Sophos Firewall Reviews

We primarily use the solution as a firewall.

The most valuable features are the Sophos management or the central management, including the reporting and managing of multiple firewalls using Sophos Central.

The synchronized security, which also integrates with the Sophos endpoint, is great. That's one of a few of the main features which is beneficial with Sophos XGS.

The solution is stable.

The setup is simple.

There were certain lacking capabilities, for example, the searching of its settings et cetera, previously in Sophos XG. There have been some features that were not visible or unavailable compared to the one here on Sophos XGS. Right now, Sophos XGS is stable with its current firmware and hardware versions. It’s gotten better.

I can’t speak to which features could be added.

As long as they just maintain the stability of the firmware version, we will remain happy.

Support is great, however, it can always be improved.

I’ve been working with the solution for one year. We’ve used it since 2021.

We’ve found the product to be stable. There are no bugs or glitches. It doesn’t crash or freeze. It’s reliable and the performance is good.

In general, the solution is scalable.

Its features and configuration can expand. As long as the engineer or the implementer knows which policies are needed, the Sophos firewall integrator can also help with that. If he or she does not know any complicated solution, Sophos support is also there to help.

I’ve had interactions with Sophos support.

They are actually quite responsive with their cases, as long as the open cases is properly informed or properly included with the right information.

They could always improve support a little bit.

Positive

The initial setup is just a simple set of options. Sophos also provides a lot of data sheets and tutorials online. During the initial setup, there is a guide, which the user can just follow as long as he or she knows their internal network. It’s pretty straightforward.

The maintenance isn’t too intense. However, it is on a case-by-case basis and depends on the complexity of the environment and size.

I really don't have visibility with the pricing. However, the price depends on the size of the box, which indicates that the more users you have, the bigger the box, the higher the price you have to pay.

I haven't had the opportunity to work with other solutions. There are a lot, like Palo Alto, which, in terms of security, are much better than Sophos, as people say. However, Sophos can also work well. It just depends on the company's complexity or preference in the firewall.

I'm currently an agent and a Sophos engineer here in the Philippines. We’re partners.

While we work primarily with on-premises deployments, it is also available on the cloud.

I’d rate the solution eight out of ten.

We are using Sophos XGS for basic purposes, such as the NAT rules it provides.

The most valuable features of Sophos XGS are the ease of use and powerful interface. 

In version 18 of Sophos XGS, the log details are not very good. However, in version 19 they are more detailed. The Fortinet FortiGate has better detail overall compared to Sophos XGS. They provide updates to the solution frequently, but they do not fix the problems that exist.

In the next release, the searching inside of Sophos XGS needs to improve. It is difficult to learn about the functionality and the modules. Additionally, there needs to be more automatic or less manual operations.

I have been using Sophos XGS for three years.

Sophos XGS is highly stable.

We have a small company therefore I am not sure about the scalability.

We have two people using this solution as administrators. The total number of users that are using the solution is approximately 200.

I have not used the support line directly from Sophos XGS, but I used the online knowledge site they have for support. They have good documentation.

The best support is provided by Cisco, Palo Alto, and Fortinet FortiGate because all the knowledge is available easily.

I rate support from Sophos XGS a four out of five.

Positive

The initial setup of Sophos XGS is not easy. 

The price of Sophos XGS is less than competitors worldwide. However, in Turkey the solution is expensive.

I have evaluated other solutions, such as Fortinet, Cisco, and Palo Alto, and the Sophos XGS has a more powerful interface. Fortinet FortiGate has too many options while Palo Alto is over more robust than Sophos XGS. However, if your company does not have a large number of users then Sophos XGS is best.

My advice to others is if you are going to purchase a firewall in Turkey, Sophos XGS is the best choice because of the dealers and support available. The second best in Turkey would be Fortinet FortiGate.

I rate Sophos XGS a seven out of ten.

It is a firewall appliance that is used to provide security for network infrastructures. We have it deployed at the edge of our network and we also sell it to other clients to protect their network infrastructure. 

This solution is really easy to use and deploy. It has a dashboard where you can see everything going on within your network. There is also a cloud component so if you need to secure your computers or servers, this can be done using Central Intercept X Advances. Everything is connected to their cloud platform where you can manage either your end point solution or your firewalls.

I have been using this solution for five years. 

