Sophos Firewall Reviews

In some instances, we are using it in a virtual appliance in a VMware environment.

I will not rely on Sophos to build my infrastructure. For that, I will go to Fortinet or Palo Alto. However, from an end-user management perspective and the granular control and the reporting stuff, I still prefer Sophos. 

We are using Sophos as our internet gateway for specific sites that don't have to do with the backend tunneling and the infrastructure and all that stuff.

I have found some difficulties in other products, like in Fortinet, where there is no end-user visibility in a presentable form that non-technical people can interpret. I'm talking more specifically about non-technical management. You have to present something. Apart from that, the end-user integration is fine if you are using it for NCL and or as an internet gateway. Sophos allows for more visibility.

However, as far as infrastructure is concerned, if I have to apply this as a device in my data center or at any critical point, this device fails to perform. The hardware is not up to par. Even if I answered from proxy to transparent, transparent proxy to the full proxy mode, there are some hardware difficulties.

The centralized security is very good. 

The heartbeat system, the reporting management, and the electoral control that is achieved when the Sophos XGS is integrated with the Sophos endpoint is great.

It's close to the top of the line, alongside Trend Micro in terms of security reporting.

It is easy to set up.

I have observed that there are some reliability issues with these products in regard to the hardware performance and RMS.

I've witnessed many devices go down - even three on the same day. I've never seen that, for example, with Fortinet.

The stability could be a bit better.

I would like to have a proper SD-WAN orchestration solution. They are working on it. However, it still needs some improvement. Apart from that, it would be better if they provide the email gateway and the WAF not as a feature in the existing XG but as a dedicated appliance. Barracuda and Fortinet, for example, are providing dedicated services for the WAF and email gateway. Compared to that, Sophos is not up to the same level.

I've used the solution for around five years.

While their endpoint is a stable solution, their firewall needs to be improved in regard to integration with other products. I have specifically witnessed a case where we tried to integrate Sophos XG with the DLP product by Force Point. That wasn't supported right away. FortiGate was supporting that particular model.

I would like to have scalable products, however, normally what I have witnessed is that every new product that they push out or any additional feature that they push out in a new VMware version or specifically for the firewall may have some stability issues. So scalability at the cost of stability is not an option for me.

We have about 250 to 300 users. We have multiple branches that use this product. Usually, it's the development team, and hardware and software users. 

We may expand usage. It will depend on the additional sites we may operationalize soon.

I've had some direct escalation experiences with the country manager and their technical lead. I tend to get a good response.

While in general technical support can be better sometimes, as far as their resolutions are concerned, the team is providing us with technical assistance, and their approach to resolutions can be a bit tricky. Normally they try to avoid dealing with the solution so you have to dig it out and you have to work on it yourself, or you have to push them that there must be a solution.

I have some expertise in Sophos and Fortinet; I'm not so sure about Cisco. We are also using Palo Alto.

We had some granular control in Sophos that was a bit advantageous to us. That's why switched. Also, the reporting, AD integration and the Sophos endpoint integration were key drivers in making the change.

The solution is simple to set up. It's not overly complex. It only takes a couple of minutes. 

YOu only need one person to handle maintenance. 

I handled the initial setup myself. 

We pay for the solution on a yearly basis, and it is fine. The renewal costs are typically reasonable. If you compare the general cost to Fortinet or Palo Alto, it's lower and more affordable. YOu can also pay for extra support.

We are a Sophos end-user.

For small enterprises or even for some enterprises that do not require large infrastructure, I would recommend Sophos right away. In Pakistan, we have to present something to the management and most of the time the management of the company is non-technical. So the presentability factor and the users' granular control and integration factor, make it attractive. This product can be used as an internet gateway. I have already recommended it to multiple users not for the infrastructure but for the internet gateway or as a proxy service.

I'd rate the solution a seven out of ten. Some features still need improvement or to be built out, like  proper orchestrations or dedicated services.

This solution is like our gateway to the internet. We use it for access control. 

This solution is very simple to manage. It's user-friendly and quite easy to configure. It's easy to communicate with the Sophos support team.

I would like to see a history of the monthly bandwidth utilization, the bandwidth consumption for a period of time. Right now, I know they have something where you can see the live bandwidth utilization when you go to reports. However, there is not a history where you can go back and say, "I want to see what was consumed during the last month." You can't get that history. I know there are other third-party tools that do that, but if Sophos could have it integrated into its file device, that would be cool. 

I would like to see them reduce the price.

I have had experience with this tool for about three years now.

This is a stable product. 

This solution is scalable. There are currently 250 systems connected to this solution. 

