Sophos Cyberoam UTM Reviews

There has been great productivity as, during working hours, I have managed to to set them to view that which relates to the nature of our business.

Content filtering, as this enables me to control that which employees can view at different time quotas.

VPN configuration is not very swift.

None.

None.

Seven out of 10.

Cisco. Changed solutions due to its command based interface.

It was straightforward and much simpler to set up than expected.

It is very reasonably priced as compared to other solutions in the market.

I only evaluated Cyberoam and found it to not be user friendly.

It is certainly worth a try as it does the job well.

Firewall, Web Filter, Application Filter, VPN SSL, VPN Ipsec. in one applicance. For a small-medium enterprise this solution is easy to manage and operate. All features are ways to control the security of you network.

Maybe network traffic analysis for malware and malicious behavior.

No.

No.

8

Yes, the older solution was very limited.

None that I remember.

None.

Yes, Fortinet.

Enjoy!

Usability: The admin interface is great and easy to use, no need to search documentation; stability and performance are what my company demands.

Web AV, Content Filter, reliable site to site VPN.

Reporting.

Close to a year, and the Sophos UTM 9 for almost two years.

Nope.

So far, no.

I never used it, but I hear it is quite good.

We use to have a few old Microsoft TMGs; it was time to replace.

If you know what you are doing it is really straightforward and quite simple to deploy, setup and then go have a drink.

The hardware has no user limit (the hardware is the limit) while the virtual edition has user limits (I do not like limits). It is a bit expensive, but totally worth the money.

Yes, Palo Alto (awesome product, but a firewall cannot be more expensive than a kidney). SonicWall, a little cheaper, but I’ve found it to be a lot more counter-intuitive to use, did not like that at all.

Go for-it! If you don't have solid knowledge of firewalls, hire someone who does.

Secure SSL VPN out of the box appliance. It just works; good web and spam filtering.

All in one UTM appliance.

Smaller CR15 units don’t have a hard disc or built in IView software. These units could do with that feature.

Very early CR15 unit prone to freeze.

No, as long as you specify the user capacity you should be OK.

When Cyberoam owned the product it was excellent. Now Sophos owns it and it's not as good.

We used to use Fortinet UTM, but Cyberoam is much better in terms of virus scanning, web filtering and spam filtering.

Very easy to set up.

Licensing is very good value for the money.

No, we didn’t evaluate other products apart from Fortinet.

Training is essential.

Site to Site VPN, and local web filtering.

The ability to have a site to site VPN, yet have the users use their local internet rather than sending all traffic back to our main site is crucial to their day to day operations. Remote VOIP phone system routing through the VPN we have extension connections to those remote campuses.

We have issues with IPS and DoS attacks taking down a couple of our sites. I've changed the IPs of the external interfaces yet the attacks still happen and the Firewall will disconnect the VPN connection as well as stop all internal traffic from flowing externally. I am still able to HTTPS to the external interface, but it takes a full reboot of the appliance to get any traffic flowing again.

Deployment only has one snag. Our VOIP system initially tried to communicate over the internet before the VPN connection is active. Once that happened, unsuccessfully, the phone switch stops trying. But support was able to diagnose the problem and come up with a solution to keep traffic blocked going to the internet, causing it to wait for the VPN to be active and traffic flow successfully.

Seems like the main instability I have found is with my Austin site and the DoS attacks that take down the VPN and internet ability for the local site. I have 7 remote sites and this is the only one that has these issues regularly.

Yes, currently with the Sophos buy out of Cyberoam. My CR15iNG models show not to be upgradable to the new Sophos IOS. Meaning I have to purchase new equipment to get any of the new features and performance. Causing me to investigate other firewalls.

I have always had great luck with customer service. I have been with them for so long that they know me and are pretty responsive to any issues I've had. I have had hardware issues in the past and received a replacement the next day. I've also been on the phone for quite some time for them to diagnose an issue I have and come up with a good solution. While their support is not in the US, I have not had a problem getting someone on the phone when I call.

There is always another level. First level of support is very capable of helping with configuration issues. While when something more complicated is in need they have engineers to speak with and view your appliance to be sure they have all the information and diagnose appropriately.

We used Cisco firewalls prior. They worked great, were more complicated to setup and cost significantly more initially and to renew each year.

Very straightforward for setup. I had a few issues with my VOIP setup but once that was figured out setup for all other sites was a snap.

In-House deployment.

Much less travel expense. Even when I have issues, as with my Austin site, I'm able to rectify them remotely in most cases. With the Cisco I had to travel if I was needing to change the configuration.

These, CR15iNG remote/small office firewalls, units are pretty inexpensive and renewal pricing is well worth the support cost. They do not have a hardware replacement support agreement at this time with Cyberoam. I do believe Sophos is changing that portion of the support agreement though.

Not really, we had the Cisco in place. We had a vendor at the time that was really high on Cyberoam as they have done the evaluation of others for us.

I liked the product so much I purchased one for my home as well.

Prior to Sophos taking over I had a great sales support staff and technical staff. Since that has lagged a bit. I'm hoping that with my upgrade to the Sophos OS that will change, if I stay with their product.

Most valuable feature I am using I would say is the bandwidth management for users. I have users who misuse the net and I have given them caps so it is properly utilized. Another feature I use is the VPN. I have an entity that requires 24x7x365 connectivity and the Cyberoam is very simple when it comes to monitoring that or refreshing that connection.

A simple example would be the bandwidth usage. We do not have misuse of bandwidth and the firewall and anti-spam filter work great for me. I see a lot of dos attacks that are stopped which is also a plus point. So organizations productivity is higher thanks to the Cyberoam as users are restricted from unnecessary websites and bandwidth is capped and company functions do not suffer.

Not many things would need to be added but I strongly feel it could be made more robust. For example, the cooling system in the device could do with a good revamp. There are times when the device gets too hot and begins to misbehave. Other things that could be improved are the password complexity policy and the password history policy. One thing that could be done as well is to create role based users like we have in the active directory. There are times when we have users who are not admins but need to monitor the device and access levels do not exist for such users.

We don't contact Sophos directly. It is usually through a local partner/vendor.

I would recommend for others to go and view the demo. Make sure this device will suit you needs especially in terms of expansion. Also look into support as not many times support is available. It is a simple to understand product but does require some skill to manage and maintain the device for optimal usage.

It's easy to manage and handle. BW management and BW quota with limitation policy is easily deployed.

Flat network was there and internet surfing was high. To minimise the risk and BW allocation, Cyberoam is used and it is very productive.

The dashboard could be improved.

Since 2013

We've had no issues with deployment.

We've had no issues with stability.

We've had no issues with scalability.

8 out of 10

9

Yes

The setup was not complex.

We implemented it in-house.

The ROI is satisfactory.

We evaluated Dell Sonic.

• NG Firewall
• Application Filter
• Web Filter 
• IPS

All these features are valuable to us because we can block malicious and unproductive application and sites to improve productivity and security in our network, audit users and machines and protect us against exploitation.

It's improved productivity as well as user and network security.. It's helped with internet access management and provides security against external attacks.

We have had issues with malicious sites and external scans.

We didn't have any issues with deployment.

We haven't had issues with stability.

We haven't had issues with scalability.

You should hire a Cyberoam specialist to manage it.