It is very stable. I have not heard of any issue where clients would have to replace hardware. It's been really stable for a long while.

This is a scalable solution. This does depend on the are different categories of the XGS. The license you buy would be determined by the number of users intended to use it. 

The support team are helpful when you eventually get hold of them which takes a long time. They can improve how quickly you get technical support.

Neutral

The initial setup is straightforward and takes 15 minutes. The time it takes to setup depends on what you're trying to achieve and how complex you want your configuration to be. 

We completed the implementation in-house for our business and for some of our clients. 

We have started seeing ROI using this solution because one of their products helps you to prevent ransomware. It has helped to prevent ransomware from encrypting one of the systems of one of our staff. That is a huge return on investment

The cost is $10,000 for an annual subscription. 

This is a good product for small and medium enterprises. I can't say how it performs in a large environment. It is a very stable solution. Just like every other product, you need to have someone that has the necessary skill set to manage it. Somebody needs to learn how to set it up and configure it depending on the environment.

The interface is great.

It's a very easy-to-use product.

The product was easy for us to install. 

The pricing is okay. 

We've had many problems lately. We're having issues with its firmware, now, and we are trying to fix it with the supplier, the Sophos supplier in Turkey. 

It has recently started to suddenly block and crash. We don't know what will happen. We're not sure if it is the device or something else. We're trying to fix the problem with Sophos. 

It's not extremely scalable. 

I've been using the solution for six months. 

I'm not sure what the issue is, however, it has been crashing and we're trying to find a fix or a solution. 

I don't find the solution to be very scalable. 

We have 300 people using it right now. 

We're working with a Sophos supplier in Turkey. When we run into issues, we reach out to them. We're dealing with them right now. 

The installation process was very simple and straightforward. It wasn't overly complex or difficult. For us, the deployment took about two days. 

You only need two people to maintain the product. It's not labor-intensive. 

I'm not sure of the exact amount we paid, however, compared to other firewalls, the pricing isn't too bad. 

I'm a customer and an end-user. 

We bought three devices from Sophos. We're just dealing with some issues with crashing right now.

I'd rate the solution five out of ten. 

Potential new users should clearly investigate other firewall models. They need to be sure of what they pick before they pay for any solution.

We use Sophos XGS in 15 locations with 15 firewalls for the XG. We dedicate one person to maintain the solution.

The most valuable feature of Sophos is the VPN solution. I also value their threat management, IPS, IDS, and login features with single sign-on.

Sophos XGS needs improvement with the threshold values. Other solutions have the capacity to handle more users.

I would like to see virtualization security included in the next release.

We have been using Sophos XGS for more than two years.

Sophos XGS is stable as long as the capacity is not exceeded, then it becomes slow.

Scalability needs to be improved by increasing the threshold value. The bulk capacity can handle 300 users, if you have more users, it does not work well.

Technical support is okay. They are responsive but limited with knowledge and need to escalate to the upper levels. It takes time to resolve issues.

Positive

The initial setup of the solution was straightforward. It is easy to use and convenient.

The license for Sophos XGS is for three years, paid on a yearly basis. Everything is included with the license; there are no additional fees.

Sophos SGS is a nice solution. I would rate this solution an 8 out of 10.

We manage all the network services, like DHCP, of each branch office.

It has helped us because we have identified some of the loopholes in our assets that we did not know existed.

I like using the combination of XG firewalls and the XDR product with the end user. I also like the integration of all the solutions and the visual of all our clients and the traffic routing in to the network from inside the console. The synchronization and the integration with all the products in the central office, such as Office 365 or AWS, make it a valuable solution.

We can configure rules with the user, traffic, etc., making it a very versatile solution for our network.

Better instructions should be provided as part of the technical support so that we can understand the functionalities. This will help us to troubleshoot faster.

We've been using Sophos XG for three years.

It is stable.

Sophos XG is a scalable solution. We have about 1,000 users.

Technical support is good, in general.

We used Fortinet, and we changed the solution because there were additional costs for reporting, licensing, and centralization. If we compare Fortinet to Sophos XG, the XG firewall costs less and performs better. That's one of the reasons that we moved to XG.

The other and the most important reason is the integration with our security solution, Sophos XDR.

The initial setup was very easy. It's much easier than that for other products. 

Deployment and maintenance can be done by one or two people. I am a specialist, and an engineer and I worked on the deployment and maintenance. 

