problems with it.
How are customer service and technical support?
I don't have any experience with technical support because we did not use technical support.
How was the initial setup?
It was quite easy to configure this device. There was a very nice Cyberoam knowledge base on the internet, so it was quite easy to configure the whole device.
What about the implementation team?
We ordered the device, and our partner commissioned it. We manage it ourselves. There are two persons responsible for the network setup in our company.
What's my experience with pricing, setup cost, and licensing?
It is not cheap.
What other advice do I have?
We are in the process of changing the firewall in our company. We have been using Sophos Cyberoam UTM for ten years, and now the device is quite old. It has been working fine, and we are looking for new equipment only because of the age of this device. We have requirements for features like filtering, VPN connections, and we are trying to find the best solution for our requirements at a reasonable price.
I would rate Sophos Cyberoam UTM a five out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Sophos Cyberoam UTM
February 2026
Learn what your peers think about Sophos Cyberoam UTM. Get advice and tips from experienced pros sharing their opinions. Updated: February 2026.
884,976 professionals have used our research since 2012.
Solutions Consultant at a comms service provider with 501-1,000 employees
A stable security solution, but the interface needs improvement because it is not user-friendly
Pros and Cons
- "The product, itself, doesn't seem to have any bugs or glitches."
- "This is a managed service, which means that the customer does not need to purchase hardware and employ a system integrator to install it."
- "Cyberoam UTM needs to have more certifications with third-parties, such as NSS Labs."
- "In summary, I don't think that Sophos Cyberoam UTM is a friendly product to work with, and I would recommend the solution by Fortinet instead."
What is our primary use case?
We are a service provider and Sophos Cyberoam UTM is one of the security products that we have experience with, in that capacity. It is primarily used for layer three gateway protection.
How has it helped my organization?
This is a managed service, which means that the customer does not need to purchase hardware and employ a system integrator to install it. Rather, they just have to subscribe to it. The service includes reports that we provide to the clients.
What is most valuable?
The most valuable feature is the layer three gateway protection.
What needs improvement?
Cyberoam UTM needs to have more certifications with third-parties, such as NSS Labs.
The GUI is not very user-friendly and should be improved. One of our customers had trouble with the configuration and needed somebody to help manage it for them.
The vendor needs to generally invest more in the development of this product.
What do I think about the stability of the solution?
The product, itself, doesn't seem to have any bugs or glitches. However, one of our customers had a lot of trouble with it because it wasn't being managed.
How are customer service and technical support?
I have not been in contact with technical support.
Which solution did I use previously and why did I switch?
We recently had a customer that was using this product, although we later persuaded them to switch to the Fortinet product, FortiGuard UTM. The suitability of Cyberoam UTM depends on the required sizing.
What other advice do I have?
In summary, I don't think that Sophos Cyberoam UTM is a friendly product to work with, and I would recommend the solution by Fortinet instead.
I would rate this solution a five out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Assistant Engineer - Network Solutions at Sri Lanka Telecom Services
Useful data quota features, but scalability is an issue and the signature database could be enhanced
Pros and Cons
- "Having a firewall solution with a data quota is very important when the bandwidth is limited, which really distinguishes it from other products."
- "Having a firewall solution with a data quota is very important when the bandwidth is limited, which really distinguishes it from other products."
- "When it comes to web filtering and application filtering, it does not contain enough signatures to determine all of the sites that need to be blocked."
- "When it comes to web filtering and application filtering, it does not contain enough signatures to determine all of the sites that need to be blocked."
What is our primary use case?
We are a solution provider and Sophos Cyberoam UTM is the main product that we sell. We also use it as part of our own network security solution as well.
The primary use cases are setting data quotas on a per-user level, web filtering, and granting or denying access to resources. In Sri Lanka, the data is always limited, which is one of the biggest problems that we have.
How has it helped my organization?
In some companies, productivity is not as good because people are using sites like Facebook and YouTube. This can consume a lot of data without the organization being aware of it, and Cyberoam is really good in these kinds of cases.
What is most valuable?
Having a firewall solution with a data quota is very important when the bandwidth is limited, which really distinguishes it from other products. When it comes to small and medium-sized organizations, one of their main concerns is that their data quota is not exceeded. It is quite an advantage for the administrators.
There is training material available on the website for the administrators to learn how to set it up and use it. This is very helpful and can be done easily with a one or two day course.
What needs improvement?
When it comes to web filtering and application filtering, it does not contain enough signatures to determine all of the sites that need to be blocked. This is something that higher-end firewalls are better at.
For how long have I used the solution?
I have been working with Cyberoam for the past four years. My company has been using it for at least five or six.
