Sophos Firewall Reviews

We use Sophos XGS in 15 locations with 15 firewalls for the XG. We dedicate one person to maintain the solution.

The most valuable feature of Sophos is the VPN solution. I also value their threat management, IPS, IDS, and login features with single sign-on.

Sophos XGS needs improvement with the threshold values. Other solutions have the capacity to handle more users.

I would like to see virtualization security included in the next release.

We have been using Sophos XGS for more than two years.

Sophos XGS is stable as long as the capacity is not exceeded, then it becomes slow.

Scalability needs to be improved by increasing the threshold value. The bulk capacity can handle 300 users, if you have more users, it does not work well.

Technical support is okay. They are responsive but limited with knowledge and need to escalate to the upper levels. It takes time to resolve issues.

The initial setup of the solution was straightforward. It is easy to use and convenient.

The license for Sophos XGS is for three years, paid on a yearly basis. Everything is included with the license; there are no additional fees.

Sophos SGS is a nice solution. I would rate this solution an 8 out of 10.

When it comes to different interfaces there is some speed issue that can be improved in Sophos XGS.

I have been using Sophos XGS for approximately seven years.

Sophos XGS is a stable solution. It has a very good operating system.

The scalability of Sophos XGS is very good.

The support of Sophos XGS needs to be improved. Support is very poor. The approach they use needs to improve. We have to call and raise a ticket, but they don't resolve quickly. There are times when their technical support people, are not the right people for the right ticket. It wastes a lot of time. Since this is a business-critical device, there needs to be quicker support. There should be quicker support from the company. 

I have used Fortinet previously. When you compare Sophos XGS with Fortinet, Fortinet is a  better device. However, if their country has good support for Sophos XGS, then it's fine. Sophos XGS is more economical than Fortinet and they have similar features. For a business-critical solution, Fortinet would be much better because of its stability.

This solution would not have a return on investment for larger companies. However, for smaller businesses using this solution, it is better and faster.

Sophos XGS is priced lower than some of its competitors, such as Fortinet

I rate Sophos XGS a seven out of ten.

We use Sophos XGS for web security and web policies, it's our primary solution. authentication VPN site to site, SSL VPNs installations. Sophos Firewall designed its extreme protection IT Rules and policies security level Authentication is good sometimes it's tricky and very helpful. Sophos Firewall delivers advanced threat protection to instantly identify bots and other advanced threats while defending your network from today's sophisticated attacks. current live user activities diagnostics to generate logs and objectionable site restrictions, daily reports are a great solution for the work environment.

With the increase in cybersecurity threats, this solution has helped us at an organizational level. We have always been hit by someone at the end of our desk or hidden somewhere ex:- spoofing attacks, a man in the middle attacks, and ransomware new era of cybersecurity pain full concept, Mail spoof attacks, all these have to improve DMZ and secure the firewall policies and server-client Antivirus solutions. Daily monitoring manually or trusted third-party vendors monitoring tools. finally, we are worried about how strong we are at the cybersecurity level.

This is a great solution for security, authentication, hashing, and encryption level. Sophos is good at ACL rules, Port forwarding, SDWAN route policies, IT Rules and policies as well as Natting rules. It's a reliable product to secure web securities. whenever we want we switch to the ports securely Heartbeat monitoring live user activities is great to execute on a production level. Bandwidth control sometimes referred to as traffic shaping is one of the best firewall features. Link aggregation and SD-WAN (Software-defined Wide Area Network) are great features for businesses that need multiple links to the internet. thank you

There are occasional issues when we update an operating firmware there's some lag time. Updating requires us to reboot the firewall, in this scenario 24/7 organization will be the most effective. In addition, I'd like to see more focus on customer support calls we were waiting for hours to connect with them. In some cases, Sophos's team is extraordinarily helpful to solve any issues in the firewall. Sophos needs to focus on customer support through a chatbot or call management quickly so we can find some help on the client side. Thank you

I've been using this solution for five years. 

The solution is stable despite having to restart when we update. 

The solution is very scalable and we're able to handle all the pressure in our organization. We have over 100 VPNs and it all works well, Authentications, port forwarding, and all kind of security levels are much appreciated. 

Customer support needs to be improved. They're very helpful once you get them on the line but sometimes take up to an hour before we can speak to someone who can fix a problem. when a problem occurs at the production level we freeze and everything goes blank so a faster customer support call is much more appreciated.

Positive

The initial setup is complex. Sophos has some features like rules and policies, NATing, and PATing so deployment might take more time than if we were using an alternate solution. Deployment can take up to two weeks because every policy and VPN requires checking and that takes time. I've been working for the past 10+ years experience in network engineering and firewall configuration so we deployed in-house but we contacted Sophos for assistance when we needed it.