My experience with the Sophos technical team has been fantastic. I was trying to set up a VPN tunnel through a SAP X server, so I was having some challenges, and our consultant tried and then he just decided to set up an appointment with the Sophos technical team. Within a short period of time, we were able to pinpoint where the problem was coming from and we got the problem solved. I would rate the technical support as a five out of five.

Positive

The initial setup is quite easy. It's not a challenge. On a scale of one to five, where one is difficult and five is easy, I would give it a four. 

It was done in-house but we consulted a third party that is more experienced with Sophos.

The price of this solution is quite high. Currently in my country, in Nigeria, we are facing a lot of problems with products. The value of the naira and the dollar keep heating up, and it's not good for us here Nigeria, so the Sophos price is not friendly. I think the price needs to be worked on so that it can at least be commercially available to us here in Nigeria. I would rate the pricing as a three out of five.

Sophos is always my preferred solution. I've worked with Sophos, Fortinet, and MikroTik in terms of configuring VPN access to the routers. I find it very, very easy to do it on Sophos, so I prefer to use it instead of the other two solutions. 

I would rate this solution as a nine out of ten.

In terms of the firewall, I'm using Sophos X on everything, including the VPN, firewall, and endpoints.

Everything about the product is okay. 

I cannot single out anything specifically, as the firewall is working perfectly. The endpoint is helping me greatly and people have been able to work from home using the VPN. It has been great.

The pricing has been fine so far.

It has a pretty straightforward initial setup.

The solution's quite stable. 

The solution is scalable. 

Technical support has always been very helpful.

In terms of updates with the current technologies and current trends, which we're always exposed to, they update their databases frequently. 

It quickly detects issues. 

It is a plug-and-play system. 

Mainly, it's a cloud-based firewall for cloud-based endpoint protection. I can be able to manage my devices from anywhere without configuring all these VLANs and whatnot.

If I could host my emails using an email transfer agent, hosting it, it would be ideal.

The configurations can be a bit complex. It may be a while before you understand the configuration process.

If you do not have any experience with the product, you may struggle to set it up.

I'd like to see more integrated services from Sophos so I can handle everything from one place without a third-party. I would like to have email hosting and management integrated into Sophos XGS.

I've been using the solution for more than five years now.

It is very stable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution can scale. It just depends on the model we are using. For example, on an XG transit, I can add as many users as I want. On XG 105, I can only have limited users. It depends on the package.

We have more than 80 general users on the solution. We use it intermittently.

I've dealt with support several times. They were awesome. We found them to be helpful and responsive. They are quite knowledgable. 

Positive

The setup process is perfectly okay. I'm an IT administrator. It's not very difficult for me to get everything up and running. I also need to check the integration. 

I'd rate the initial setup a four out of five in terms of ease of execution. 

In terms of pricing, it's good. They've been giving us some promotions where we would pay for two years and get an extra year free. We appreciate that level of savings.

We paid for a three-year license a while ago. I can't recall the exact amount that was paid. It was likely around $12,000 or less - around $4,000 a year.

It's one of the best pricing strategies they have used. Initially, if I were paying for a year, I would pay around $5,000 or $6,000. 

It is very affordable for a small enterprise. It is very competitive.

I am looking into Sophos NAC.

We are a customer of Sophos. 

I'd rate the solution eight out of ten.

The solution provides firewall protection.

The solution is easy to use and configure, once you know how to apply the policies.

The customer service response time can be improved.

I am currently using the solution.

The stability is good. I have not had any problems with it.

The scalability of the solution is good.

The customer service response time is slow and could use improvement.

The setup is straightforward if you know how to do iOS.

The cost is around $50 per endpoint, and there is a one-time purchase fee for the firewalls of $2,500, plus services. It is roughly around $4,000.

I am currently evaluating CrowdStrike. I like it better.

I give this solution seven out of ten.

If you are looking for a low-cost solution, cheaper than Cisco I recommend this solution. You should also look at Fortinet.

we are using Sophos XGS for full control over our network.

Sophos XGS has improved our organization.

The most valuable feature of Sophos XGS is its ease of use.

The price of Sophos XGS could improve, it is high.

I have been using Sophos XGS for approximately two years.

Sophos XGS is stable.

The scalability of Sophos XGS is good.

We have approximately 10 technicians that know how to use the solution.

The support from Sophos XGS was responsive. They solved the issues we had.

Positive

We have not used another solution prior to Sophos XGS.

The initial setup of Sophos XGS was easy. The time it took for us to implement the solution was approximately one month.

We use a third party with our in-house team to do the implementation. We have 10 workers that maintain the solution.

I rate the return on investment for Sophos XGS a three out of five.

There is an annual licensing fee to use Sophos XGS. It is an expensive solution.

