Sophos Firewall Reviews

I use the solution in my internal network for my home office, for which I have applied a router in my home. I have deployed a couple of switches in my home network, but I need to secure my network from attacks.

Adaptive security is the most usable and most efficient feature in Sophos XG. The performance and scalability of the tool are advantageous areas.

With the firewall part in Sophos XG, it is not very flexible if you want to block access to a particular site during your internal usage. The tool is not able to block access to a particular website instantly or easily since it takes a considerable amount of time to configure a few things. If you specify that a user should not be able to go to www.google.com, it should be denied for sure.

The support engineers of the product are not very tech-savvy, making it an area where improvements are required.

I have been using Sophos XG for four years. I am a customer of the product.

At times, there are some issues that I have faced with the stability of the product. Not many firmware updates pushed into the tool are bug-free, and because of this, I face issues.

I rate the tool's stability a seven out of ten.

It is a scalable solution.

Based on my experience with the product's support team, I feel that Sophos provides good technical support to its users.

I rate the technical support a six out of ten.

The product's initial setup phase was easy, especially compared to Cisco.

The solution is deployed on the cloud. I have also worked with the on-premises model.

The solution can be deployed in only a couple of hours.

The product has improved the security posture. Sophos XG provides features that are almost the same as those Cisco Firepower devices provide. I would say that a couple of features in Sophos XG are the same as the ones provided by other Cisco devices, which are top-notch.

The management tools or log-related solutions that are presented with Sophos are okay but not top-notch when it comes to Cisco. I rate the reporting and visibility tools in Sophos XG a six out of ten compared to Cisco.

Sophos xG's integration capabilities do not apply to a limited number of security tools. Cisco provides integration capabilities with many products, while Sophos XG offers integration with a limited number of products. Cisco provides integration capability with almost any tool that is present in the world. Cisco works day and night to ensure that it provides good integration capabilities with the solutions.

I recommend the tool to those who plan to use it, especially if you own a very small office where you don't need a product with too many functionalities.

I rate the tool a seven out of ten.

We use Sophos XG for ensuring security, implementing web filtering, enforcing policies, and blocking traffic as needed.

I appreciate its interface, but I find that the available ports are insufficient. I've encountered limitations, often finding that three to four ports are not adequate for our needs.

It stands out with its side-to-side VPN and SSL VPN capabilities.

The most significant aspect is the protection it offers.

I encountered an issue while implementing web filtering for users. Specifically, when attempting to access reports detailing which sites users are visiting, the diagnostic report fails to display the complete URLs of the websites visited. This becomes particularly problematic when users utilize proxy software to bypass the firewall, as it renders tracking their website visits nearly impossible. Training presents a major challenge as there are numerous features available, such as IPS and IDS, which many network administrators are unfamiliar with and tend to leave disabled. Users are unable to enable these features themselves due to their lack of understanding of their functionalities and configuration processes. The training manual provided to users lacks proper guidance on configuration procedures. The content outlined in the user manual differs significantly from the live configuration process.

I have been working with it for approximately six years.

There are several glitches in the new firewall. One particular issue arises when applying filtering settings. The firewall fails to unblock sites without requiring a restart to save and execute the changes properly.

We have a multitude of distinct sites, amounting to a total of six to seven thousand users in total.

Our experience with Fortinet was better compared to Sophos. Also, configuring Fortinet is much easier than configuring Sophos.

Installation is not straightforward; it's a bit complex. For instance, when setting up two ISP connections and terminating them on two firewalls, the process involves configuring LAN and WAN interfaces separately, along with DNS and routing configurations in different tabs. Many users may find these functions unfamiliar. It would be more convenient if all functions related to traffic routing were consolidated into a single tab for easier management. Maintenance is also challenging.

The price of Sophos in PTR is significantly higher compared to Fortinet.

Overall, I would rate it three out of ten.

We are resellers.

The SD-WAN feature stands out as the most valuable aspect.

Fortinet surpasses Sophos in terms of support, particularly with its comprehensive five-one feature console. 

Additionally, there are notable differences between appliance models, including variations in hardware, utility, and product offerings. 

It is essential to compare these aspects to ensure optimal performance and functionality. 

While Sophos may not excel in the support aspect, it still provides satisfactory performance overall. 

However, other solutions may offer better support and resource availability.

I have been working with Sophos XG for three years.

Sophos XG is a stable solution.

Sophos appliances typically offer a fixed level of throughput, which means their scalability may be limited compared to more flexible solutions. 

It is important to consider this aspect when implementing Sophos for your organization. 