The Sophos or any kind of firewall is worthy to buy when we have dedicated servers and switches to implementation.

There are some very good features in this firewall and also some areas that need improving. I rate this product seven out of 10. 

We are using it as a unified threat management system.

We use it on a daily basis. There are about 600 people using this solution in our organization.

The solution is deployed on-prem.

The threat management system and VPN are most valuable.

Reporting could be improved. The structure could be better because most of the reports aren't detailed.

It's stable for now.

It's scalable.

Initial setup was easy. I would rate it 4 out of 5.

Setup was done in-house.

I would rate this solution 9 out of 10.

I use Sophos XGS as an alternative gateway and we are using all the new generation firewall functionalities, such as EPS and antivirus.

We are using the WAF functionalities of Sophos XGS which has helped the organization.

Sophos XGS could improve by having a Network Access Control(NAC). This feature is a basic function in other firewalls and should be added, such as Palo Alto.

The SD-WAN functionality should be reviewed because there are some devices that don't work well. For example, in Palo Alto, the SD-WAN functionality is more efficient.

I have been using Sophos XGS for approximately four years.

Sophos XGS is a stable solution.

The technical support from Sophos XGS is good. We reach out to them if there is a serious problem. We have opened approximately four tickets with them.

I rate the support for Sophos XGS a two out of five.

I have used many other solutions, such as Palo Alto, Fortinet, and Cisco. Sophos XGS rates are at the bottom of the list compared to many solutions.

The initial setup is straightforward.

I would rate the initial setup of Sophos XGS three out of five.

We have a team of three or four people who administer Sophos XGS.

Once you pay for the Sophos XGS hardware there is no license required. There are additional costs if you want the support. We have purchased support for three years.

I rate Sophos XGS a six out of ten.

We manage all the network services, like DHCP, of each branch office.

It has helped us because we have identified some of the loopholes in our assets that we did not know existed.

I like using the combination of XG firewalls and the XDR product with the end user. I also like the integration of all the solutions and the visual of all our clients and the traffic routing in to the network from inside the console. The synchronization and the integration with all the products in the central office, such as Office 365 or AWS, make it a valuable solution.

We can configure rules with the user, traffic, etc., making it a very versatile solution for our network.

Better instructions should be provided as part of the technical support so that we can understand the functionalities. This will help us to troubleshoot faster.

We've been using Sophos XG for three years.

It is stable.

Sophos XG is a scalable solution. We have about 1,000 users.

Technical support is good, in general.

We used Fortinet, and we changed the solution because there were additional costs for reporting, licensing, and centralization. If we compare Fortinet to Sophos XG, the XG firewall costs less and performs better. That's one of the reasons that we moved to XG.

The other and the most important reason is the integration with our security solution, Sophos XDR.

The initial setup was very easy. It's much easier than that for other products. 

Deployment and maintenance can be done by one or two people. I am a specialist, and an engineer and I worked on the deployment and maintenance. 

The provider of the solution implemented it, and it took about a day.

We have seen an improvement in security not only in terms of technology but also in terms of internal practices in our company.

We predicted that it would take three years to obtain an ROI.

We bought the three-year license, and there are no additional costs.

We evaluated Check Point, Barracuda, and Palo Alto.

It's a good product, and you should go ahead with it.

I would rate Sophos XG at nine on a scale from one to ten.

This product is our perimeter firewall with web filtering and application filtering, as well as also providing site-to-site VPN and SSL VPN. We are end-users and customers of Sophos. I'm a network administrator. 

Sophos XG enabled our organization to establish site-to-site connectivity with our Branch offices and enabled work from home during pandemic through very easy to deploy SSL VPN solution for our employees. 

Reporting is the most valuable feature. They also recently provided the SDWAN solution and we're currently working on implementing that. 

I'd like to see improved throughput performance in a box. It's already a cost effective solution but I'd like to see the cost further reduced for annual renewals.

I've been using this solution for four years. 

Sophos has the same issue as all firewalls where it's scalable for virtualization and for cloud deployment, but it's not so scalable when it comes to the hardware. 

Customer service is good but has room for improvement like all others. 

Positive

The initial setup was very straight forward. 

Vendor team has very good level of expertise, transfer of knowledge was excellent and we are managing firewalls at our own. 

I believe there are better products on the market so I rate this solution seven out of 10. 

We normally use physical appliances for office and virtual appliances for datacenter.

XGS is similar to XG series but adds new Xstream Flow processors that are used to accelerate various functionalities that are normally done in x86 CPU.

Sophos will soon release SFOS v19 software which will utilize Xstream for even more functionalities like IPsec, SSLVPN, SDWAN and etc.

What I found most valuable in Sophos XGS is that it's very easy to manage.

