Sophos Firewall Reviews

Sophos XG has greatly strengthened our network security and threat management. Its integrated EDR capabilities and seamless integration with firewalls, along with additional services like their NOC services, provide a comprehensive solution. With all these features working together, it is a complete package that ensures robust security for our clients.

One feature of Sophos XG that I found incredibly beneficial for threat prevention is its endpoint protection. It monitors all activities on our devices and effectively blocks any harmful files from infecting our machines. It has been a game-changer in preventing troubles for our customers.

While Sophos XG is a great product overall, there could be some room for improvement in its pricing since my clients usually feel like the product is on the expensive side.

I have been working with Sophos XG for five years.

Overall, the solution is stable, and we rarely encounter glitches. Any issues that arise are usually related to Microsoft updates rather than the Sophos software itself.

I would rate the scalability of the solution as an eight out of ten. The clients I work with who use Sophos are typically small enterprises.

I have worked with other firewalls like Cisco and Fortinet over my 20 years of experience. Comparing Sophos to other solutions, I have seen significant improvements over the years. While it may not have been the easiest or best software three years ago, it is continually getting better with updates. Overall, Sophos is moving in the right direction, becoming more competitive with its counterparts.

Installing Sophos XG is straightforward and typically takes around one hour for configuration, excluding the physical setup. Usually, only one person is needed to complete the installation and configuration process. It is quite easy to maintain it.

There was a time when our network faced a sophisticated malware attack that bypassed traditional security measures. However, with Sophos XG in place, it quickly detected and mitigated the threat before it could cause any damage. The seamless integration of software and hardware ensured there were no vulnerabilities or gaps in our defense.

The interface of Sophos XG is user-friendly and suitable for new users. It is continually improving, with updates addressing any issues promptly. 

Deploying Sophos XG has led to noticeable improvements in network performance. 

Overall, I would rate Sophos XG as an eight out of ten.

We are developing a software. We use the solution to protect our environment. Our main concern is to block users’ uploading.

Sophos XG is a fantastic solution. We achieved our security target after installing the solution. Our main concern was to block uploading. We were able to achieve that using the custom rules.

The product has all the latest features. It has malware protection, ransomware protection, and zero-day protection. It helps block everything.

The vendor doesn’t publish the price on the website. We must contact the agents to know the price. It is a lengthy process. It would be easier if the price details were provided on the website.

I have been using the solution for the last three years.

The tool’s stability is good. I rate the tool’s stability a ten out of ten.

We have 10 to 15 users in our organization. The tool’s scalability is high. I rate the scalability a ten out of ten.

The technical support is great.

Positive

The initial setup was difficult. We must learn everything before implementation. In the beginning, everything seems difficult. For someone who has worked on other firewalls before, Sophos XG is not that complicated to implement.

I prefer the on-cloud versions because we have control systems on the cloud. It will be much easier to handle things. If we have it on-premises, we must maintain and look after the equipment. The cloud version is much more secure and easier to maintain.

The pricing is very high. The product could be a little cheaper. It will help Sophos to compete with other brands in the market. I rate the pricing a ten out of ten.

We also use Sophos Intercept X. It is a fantastic tool. It protects PCs from malware attacks. Overall, I rate the solution a ten out of ten.

The most valuable features of Sophos XG are the ease of management and good out-of-the-box reporting.

Sophos XG requires a bit more restarting than Cisco. The main difficulty is to keep up with the current threats. The solution should have the ability to be up to date with the most recent threats.

I have been using Sophos XG for five years.

I rate the solution an eight out of ten for stability.

Sophos XG is not a scalable solution. Depending on what you want to do, you choose the right model. You cannot buy one model and upgrade it to provide higher capacity. This is true for all firewalls, where you price it up according to current plus a percentage for future capacity. Most of our clients for Sophos XG are small to medium-sized companies.

On a scale from one to ten, where one is difficult and ten is easy, I rate the solution’s initial setup a nine out of ten.

In most small to medium-sized companies, the solution's deployment takes about a day. However, planning and setting up the architecture might take longer than that. Especially in live environments, you do everything in advance and don't leave a lot to chance.

Sophos XG is a reasonably priced solution.

The solution has the ability to customize user-defined entries for more control over what you can actually set. With Sophos XG, you can use your own definitions or point to another service that uses slightly customized definitions.

Users have a tendency to go for the cloud version of Sophos XG. Over the past year, prices have unfortunately gone up with anything related to the cloud, and it's probably increasing overhead costs. The problem with the cloud is that it can be costly if you don't properly control it. You also risk ending up with nothing if you can no longer afford to pay the monthly cost.

I would recommend Sophos XG to clients who want it or specifically request it. I don't have anything against using the solution.

Overall, I rate the solution a nine out of ten.

