Sophos Firewall Reviews

We are using it at a gateway level. We are using Sophos XG Series 135. 

We find it easy to use. Its internal configuration is very easy. It is not complicated in terms of use and configuration.

It has been fairly stable, and it is also scalable.

They can simplify its interface so that it is mostly drag-and-drop. There was an SQL injection attack on some Sophos devices. They just need to harden their devices a little bit so that they can't be hacked very easily.

I have been using this solution for three years. 

It has been fairly stable.

It is scalable. We had scaled it for the number of users that we have, and it has worked fine for us. We have around 40 users.

We rarely contact their technical support. There was a time when our head office contacted their technical support. It was an issue in 2008, and they provided a patch.

We used Cisco ASA five or six years ago.

We found it easy to install. Its installation took around one to one and a half hours.

I did it myself. I have had some training on the product. In terms of support, we have just two guys who handle the support. Two people are enough for its deployment and maintenance.

I would recommend this solution. It is a fairly stable and good solution. We will keep on using it.

I would rate Sophos XG a seven out of ten.

We use Sophos XG for a central firewall, with some branches making a VPN, but that's the normal deployment. Some clients use it as a proxy, but most of my clients use it as a gateway. We use Sophos to configure policies, work filters, application filters, and the SSL VPN and IPSec VPNs.

Because of the pandemic, the VPN is the most valuable feature. In Bolivia, the clients normally asked for an appliance with a web protection license or network protection and web protection license. These are the most common features demanded by our customers.

Some clients are also using the wireless solution and using XG firewall as a wireless controller. For those clients, this feature is a very important.

I used to work with Fortinet, and sometimes I see that the SD-WAN feature could be better because it's much easier in Fortinet. That area could be improved in Sophos XG as it's too complicated right now.

For example, I remember a case where the routers had to be configured by commands. It's not hard, but you have to read and investigate how to do that. The XG firewall works fine, but you have to read, and it takes some time to do it.

Sophos XG could also improve the floating area. I have more features in Fortinet, more visibility of the networking table, and the networking area. But in Sophos, you have to enter the CLA and display it. It'll also help if they offered more toll booths for VPN like Fortinet.

I've been working with Sophos XG for around five years.

I have no issues with the stability. No reboots are needed, and there hasn't been a problem with that.

The new enterprise models are scalable, and we don't have problems. I think it's fine.

I like their technical support. With Cyberoam, I remember the technical support used to work closely with us. They used to configure some features for us and help us resolve problems, but not just by email. They used to work with us and show us how to do it. I think that was nice, but in Sophos, they give us instructions and help us, but by email.

The initial setup and configuration was very easy for us. I think it's easier than the other options in the marketplace. The deployment time is relative. For example, if you're deploying for a client who has another firewall and have to integrate it, it'll take around two or three days. But if it's a new environment, you can deploy the firewall within two hours.

Normally, my clients look at Fortinet. Both have similar features, and sometimes Sophos is more expensive, or FortiGate is more expensive. It depends. But normally, I have clients that migrate from Fortinet to Sophos. They are used to working with FortiGate without a problem, but the main difference in our case is the support. Because as a company, SUPERNOVATEL, has more experience with Sophos to help our clients immediately. That makes the difference.

On a scale from one to ten, I would give Sophos XG a nine.

We are integrators. We integrate solutions for other our client's companies.

The most valuable feature is the central dashboard. It provides us with good performance.

When you utilize the processors, the device hangs. Many firewalls hang because of the high volume of loads.

If we are using the HP policy and the user policy at the same time, the firewall gets hung and it means that we cannot get clear reports.

We have mitigated the firewall with Palo Alto because Palo Alto is working on multiple environments. 

I would like to see the performance improved.

I have been working with Sophos XG for three years.

Currently, we are using the MR4 v18.

It's a stable solution.

This product is scalable. I would rate the scalability an eight out of ten.

So far we use this solution for SMB and enterprise companies.

Technical support is very good.

We are also working with Fortinet FortiGate and Palo Alto Networks NG Firewalls.

Palo Alto is the best product from a compliance point of view, and security. Fortinet is the second and the last is Sophos XG.

I have installed Sophos XG in multiple organizations.

The initial setup is very easy.

It took less than 10 minutes to deploy.