I rate the price of Sophos XGS a four out of five.

We did not evaluate another solution before choosing Sophos XGS.

I rate Sophos XGS seven out of ten.

XGS' most valuable feature is ransomware protection. 

In the next release, XGS should include mobile features like two-factor authorization.

I've been using XGS for seven years.

XGS is stable.

XGS is scalable.

Sophos' technical support has degraded in the last couple of years. They seem to need to ask a lot of questions, even with simple problems, and take a long time to provide solutions.

Neutral

The initial setup is simple.

XGS' price could be lower, though it's moderately priced in the market.

I also evaluated SonicWall and FortiGate.

XGS is a perfect product for small and medium businesses. I would rate it as eight out of ten.

We primarily use the solution as a firewall.

The most valuable features are the Sophos management or the central management, including the reporting and managing of multiple firewalls using Sophos Central.

The synchronized security, which also integrates with the Sophos endpoint, is great. That's one of a few of the main features which is beneficial with Sophos XGS.

The solution is stable.

The setup is simple.

There were certain lacking capabilities, for example, the searching of its settings et cetera, previously in Sophos XG. There have been some features that were not visible or unavailable compared to the one here on Sophos XGS. Right now, Sophos XGS is stable with its current firmware and hardware versions. It’s gotten better.

I can’t speak to which features could be added.

As long as they just maintain the stability of the firmware version, we will remain happy.

Support is great, however, it can always be improved.

I’ve been working with the solution for one year. We’ve used it since 2021.

We’ve found the product to be stable. There are no bugs or glitches. It doesn’t crash or freeze. It’s reliable and the performance is good.

In general, the solution is scalable.

Its features and configuration can expand. As long as the engineer or the implementer knows which policies are needed, the Sophos firewall integrator can also help with that. If he or she does not know any complicated solution, Sophos support is also there to help.

I’ve had interactions with Sophos support.

They are actually quite responsive with their cases, as long as the open cases is properly informed or properly included with the right information.

They could always improve support a little bit.

Positive

The initial setup is just a simple set of options. Sophos also provides a lot of data sheets and tutorials online. During the initial setup, there is a guide, which the user can just follow as long as he or she knows their internal network. It’s pretty straightforward.

The maintenance isn’t too intense. However, it is on a case-by-case basis and depends on the complexity of the environment and size.

I really don't have visibility with the pricing. However, the price depends on the size of the box, which indicates that the more users you have, the bigger the box, the higher the price you have to pay.

I haven't had the opportunity to work with other solutions. There are a lot, like Palo Alto, which, in terms of security, are much better than Sophos, as people say. However, Sophos can also work well. It just depends on the company's complexity or preference in the firewall.

I'm currently an agent and a Sophos engineer here in the Philippines. We’re partners.

While we work primarily with on-premises deployments, it is also available on the cloud.

I’d rate the solution eight out of ten.

Basically, we are using these products for our waste filtering, then application filtering and bandwidth management purpose.

The major benefit is that I can shape my bandwidth, basically. In Bangladesh, we do not have a lot of bandwidth management or bandwidth capacity. We have a limited capacity and we share the many people in this capacity. I can shape my bandwidth using this Sophos file, so everyone gets a minimum level of bandwidth. If the user is higher-end, then getting the lower end and the user has the minimum level or less than 1000 or 500, and they're getting better than that.

Sophos has a feature for user credentials, which means if users are not logging into the capital portal of Sophos, they're not using any internet. We can advertise some products and features using these portals for our university. Basically, I am working at a university, so the university's different features and the different departments are using this portal. If students see this advertisement and then after they log in to the credential in the capital portal and use the internet.

Sophos is good for a mid-level company, not a large-level one. If the user level is very large, Sophos is not capable of handling such a high level of users. It, therefore, needs to improve the devices so that they work in larger organizations and with a large number of users.

When we use the hardware level of the device, the RAM or other storage capacity is fixed. We could not change the memory or other capacity of this device. If we need some improvement in capacity, we get different types of problems. If RAM usage is too high or capacity moves higher, the Sophos device does not work properly.

Sophos has a number of additional features, however, the user graphical interface, the graphical interface when we are using CyberRoam, the user portal, or user interfaces, are so much smarter than Sophos. In Sophos, the user portal is not user-friendly. This needs to change, the UI.

I've worked with the solution for the last four years. 

The solution is stable and reliable. There are no bugs or glitches, and it doesn't crash or freeze. I'd rate the performance at 75%. Some improvements could be made. 

We have 4,000 or 5,000 people that are connected in Sophos.

It is not easily scalable as it has fixed capabilities and that means C2 RAM is fixed. That makes it not easily scalable.