For network security and filtering through our infrastructure, we rely on Sophos Firewall, specifically using Connect Sophos Cloud in our branches. 

Endpoint protection is crucial, so we integrate with DuoSet, and the system allows for VPN connections with various devices like SaaS, Alibaba, Fortinet, and Cisco, supporting encryption detection and more.

It's crucial for our company, as well as other companies and customers. When our customer licenses expire, they request to renew or make changes to their Sophos XGS boxes. This process is significant and managed by our technical team or engineers.

The Sophos XGS product is highly versatile and well-suited for various companies, including small, medium, and large enterprises. Its effectiveness lies in its inspection firewall capabilities, making it a commonly chosen option in our country due to its reasonable pricing. Sophos Firewall's support for VPN encryption and thorough inspection makes it a suitable choice for many companies, and I recommend it accordingly.

At the moment, I can't propose any new features. The primary concern is traffic stability, which needs improvement. Although the traffic stability is generally good, it has been noted that it can impact RAM and CPU, affecting workflow and inspection.

In my view, Sophos operates effectively in a reactive mode, focusing on static detection and forwarding traffic. However, Fortinet takes a more proactive approach, blocking both connection and route connections. While Sophos forwards any connection in both inbound and outbound traffic, I believe this is a positive aspect, especially in a country with various sizing considerations. This is my perspective, emphasizing the significance of Sophos XGS in software work.

I have been using Sophos XGS for two years. 

It's a stable solution. I would rate it around nine. There is room for improvement, especially in terms of support. As I mentioned earlier, when the CPU and memory reach their maximum capacity, the tool forwards traffic. This is a critical aspect—no inspection, no traffic, and no log.

It is a highly scalable solution. I can't provide an exact count because I work with multiple solutions, including Sophos XGS, Fortinet, and Palo Alto. Counting all the users across these platforms is challenging.

Positive

In the last two years, I have worked with Sophos Firewall, and it is an excellent firewall. It's easy to set up with encryption and inspection features. In my view, it's well-suited for all.

The initial setup of Sophos XGS has been quite smooth and user-friendly. Unlike my experience with Fortinet and Palo Alto, which posed challenges, Sophos XGS stands out for its ease of use. End users can handle the setup themselves without requiring an engineer to configure the firewall or register the device.

It's highly effective and well-suited for medium and small companies. The pricing is attractive, and our customers find it suitable for regular license renewals.

We are using it as a firewall to protect and control Internet access, as well as control other access like SAP. Some of our employees connect from remote locations, and our server is on-premises. We use this firewall for access control and also for VPN connections.

It's easy to use, and the service is good. If anything goes wrong, their support system is very reliable.

The renewal process for this box is too frequent. We purchased it five years ago, and it's expiring in 2025. So, I feel they expire it too quickly.

In future releases, this solution could have more graphical elements on the dashboard to make it easier to understand. While there are graphics and a good dashboard, there's always room for improvement.

We have been using Sophos XGS for ten years. At that time, it was new. So somebody recommended us to take this. Our service provider recommended it, and that's why we have taken it.

It is a stable solution.

It is a scalable solution. We have around 300 end users in our organization. 

The customer service and support has been excellent. 

Positive

We have worked with Cisco and Fortinet Firewalls. It's hard to compare.

Installation and understanding are a bit challenging with Cisco, whereas Sophos is easier to install and use.

We have a FortiGate firewall at another location. We recently purchased it.

The initial setup is very, very easy.

The deployment process took me more than two to three hours, including all the checks. I had a backup of the earlier Sophos firewall, so I just restored it and verified everything.

One person for support and checking, so two in total are enough for deployment and maintenance of the solution.

I would definitely advise to use Sophos. Overall, I would rate the solution a nine out of ten. 

The solution is a layer 7 next-generation firewall, which we use as a firewall and router. We customize rules to help with our security.

We like the layer 7 capability. We have a couple of servers behind the XGS firewall which understands HTTP packets. The solution offers a very accurate setup, and we can use it as a kind of reverse proxy device. Based on the connected URL, we can direct traffic to different servers without a solution.

The solution is very user-friendly, and the GUI is so good that I don't have to use the CLI. This eliminates the need for typing; clicking allows me to get to what I'm looking for.

The application is a little slow; it takes five to ten seconds to respond to every click when configuring. If we need to do significant configuration, it can take a lot of time. This might be because we have a low-end machine, and it could be faster with a high-end one.

We have been working with Sophos XGS for nine months. 

The stability has always been good, we haven't encountered any issues. 

I can't speak much to the scalability as we haven't scaled the tool. I don't think it is scalable the way I have it configured, but there is a high-availability function in the menus. I don't know if the configuration is automatically transferred to new devices.

We have 600 users working behind the solution, and it is very lightweight in terms of maintenance. Sophos provides free web access, so we can go to their website and configure the firewall, which is automatically passed on to the device.