Sophos is very good for small companies because of the cost of the product compared to other solutions.

The price is reasonable.

I prefer Palo Alto Networks NG Firewalls to Sophos. Palo Alto is very good and the customers are happy. The hardware is customizable with multiple firewalls. I think that it is the best.

I would rate Sophos XG an eight out of ten.

We are a solution provider and this is one of the security solutions that we implement for our clients. The primary use for Sophos XG is to secure the internet for an organization. It does a bit of antivirus scanning, application filtering, web filtering, and normal firewalling. Security, obviously.

Some of our clients also have Sophos UAP and access points are also included in Sophos, which is the same with FortiGate.

Sophos XG is easy to manage. You've got the cloud logging and you can manage all of your Sophos firewalls from one cloud, the Sophos Central Portal.

The most valuable feature is endpoint security. If you want to install antivirus and firewalling on endpoints, then Sophos is the best option.

What I don't like about Sophos is that applying policies can sometimes take longer, and there can even be a bit of a network interruption. With FortiGate, it's just one click and then you go, but with Sophos, sometimes the wheel keeps spinning for several seconds.

The SD-WAN capability is not as good as it is in FortiGate, and is something that should be improved.

I have been working with Sophos XG for approximately two and a half years.

Stability-wise, it's almost as good as FortiGate.

I've been selling FortiGate for 10 years and Sophos for two and a half years. I think that Sophos is just about on par with FortiGate. We just had a small thing with a client, but I don't know if that's really going to be reason enough. In terms of stability, I think they are quite good. The issue we had was the locks, and it was causing slowness or interruptions, but that was really not an issue. It's a small thing.

Sophos XG is very scalable. You can go from small to large-sized use cases.

I think that the technical support is very good, and similar to FortiGate,

I actually dealt directly with a Sophos engineer and I must admit, they've been very fortunate that the guy can help even on the weekends and so forth. I'm very impressed with that.

I primarily work with FortiGate, but I am currently dabbling in OPNSense to see if I can learn it. I've also installed Cisco in the past, as well as Sophos.

Although about 80% of our clients ask for FortiGate, some of our clients ask for Sophos instead. For example, there are some banks and commercial institutions that ask for Sophos.

Sophos is better than FortiGate with respect to endpoint protection.

The initial setup is as easy as it is with FortiGate. These products are definitely easier to install than a solution like OPNsense because it is just a hardware appliance.

The price of this solution is mid-range. Obviously, it will never beat OPNsense because that product is available free of charge. Sophos XG is not expensive for a firewall, especially when you compare it with Check Point. Check Point is a really expensive product.

Sophos XG is a bit more expensive than companies like BitDefender and Kaspersky, but their endpoint software is very good.

The suitability of this product depends on the use case. If somebody wants to have full endpoint protection then Sophos is the best choice. If they just want a normal UTM without endpoint software, then FortiGate is slightly better, but only slightly because of the SD-WAN capabilities. 

I would rate this solution an eight out of ten.

This product serves as our current firewall solution, which is a network protection gateway.

This is a very simple solution.

It integrates well with Sophos Endpoint Protection, and we use the two of them to form a holistic security perimeter control. 

Software updates always come with issues. For example, I just upgraded to the next version, 80.5, and it came with VPN issues. It started dropping my VPN users. So, I had to roll back to before the software update. I think that the main area for improvement is the quality assurance of the updates.

The management console is a little bit rigid.

Scalability can be improved.

I think that it performs a little bit slow when it comes to connectivity, and having the speed increased would be better.

We have been using Sophos XG for the past four years.

This is a very stable platform. In the four years that we have had it, it's never gone down.

It is not a very scalable product. I would rate the scalability a seven out of ten because where you order it, it comes with prefixed ports. You will only have perhaps two for the WAN, and then maybe four LAN ports, and one console. In this regard, it's not scalable. 

When you buy it, you can't change the port configuration. In order to get more ports, you may have to upgrade to a bigger firewall.

We have about 130 accounts for approximately 80 employees.

Technical support for Sophos is very good and they have a big presence in South Africa. It uses something called Sophos Central, where support can fix the problem before you, as the user, actually finds it.

It is a very simple and very quick initial setup and configuration. Because it is a next-generation firewall, it does most of the rule development in the background. You just need to set up the basics and start it up.