The provider of the solution implemented it, and it took about a day.

We have seen an improvement in security not only in terms of technology but also in terms of internal practices in our company.

We predicted that it would take three years to obtain an ROI.

We bought the three-year license, and there are no additional costs.

We evaluated Check Point, Barracuda, and Palo Alto.

It's a good product, and you should go ahead with it.

I would rate Sophos XG at nine on a scale from one to ten.

This product is our perimeter firewall with web filtering and application filtering, as well as also providing site-to-site VPN and SSL VPN. We are end-users and customers of Sophos. I'm a network administrator. 

Sophos XG enabled our organization to establish site-to-site connectivity with our Branch offices and enabled work from home during pandemic through very easy to deploy SSL VPN solution for our employees. 

Reporting is the most valuable feature. They also recently provided the SDWAN solution and we're currently working on implementing that. 

I'd like to see improved throughput performance in a box. It's already a cost effective solution but I'd like to see the cost further reduced for annual renewals.

I've been using this solution for four years. 

Sophos has the same issue as all firewalls where it's scalable for virtualization and for cloud deployment, but it's not so scalable when it comes to the hardware. 

Customer service is good but has room for improvement like all others. 

Positive

The initial setup was very straight forward. 

Vendor team has very good level of expertise, transfer of knowledge was excellent and we are managing firewalls at our own. 

I believe there are better products on the market so I rate this solution seven out of 10. 

We normally use physical appliances for office and virtual appliances for datacenter.

XGS is similar to XG series but adds new Xstream Flow processors that are used to accelerate various functionalities that are normally done in x86 CPU.

Sophos will soon release SFOS v19 software which will utilize Xstream for even more functionalities like IPsec, SSLVPN, SDWAN and etc.

What I found most valuable in Sophos XGS is that it's very easy to manage.

Authentication with Azure AD needs improvement. It would be better if it could work directly without using local AD server. For comparison Fortinet FortiGate allows to use SAML authentication with Azure AD and does not require any local server. It is currently unknown to me, if or when it will be implemented on Sophos.

Local DHCP service also needs improvement. Windows DHCP service offers more functionality and is more flexible and easier to use. SFOS v18.5.3 added DHCP option functionality in the GUI - which previously worked only from CLI. 

I've been working with Sophos XGS since they came out. I cannot remember exactly the year and date, but it hasn't been so long, e.g. just one year.

It is very stable - have not had any issues.

The scalability of Sophos XGS is good. Normally we suggest the clients to use firewall as a service, since it gives more flexibility both for client and us, since usually we manage the client's firewall. There is a virtual version of the firewall which scales even more, since it can be upgraded to a license that offers more RAM and CPU cores. For us, it scales very well, e.g. I'm giving it the maximum score: ten out of ten.

If a client is looking for a new firewall, then we normally need to consider as much information as possible (user count, weight per user, LAN throughput, WAN throughput, functionalities and etc). If a client wants to pick a solution for larger environment, then we also ask recommendation from Sophos to get the most optimal solution.

Positive

The initial setup for Sophos XGS is very easy. From cloud it can be deployed even faster, since it allows to create configuration templates.

The ratio of price and functionality is good.

Licensing cost depends on particular model and required functionality:
- It is possible to use the firewall without any license, but then it will work only as port based firewall.
- Normally we suggest to use at least Standard License.
- Licensing cost for single appliance or active/passive HA cluster is the same - only 1 license.
- Active/Active cluster requires 2 licenses and performance gain is very small. It is better to use more powerful appliance. 

We are Sophos Gold partner and mainly like to use Sophos XGS firewalls.
If it a requirement by client, then we can also offer non-Sophos firewall solutions.

There are multiple models of Sophos XGS that we use, e.g. we use both desktop  and 1U sized models.

Sophos XGS can be fully cloud managed, and it's possible to deploy it directly from the cloud, that you installed the hardware, and maybe I have to use an ESB key, though I'm not sure. We haven't tried deploying it that way yet.

The only difference between Sophos XGS and Sophos XG is the software version that is supported on the hardware. The difference will be when the version 19 software comes up, as it will not work on Sophos XG.

I recommend Sophos XGS to others who are thinking of implementing it. I recommend for them to use it. Sophos firewall can be also used without additional firewall, but we strongly suggest using Standard license, which offers application filtering and IDS/IPS.