I escalated a question regarding a license issue, and they solved it very quickly, so I rate the tech support highly.

Positive

The initial setup was straightforward. It has an old-style GUI, so we just followed the steps, and much of the setup was automatic.

We implemented via an in-house team. 

We must purchase separate web server licenses, as they are not included in the regular device license. I would rate the product an eight out of ten in terms of price. It's relatively affordable.

I would rate this solution a ten out of ten. 

For personal use, I suggest pfSense, but for business applications, Sophos is great because they have better support and offer an excellent GUI, which makes XGS very easy to operate. pfSense offers console access and is a lot more configurable, which is why I prefer it for home use.

I would advise potential customers to get a free trial license, as it offers the freedom to trial the solution to see if it has the functionality and configuration options required.

In terms of the firewall, I'm using Sophos X on everything, including the VPN, firewall, and endpoints.

Everything about the product is okay. 

I cannot single out anything specifically, as the firewall is working perfectly. The endpoint is helping me greatly and people have been able to work from home using the VPN. It has been great.

The pricing has been fine so far.

It has a pretty straightforward initial setup.

The solution's quite stable. 

The solution is scalable. 

Technical support has always been very helpful.

In terms of updates with the current technologies and current trends, which we're always exposed to, they update their databases frequently. 

It quickly detects issues. 

It is a plug-and-play system. 

Mainly, it's a cloud-based firewall for cloud-based endpoint protection. I can be able to manage my devices from anywhere without configuring all these VLANs and whatnot.

If I could host my emails using an email transfer agent, hosting it, it would be ideal.

The configurations can be a bit complex. It may be a while before you understand the configuration process.

If you do not have any experience with the product, you may struggle to set it up.

I'd like to see more integrated services from Sophos so I can handle everything from one place without a third-party. I would like to have email hosting and management integrated into Sophos XGS.

I've been using the solution for more than five years now.

It is very stable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution can scale. It just depends on the model we are using. For example, on an XG transit, I can add as many users as I want. On XG 105, I can only have limited users. It depends on the package.

We have more than 80 general users on the solution. We use it intermittently.

I've dealt with support several times. They were awesome. We found them to be helpful and responsive. They are quite knowledgable. 

Positive

The setup process is perfectly okay. I'm an IT administrator. It's not very difficult for me to get everything up and running. I also need to check the integration. 

I'd rate the initial setup a four out of five in terms of ease of execution. 

In terms of pricing, it's good. They've been giving us some promotions where we would pay for two years and get an extra year free. We appreciate that level of savings.

We paid for a three-year license a while ago. I can't recall the exact amount that was paid. It was likely around $12,000 or less - around $4,000 a year.

It's one of the best pricing strategies they have used. Initially, if I were paying for a year, I would pay around $5,000 or $6,000. 

It is very affordable for a small enterprise. It is very competitive.

I am looking into Sophos NAC.

We are a customer of Sophos. 

I'd rate the solution eight out of ten.

The performance is good. 

It is scalable.

Technical support has been helpful in general. 

The fabric solution, the access points, and the WiFi, is not being delivered to Egypt due to some regulations. It's hard to get any devices in Egypt right now.  I need one solution and one centralized interface to monitor all the switches, access points, firewalls, and everything. I found this in Fortinet. Sophos is falling short.

We'd like an interface that can monitor everything. 

The costs could be better. 

I've used the solution for two to three years. 

I can't speak to the stability, however, the performance is good. 

The solution can scale well. It's not a problem to expand it. 

We have about 400 people on the solution currently. 

Technical support is good. 

We also worked with Fortinet. While we are on Sophos right now, we're also moving again towards Fortinet. I'm waiting on the delivery right now. 

I am implementing a new public solution for access points and switches. I'm going to FortiGate since it offers a full solution, and it is already delivered to the country, Egypt. With the Sophos access points, they are not delivering regarding regulatory issues and something like that.

We do have some people on the solution that maintains it. I don't handle the initial step myself. We have a team that does it. 

Our own team can handle the initial implementation.

The pricing of Sophos is the same as Fortinet. In general, the solutions in the market are all around the same price. 

When you go to finalize the project and include another competitor, the distributor tends to give a big discount on the solution to exit to another one.

I'm a customer and end-user. 

I don't know which version of the solution we're currently on. I'm the director of the department, and therefore, I'm not working with it directly. There's a team that's working on the versions and upgrading software and so on, while handling the technical issues. 

I'm just dealing with the high level of design or decision-making.

It's not a bad solution. It's a good option and it takes a market share in Egypt. However, I like Fortinet as they have a device that's reaching in the market and the cost is not bad. They also have an impressive monitoring interface with FortiAnalyzer and FortiManager. 

I'd rate Sophos seven out of ten.