Technical support is good.

When considering master gold names, it is evident that they offer a competitive package.

I would rate technical support an eight out of ten.

Microsoft's protection has received positive feedback and strong on-site support from both customers and partners. 

Their response to cases, including targeted remediation, has been prompt and efficient. 

In certain instances, there is a reliance on Microsoft's expertise and direct involvement to ensure a satisfactory resolution.

The initial setup is straightforward. It is easy.

The price is reasonable.

The licensing cost in the final currency amount, is 163,080, with three years of support. 

Support costs are approximately 50 percent.

As for advice on implementing Sophos, it would depend on your specific requirements and the desired features you seek in a security solution.

Evaluating factors such as support, performance, compatibility, and cost-effectiveness is essential when making a decision.

It is recommended to carefully assess your organization's needs and consult with Sophos representatives or IT professionals to determine if Sophos is the right fit for your environment.

It is recommended to carefully assess your organization's needs and consult with Sophos representatives or IT professionals to determine if Sophos is the right fit for your environment.

I would rate Sophos XG an eight out of ten.

I am an integrator of this solution, and I have installed it in small- and medium-sized businesses and schools.

My company now spends less time tracking issues because of the security provided by Sophos XG in conjunction with Sophos Endpoint protection.

The security of the solution, thanks to the built-in unified threat management, is one of its most valuable features. Plus, one single pane of glass is all you need to manage the whole solution, and web management can be done from anywhere. If I get a call and I'm at home, I can open the solution in a web browser and address the situation.

I have been using this solution since 2013.

The stability of this solution is excellent. 

The solution is available in different sizes. As long as you purchase a version that is larger than you currently need, there is room to grow. If you purchase one for your current needs, then the scalability is not good and you're going to have to repurchase if you want to scale up. On a scale of one to ten, I would give this solution a five or six for scalability. 

I would rate the technical support as a ten out of ten. I'm a Sophos partner, and their partner support is excellent. 

Positive

I previously used Cisco Meraki, but Sophos XG has built-in web filtering and is a better overall security solution. Due to these features, I have tried to migrate as many of my schools to Sophos XG as possible.

On a scale of one to five, with five being complex, I would rate the initial setup as a four. If you don't understand the terminology and how Sophos designates the way they do things, then it is a little confusing.

Depending on the location, most deployments take a day. We leave the current firewall in place while we configure the new one, then we swing the cable over and fire up the new firewall. That way if we have to take it back offline, we can keep the client productive until we are done configuring the new firewall.

For deployment you really only need one person, and maintenance can easily be handled by one person, too.

The pricing depends on the size. Each Sophos XG solution is custom fit to the size of the client's network. For example, for the XG 135, you're looking at a yearly subscription. You can get a one-year subscription for a few hundred dollars, or a three-year subscription for $1,500-$1,600, so it's not bad. There are no costs in addition to the standard licensing fees. I would rate the pricing as a three point eight on a scale of one to five.

I've had schools running different firewalls with subscriptions and different web filters with subscriptions, and I've found that it is less expensive for smaller schools to run Sophos XG with its unified threat management instead of multiple appliances.

I have evaluated some other options. It really boils down to price, and I haven't had a chance to explore Palo Alto much. I've played with PortaNet a little bit, but I think that Sophos XG has better features for the price point.

For the standard end user, self-based training is necessary. When you get into the Sophos XG firewall and try to start creating NAT rules, it can be a little cumbersome for a novice. It's pretty easy once you know how to do it, but it will be hard for anybody who doesn't have experience.

My advice to someone purchasing this solution would be to look closely at the licensing package to make sure they get what they need.

For small businesses and small schools, I would rate this solution as an eight out of ten.

My environment is virtual and i use Sophos to cover all incoming and outgoing traffic as well as creating VLAN's covering all me needs accordingly. 

Sophos has helped my organisation creating all networks (physical and virtual) i needed for securing my network setup plus integrating it with another Cyber Security solution it helped have a more clear understanding of our security network. 

The firewall feature of Sophos XG has been the most effective for threat prevention and in collaboration with the integration of another Cyber Security solution.

The solution’s reporting could be improved.

I have been using Sophos XG for seven years.

I rate the solution an eight out of ten for stability.

Around 250 users are using the solution daily in our organization.

I rate the solution an eight out of ten for scalability.

No i didn't. 

On a scale from one to ten, where one is difficult and ten is easy, I rate the solution's initial setup a nine out of ten.

We implemented the solution through an in-house team in half an hour. One person was involved in the solution’s deployment.