For what you are buying, it's good value for the money.

Sophos is very good when it comes to pricing. A firewall has a lot of things to look for when you're buying it, including throughput and its features. When we purchased this product, Sophos was the best on the market.

In addition to Sophos, we looked at FortiGate, SonicWall, and Cisco. We were looking for a next-generation firewall, and Cisco was out of range because it was too expensive. We settled on Sophos because we already had the endpoint solution in our environment, and the price was very good as well.

Sophos XG is a firewall that I recommend because it's a very simple firewall. It's not complicated, and a LAN expert can just start using it and learn very quickly. Definitely, its usability is very good, and it's a very robust firewall.

I would rate this solution a seven out of ten.

It can be used as a firewall, SD-WAN enabler, and secure web gateway. You can also use it for unified threat management, email detection, mobile device management, and wireless management. I use it in the cloud and on-premises, and I have its latest version.

It is stable, flexible, and easy to use. It has got a web management portal that can be accessed from anywhere.

I would like to have more artificial intelligence in the web monitoring service that comes with it. It should alert us when particular events happen. It has already got some of that. I know that it is more of a service, and Sophos is already looking at it. It is called SIEM.

I have been using this solution for a few years.

We have roughly 700 users who use this firewall.

I have interacted with them a few times. I am very satisfied with their technical support.

We were using FortiGate.

It is easy to install. I have done the installation in less than a day.

We did it ourselves. We have two people for its deployment. We have one engineer and one admin.

It is not that expensive compared to the other solutions. It is about the same price range as Fortigate, which we used previously. Licensing is on a yearly basis.

I would recommend this solution. We're very happy with the product. It works very well, and we don't have too many issues.

I would rate Sophos XG a nine out of ten.

We use the Sophos XG firewall as part of our security solution.

The first area that needs to be improved is customer support.

If I'm implementing a connection on the DMZ or WAN, I should be able to dive deep into the implementation, specifying what needs to be implemented or not. For example, I should be able to configure specific details for the DMZ, and not have to follow the templates that they provide.

We have had problems with the stability that affected business operations.

We have been using Sophos XG for three years.

The issue of stability is the reason that I'm trying to move away from using Sophos as our firewall. There were times where Sophos randomly cut some users off of the internet, which adversely affected business operations. It is important because our business relies on throughput and service, like the uptime of e-commerce servers.

Scalability depends on the specifications during the time of order, prior to first implementing the firewall. With respect to my organization, scalability has been okay. It comes down to the amount of money that is spent.

We have 1,200 users in the company.

Customer support needs to be improved. The time they take to resolve issues is too long.

The initial setup was straightforward. It took us less than 30 minutes. Normally, it depends on the size of your organization, so for mine, the installation was less than 15 minutes. By 30 minutes I was finished even with the setup and configuration.

For our company, the price was reasonable.

We are now thinking about incorporating the Fortinet next-generation firewall.

My advice for anybody who is considering Sophos is that a business with a lot of throughput and data traffic should look for another firewall.

I would rate this solution a six out of ten.

The most valuable feature is the VPN aspect. It has been beneficial for my users who work from home. Connectivity and from a security aspect.  The security aspect of this is quite good. It measures up to the standard that I expect.

From a Firewall perspective and then user management, easy to manage and the user experience, profile, are giving me what I am expecting.

During this COVID era, the VPN has really been helpful. We can seamlessly connect to the applications remotely and work from home.

In the Firewall, the Intrusion Prevention System can be improved. Now because COVID has come to stay, people tend to work from home, and cybersecurity has been on the high side. 

It can improve more on the security aspect of this so that it can combat any major threat or common bug. I am not saying that the security has become compromised, as it is usually active, but they can improve on it.

Local and technical support can be improved.

When firmware updates are complete, there were issues with connectivity and VPN users. Recently, I stopped updating the firmware because I didn't want to obstruct the connectivity of the staff working remotely at different locations. 

I have stopped doing any updates until the issue can be addressed.

I have been using Sophos XG for approximately 12 months.

When you compare with Barracuda, Sophos is quite a bit cheaper. 

With Sophos, you can upgrade on what you need and upgrade as time goes on. I think that it's relatively open, compared to other products.

I would rate this solution an eight out of ten.