Authentication with Azure AD needs improvement. It would be better if it could work directly without using local AD server. For comparison Fortinet FortiGate allows to use SAML authentication with Azure AD and does not require any local server. It is currently unknown to me, if or when it will be implemented on Sophos.

Local DHCP service also needs improvement. Windows DHCP service offers more functionality and is more flexible and easier to use. SFOS v18.5.3 added DHCP option functionality in the GUI - which previously worked only from CLI. 

I've been working with Sophos XGS since they came out. I cannot remember exactly the year and date, but it hasn't been so long, e.g. just one year.

It is very stable - have not had any issues.

The scalability of Sophos XGS is good. Normally we suggest the clients to use firewall as a service, since it gives more flexibility both for client and us, since usually we manage the client's firewall. There is a virtual version of the firewall which scales even more, since it can be upgraded to a license that offers more RAM and CPU cores. For us, it scales very well, e.g. I'm giving it the maximum score: ten out of ten.

If a client is looking for a new firewall, then we normally need to consider as much information as possible (user count, weight per user, LAN throughput, WAN throughput, functionalities and etc). If a client wants to pick a solution for larger environment, then we also ask recommendation from Sophos to get the most optimal solution.

Positive

The initial setup for Sophos XGS is very easy. From cloud it can be deployed even faster, since it allows to create configuration templates.

The ratio of price and functionality is good.

Licensing cost depends on particular model and required functionality:
- It is possible to use the firewall without any license, but then it will work only as port based firewall.
- Normally we suggest to use at least Standard License.
- Licensing cost for single appliance or active/passive HA cluster is the same - only 1 license.
- Active/Active cluster requires 2 licenses and performance gain is very small. It is better to use more powerful appliance. 

We are Sophos Gold partner and mainly like to use Sophos XGS firewalls.
If it a requirement by client, then we can also offer non-Sophos firewall solutions.

There are multiple models of Sophos XGS that we use, e.g. we use both desktop  and 1U sized models.

Sophos XGS can be fully cloud managed, and it's possible to deploy it directly from the cloud, that you installed the hardware, and maybe I have to use an ESB key, though I'm not sure. We haven't tried deploying it that way yet.

The only difference between Sophos XGS and Sophos XG is the software version that is supported on the hardware. The difference will be when the version 19 software comes up, as it will not work on Sophos XG.

I recommend Sophos XGS to others who are thinking of implementing it. I recommend for them to use it. Sophos firewall can be also used without additional firewall, but we strongly suggest using Standard license, which offers application filtering and IDS/IPS.

Sophos XG can be deployed on-premise and on the cloud.

We use Sophos XG as a network firewall for many use cases, such as offices, residential, and data centers. 

Sophos XG could improve the connectivity with Microsoft 365 or Azure Active Directory(AD). It doesn't work directly as other solutions do, such as Fortinet FortiGate. The client needs a separate AD server which is a problem.

There is no endpoint software for Linux systems, only the server version runs on Linux.

I have been using Sophos XG for approximately fours years.

The stability of Sophos XG is very good. However, there have been some issues with other weaker models because they are limited in hardware in resources.

We had an issue, but after speaking to the technical support, I understood it was a problem with Sophos, not a firewall problem, but with the endpoint that was related to the encryption of the disc. The problem is if you have a computer controlled by Azure at the same time as Sophos, then there may be some incompatibility problem between them because both of them are trying to control the computer and the encryption of the hard drive.

I have used other firewall solutions, such as Fortinet Foregate and Check Point.

The initial setup of Sophos XG is simple, but Cisco Meraki is easier. 

Since I have used Sophos XG long time it is easier than Fortinet FortiGate or Check Point.

Sophos XG is not an expensive solution. If you are willing to pay more, then there is the Check Point firewall which is the best out of all the vendors.

I would advise other Sophos XG is a great solution because it is synchronized security between the endpoint and firewall which is unique. I'm not sure if Fortinet FortiGate has this technology, but it is a good technology in Sophos XG. Sophos was perhaps the first to use this kind of technology. What it does is if your computer gets infected, then the endpoint tells the firewall that, it is infected and the firewall doesn't allow the use of the network at all. It'll lock it down on this computer.

I rate Sophos XG a nine out of ten.

The most valuable features of Sophos XG are user-friendliness and it is highly secure.

Sophos XG could improve by making the remote access and VPN better.

I have used Sophos XG within the last 12 months.

Sophos XG is a stable solution.

The scalability of the solution is good. We have approximately 4,000 concurrent users.

The Sophos XG technical support we receive from our local vendor, they are very helpful.

I would recommend this solution to others. I have recommended it to many organizations already. I have had a very good experience with the Sophos XG.

I rate Sophos XG an eight out of ten.