After integrations with several other security solutions i can say that the ROI is much higher than just using a single firewall solution.

On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a eight out of ten.

I found it in my organisation and after using it i figure out how it can really be helpful. 

Sophos XG has sufficiently improved the security of our network. We found the solution's user interface very user-friendly for our daily operations.

Overall, I rate the solution an eight out of ten.

The prominent use cases for Sophos XGS depend on the type of customer. Local governments, schools, production companies, sales companies, and the finance sector use it.

It’s popular because it’s easy to manage, the cloud console is excellent, and it supports VPNs. It can also integrate with endpoints, though this is optional. Regarding threat intelligence, customers in Central Europe often prefer managing their threat hunting rather than using the more expensive service from Sophos. This feature is handy for large international companies with many employees. Threat intelligence requires separate licensing and is optional. Customers can either manage it themselves or purchase the additional service from Sophos, which includes further actions and is more expensive. Smaller companies often don’t have the budget for this.

One area for improvement would be including automatically generated certificates for HTTPS, which was available in earlier versions but might not be in the latest.

I’ve worked with Sophos XGS for over ten years, starting with Astaro and then Sophos.

Sophos XGS is not expensive and is scalable. It can fit small schools and companies with just ten employees, showing its flexibility for different sizes.

Sophos has two levels of support. The first level is qualified but may not handle complex issues well. I usually skip it and go straight to the second level for better results.

Positive

Deployment is quick and easy. Small installations take about three hours, and even remotely if necessary. It might take up to two days for more extensive infrastructures, including initial setup and follow-up checks.

Sophos XGS does use AI, particularly for sandboxing and analyzing suspicious documents in the cloud. It’s practical, as I haven’t had any major security breaches in the past five years.Overall, I’d rate Sophos XGS as nine out of ten. It has improved significantly over the years.

The product has improved our network security posture. We got some phishing and malware attacks. We found out that someone was attacking our network. Since we installed the solution, we are not facing any attacks.

IPS works smoothly. The policies and rules work fine. The network performance and reporting tools of Sophos XG are good.

We are facing a little bit of an issue with the product's web filtering capabilities. It must be improved. SD-WAN can be improved.

I have been using the solution for almost two years.

I rate the tool’s stability a seven or eight out of ten.

I rate the tool’s scalability a seven or eight out of ten. Almost 5000 people are using the solution in our organization. We have installed the firewall. It is always running.

The support takes a lot of time to resolve issues.

Neutral

I rate the ease of setup a seven out of ten. The deployment took a few weeks.

The deployment was done in-house. We needed two to three people for the deployment.

I rate the pricing a seven or eight out of ten.

I will recommend the product to others. The solution is not extremely good, but it is good. Overall, I rate the product a seven or eight out of ten.

My clients use Sophos XG for deploying firewalls at corporate office and branch offices. The branches connect via site-to-site VPN, allowing outbound traffic from the central location.

The firewall provides network visibility and reporting capabilities, constantly improving over time. It can be integrated with the cloud console, allowing centralized management of multiple firewalls. integration with endpoint security products ensures seamless traffic flow and rule enforcement, even when endpoints are not directly connected to the firewall.   

I've had experience with Sophos XG's threat intelligence features, and they provide good coverage, although I wouldn't say they're the best in the industry. The sandbox feature is available with top-tier subscriptions, allowing you to test content in a cloud sandbox.

One improvement I'd suggest for Sophos XG is to make certain functionalities, like CR functionality, part of the default firewalling rather than exclusive to premium subscriptions. Enhancing DLP capabilities at the gateway level could significantly boost security for organizations.

I have been using Sophos XG for the past 10 years. 

As for stability, I'd give it a high score, maybe a nine, because it keeps running without much downtime.

I'd rate them an eight for stablity It's not to say they're perfect, but generally, it's pretty good I'd recommend it for companies of all sizes.

Integrating Sophos XG into existing infrastructure was quite easy and straightforward. There were hardly any complexities involved in the process.you can use both options - cloud-based or hardware-based firewalls. When I mention hybrid, it means having both options available. While cloud-based firewalls offer convenience, they can be more expensive compared to hardware ones. Although I haven't personally worked with the cloud version, it seems similar in appearance but may have different features. Cloud-based firewalls may seem like an overkill in terms of price, especially when considering the cost of operation over time. They become more beneficial when additional security layers like zero trust, DLP, or secure web gateway functionalities are added. This expands security beyond physical location constraints, making it accessible from anywhere.

I'd rate Sophos XG an 8. It's my first preference and confidently recommend it to other users.