What do I think about the stability of the solution?
Prior to the acquisition of Cyberoam by Sophos, the product was not very stable. Currently, it is really stable and we are happy with it.
What do I think about the scalability of the solution?
One of our clients has 200 employees and they are all relying on protection from Sophos Cyberoam UTM. Nonetheless, it is all on-premises and it does not work through the cloud, so I don't consider it to be a highly scalable product. I would say that it is better for a company with a single branch, rather than for one with multiple branches or with branches connected to a head office.
How are customer service and technical support?
Although we have people who are knowledgable about the product, if there is a level of configuration that we are not used to then we contact our distributor for help.
Which solution did I use previously and why did I switch?
I have also worked with similar products from Cisco and I find them quite difficult to set up compared to this. Cisco also has training available, but I think that you will need two weeks or a month to learn how to set it up and maintain it.
How was the initial setup?
The initial setup is between easy and intermediate. For a basic configuration, it is straightforward. I would say that compared to a Cisco product, it is easier.
What about the implementation team?
We have engineers who are qualified and we deploy Cyberoam for our clients.
For companies with approximately 200 employees, having two or three system administrators is enough to maintain it.
What's my experience with pricing, setup cost, and licensing?
This is a cost-effective solution compared to other vendors, such as Cisco.
Which other solutions did I evaluate?
Our customers look at many options but they normally choose Cyberoam because of the data quota, as well as the competitive pricing. After you buy the device, you can get subscriptions for different features. Companies normally buy it for one year or three years at a time.
There are also basic features that are available without purchasing a license. An example is that web filtering is not available without a license, but the data quota management is. That comes with the appliance itself.
What other advice do I have?
When we transitioned from Cyberoam to Sophos Cyberoam UTM, we were able to back up the rules and then upload them into the new solutions. It was easy to do and within a few hours, it was set up.
If your company does not have a network administrator then this is a good option because the training makes it very easy to use. For larger, enterprise-level organizations, people will look for different solutions.
If I were rating this product only for the Sri Lankan market then I would score it an eight out of ten. However, the majority of other countries do not have the issue of bandwidth limitations, and without the quota being important, I cannot rate it as high.
I would rate this solution a six out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
IT Officer at Hospital
A stable solution that is easy to install, but the cloud integration needs to be improved
Pros and Cons
- "The most valuable feature is the IPSec forwarding."
- "All of the features are quite good and this is definitely a product that I recommend."
- "The VPN needs to be improved."
- "The VPN needs to be improved."
What is our primary use case?
We are using this solution for remote access to some of our devices.
What is most valuable?
The most valuable feature is the IPSec forwarding.
What needs improvement?
The VPN needs to be improved.
Integration with the cloud needs to be improved.
For how long have I used the solution?
I have been working with Sophos Cyberoam UTM for two years.
What do I think about the stability of the solution?
The stability is fine and I haven't had any problems.
What do I think about the scalability of the solution?
Cyberoam seems scalable but I have not looked at all of the aspects.
How are customer service and technical support?
To this point, I have not used technical support from the vendor. When I have had trouble, I just review the site and perform searches using Google.
How was the initial setup?
The initial setup is easy. We deployed over a period of six months.
What other advice do I have?
All of the features are quite good and this is definitely a product that I recommend.
I would rate this solution a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Security Engineer at a tech services company with 11-50 employees
Has good standard firewall-type functionalities as well as a good web application firewall
Pros and Cons
- "I'm more inclined towards the conventional firewall. So for me, I'm more geared towards the standard firewall type functionalities as well as the web application firewall because that seems to work fine."
- "Previously we tried to go for these large enterprises when we talked about the Sophos Firewall, and when they moved to Cyberoam XG series Firewall they were much more scalable and they're much more robust compared to earlier ones."
- "I would say there's room for improvement in terms of the GUI. Because it is better than some of the other standard firewalls. They have the drag and drop features."
- "I would say there's room for improvement in terms of the GUI."
What is our primary use case?
The majority of it is on-premise protecting the external to internal and then we utilize the features inside the Cyberoam XG series like their IPS and their web application firewall to do the filtering as well as their proxy server inside the application control.
What is most valuable?
I'm more inclined towards the conventional firewall. So for me, I'm more geared towards the standard firewall type functionalities as well as the web application firewall because that seems to work fine.
What needs improvement?
I would say there's room for improvement in terms of the GUI. Because it is better than some of the other standard firewalls. They have the drag and drop features.
Also, their logging systems need improvement because their logging systems sometimes look a bit complicated if you're not familiar with it.
For how long have I used the solution?
We have been using Sophos since the XG version, so around four to five years.