We use the product on a daily basis. 

Sophos' technical support is not good. I have not been getting better support from their technical people. The response time needs to be better.

I am also using the Cisco Firepower model 4110.

The main difference is basically Sophos is not like a Firepower. Sophos we can call by the UTM device management. For security purposes, we are using a Cisco firewall for different types of attacks. For bandwidth management with filtering and other activities, just normal activities, we are using Sophos.

The initial deployment is not complex, however, it's mid-level. You do need some experience. It depends on the device model. If we purchase the higher model, then the price or other investment is also more.

The deployment takes a maximum of one month. We do maintenance on the devices maybe once a year. 

For the deployment process, the partner helped us deploy the devices and three people were working on the deployment.

The initial price is high and we purchased a three-year licensing model. Every three years, after every three years, we need to renew Sophos. Everything is included under the license. 

The pricing is quite low, and we are quite happy with it.

We're a customer and end-user.

We are using the hardware version of the product. It's the latest version. 

I'd rate the solution a seven out of ten.

Sophos XGS is used as a firewall to protect my home network.

Sophos XGS that's a good firewall. If you use the endpoint, then you have what Sophos calls synchronized security. That will mean that if one of the endpoints is affected, it will be automatically set in isolation.

In the new release 19, there should be the implementation of a cloud service that you can use to set up the IPSec tunnels, and the SD-WAN from the WAN dashboard, and then you can push that configuration out to every firewall that you have.

I have been using Sophos XGS within the last 12 months.

Sophos XGS is highly stable.

The hardware is more scalable than the MSPs, you can have a firewall as big as your want. The solution is scalable.

The technical support in Norway is very good. I have had an excellent experience with them. However, I am the technical support for the Sophos XGS in my country of Norway. 

We have very good contact with the Sophos SEs in Scandinavia. I think we're good.

When comparing Sophos XGS to other similar solutions they are 80 to 90 percent similar. But Sophos firewall has a web application firewall that you can license and use in the firewall. Not every firewall has that functionality. Typically you have to buy another client if you want the web application firewall but within Sophos XGS, you can have it within the firewall.

I have used other solutions, such as CheckPoint, SonicWall, and WatchGuard.

The initial setup could be difficult depending on what you are looking to do with it. However, if you only use it as a firewall, it's straightforward. You can make complex SD WANs and other configurations. You can do whatever you want with it. At home, I can just configure it straight as it is by clicking next until it is finished. If you have a complex environment then the setup of Sophos XGS could be difficult.

The price of the solution is reasonable and their target market is small to medium-sized companies.

We do not have any complaints from our customers and have the functionality that our partners and customers need.

I rate Sophos XGS a ten out of ten.

We use it for network protection. We use Sophos XG as a firewall in our own company, and we have also implemented it for customers. I have been using Sophos XG for a small office for my own family. 

We have also implemented Sophos Email Gateway for government mailing servers. It is not so elaborate, but for basic usage, it works very well.

We have implemented version 17 to the latest version of Sophos XG.

I like it for its simplicity. It is very simple to configure and implement. It is a very good product for medium-sized organizations.

There should be web caching to improve bandwidth utilization. It should have a very good caching feature. That's because we are in a very poor continent, and the connectivity cost is very high. We have low bandwidth, and the intensive usage of bandwidth is not easy here in Africa. If they improve services for web caching, it would be better.

It should also support a feature for Virtual Domains. Similar to FortiGate, we should be able to use a single device to create two or more virtual units. Such a feature is useful for separating the traffic between departments in a large enterprise.

When I try to use Sophos for Email Gateway, it's not easy to check a user in the LDAP directory. It's not as good as other products, such as HCL Domino. Sophos is good, but it is not so good. When we use the LDAP filter to select some users, we have small problems, but overall, Sophos is very good for me.

Their support in Africa is not so good, which is a problem. Their support can be improved.

I have been using Sophos technology for four years.

It is very stable.

Generally, when we implement a Sophos product, we do the sizing and plan the resources based on the expected traffic. We anticipate the resource usage for one or two years, which helps with scalability, but it is a product for medium enterprises. In my company, we have around 20 employees.

Their account manager and support in Africa are not so good. Their community support is very good, and a lot of times, I use their community when I need any kind of support, and I get a response for my issue. 

I use Sophos and Fortinet. I sometimes also use Cisco Firepower. We are an integrator in West Africa, and my choice also depends on a customer's choice. Sometimes, they are telecom operators, and sometimes, they are small companies, such as non-governmental organizations.

It is very easy to implement.

Its price is good. All features are grouped in the same license. It is an all-in-one license, and the license price is acceptable.

I would rate it a nine out of 10.