What do I think about the stability of the solution?
It's quite stable. When they first started out with the XG series it was a bit buggy but after a few releases, it became quite stable.
What do I think about the scalability of the solution?
The XG series is much better compared to the previous UTM. Because with the XG series you can actually approach the enterprise level. Previously we tried to go for these large enterprises when we talked about the Sophos Firewall. When they moved to Cyberoam XG series Firewall they were much more scalable and they're much more robust compared to earlier ones.
Most of our clients are enterprise-size. We have one customer that's using almost about 200 units of the XG series firewall. Then we have other customers using it on their larger network, so they cater to about 300 to almost 500 users
How are customer service and technical support?
I don't have any problems with technical support so far because any time I ever contacted technical support it was for a major issue. Other than that I don't have any issues with technical support.
Which solution did I use previously and why did I switch?
I previously worked with Nokia, Checkpoint, and FortiGate. Checkpoint is in the enterprise range, it is very high end. It's not a very cheap product compared because when it comes to pricing Checkpoint is very expensive. If you're comparing Sophos to FortiGate they are more or less similar. FortiGate can do a virtual firewall that Sophos cannot.
How was the initial setup?
The initial setup is straightforward. The deployment is very fast. With an engineer, it can take a few hours.
What's my experience with pricing, setup cost, and licensing?
Sophos is quite flexible when it comes to pricing.
What other advice do I have?
I would just say keep it simple, don't make it too complex. Keep it simple and then from there scale it up.
I would rate it an eight out of ten.
To make it a higher score, Sophos should look at the virtual firewall feature because most of the current players like Juniper have the option for a virtual firewall. That way you can actually split up into multiple different firewalls or one physical firewall.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. distributor
Managing Partner at O and O
Now looking for options on replacing it and adding e-mail protection
Pros and Cons
- "It did the job well at several locations at an affordable cost and was easy to maintain by the staff with better support before being acquired by Sophos."
- "Sales and support. The sales team is constantly being changed and after acquisition by Sophos, it was treated as a stepchild until they announced the end-of-life cycle with a path to Sophos XG product."
What is our primary use case?
It is a good product, but it is being phased out and replaced with Sophos XG line. Now is the time to view other options available.
How has it helped my organization?
It did the job well at several locations at an affordable cost. It was easy to maintain by the staff with better support before being acquired by Sophos.
What is most valuable?
- Threat prevention
- Support of the product by their support team was good; we had no threat issues when using the product in multiple locations.
What needs improvement?
Sales and support. The sales team is constantly being changed and after acquisition by Sophos, it was treated as a stepchild until they announced the end-of-life cycle with a path to Sophos XG product. We are now looking for options on replacing it and adding e-mail protection.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Support Engineer at a wholesaler/distributor with 201-500 employees
Solid provider of protection services but needs improved reporting
Pros and Cons
- "The most valuable feature of this product is the threat protection."
- "My primary use case of this product is as threat protection services and it works well."
- "The reporting should be improved as well as the backup."
- "The reporting should be improved as well as the backup."
What is our primary use case?
My primary use case of this product is as threat protection services and it works well.
How has it helped my organization?
This solution has improved my organization because it provides different angles.
What is most valuable?
The most valuable feature of this product is the threat protection.
What needs improvement?
The reporting should be improved as well as the backup.
For how long have I used the solution?
Three to five years.
What do I think about the stability of the solution?
The stability of the product is good.
What do I think about the scalability of the solution?
The scalability of this product needs improvement.
How is customer service and technical support?
I have not used tech support.
How was the initial setup?
I was not involved with the setup of the product.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Sophos Cyberoam UTM Report and get advice and tips from experienced pros
sharing their opinions.
Updated: February 2026
Product Categories
Unified Threat Management (UTM)Popular Comparisons
Fortinet FortiGate
WatchGuard Firebox
Check Point Quantum Force (NGFW)
Cisco Meraki MX
Sophos UTM
Check Point CloudGuard Network Security
Juniper SRX Series Firewall
KerioControl
Untangle NG Firewall
Seqrite UTM
Buyer's Guide
Download our free Sophos Cyberoam UTM Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Cyberoam or Fortinet?
- I am looking into getting a Cyberoam UTM, what do you think?
- FortiGate 200E or Cyberoam 300iNG-XP?
- When evaluating Unified Threat Management (UTM), what aspect do you think is the most important to look for?
- What UTM solution do you recommend?
- Why is a UTM solution important?
- Which tool is better for internet protection: Meraki MX or Fortinet?
- Why is Unified Threat Management (UTM) important for companies?










