Sophos Firewall Reviews

We use the solution for the firewall.

The configuration is fantastic, highly efficient, and robust. We don’t have to spend more considering the organization’s size. It's easy to configure what you want to do. The response time is very good. VPN connections have been stable.

The payment plan could be improved.

Sophos XGS comes with mostly eight ports, excluding the five ports. It would be better if they could increase the eight ports to ten. Most times, we don't want to use two. I will need to get another switch if I have five ISPs. Sophos engineer should look into that.

There were issues while switching the firmware to an upgraded version.

I have been using Sophos XGS for five years.

The product is stable.

The solution's scalability is good. It depends on what you have and the advanced structures from purchasing a particular version.

We have 80 users and 30 servers in our organization.

The initial setup is straightforward but a bit complex on production. You will need to configure the IP addresses of each device. We have scheduled downtime to safeguard stakeholder data periodically. We anticipate smooth transitions during these times. However, there may be instances where complexity arises, particularly regarding backups. For instance, when transitioning from firmware version 19.0 to 20.0, you must first downgrade the new device to version 19.04 before restoring the backup. This process requires a good understanding of the techniques involved. While we aim for simplicity, complexities may still arise. The migration takes two hours to complete.

We terminated one cable and continued the conversion using the backup from production. We quickly transferred it and pushed it into the new one. When we noticed it was running, we didn't even remove the whole one. We pushed it to the top and started to unplug the cable, then plugged it in again, repeating the process while waiting for the new box to learn the IP addresses of all the devices.

The solution’s pricing is good.

The first thing to consider is the size of the organization. When evaluating pricing, consider your current needs and what the device offers. You may not need all the features immediately. For smaller enterprises like mortgage institutions and microfinance, we recommend Sophos. It's suitable for them. However, larger organizations can also integrate it, perhaps for specific functions. The configuration, efficiency, and scalability are excellent.

Overall, I rate the solution a nine out of ten.

The time taken by Sophos XG's support team to respond to and resolve an issue is an area of concern where improvements are required.

I have been using Sophos XG for four years. I use Sophos XG 210.

My company is a customer of the product.

It is a very stable solution.

The scalability of the product is okay. The users of the product in my company can use the product with all the rules and policies I have applied to the tool that made the implementation process easy.

It is easy to add more users or devices to the product.

Our company has around 300 devices on which the product is used. Our company has 50 to 60 end users of the product.

The solution's technical support is good but needs to improve in certain areas. I rate the support an eight out of ten.

Positive

Our company uses different products from Fortinet in some different locations.

Sophos XG is good for the modules it offers and if there are a large number of users. From a price perspective, Sophos XG is also good if the number of users is less.

The product's deployment process was easy.

I was the only person involved in the deployment of the product in my company.

The product can be deployed in three to four hours.

Sophos XG enhanced our company's network security and threat management since the speed and the connectivity of the VPN that it offers make it very easy to manage and don't get disconnected. When we were having CyberOne in our company, we faced some VPN connectivity issues. The VPN connectivity issue in our company was resolved with Sophos XG. With Sophos XG's username and password, users generally don't face issues related to VPN disconnection.

A scenario where Sophos XG was good for your organization stems from the fact that the performance offered by the tool is good.

The most effective feature of Sophos XG m that protects my company's network stems from the fact that it is able to protect the network by filtering out all the threats from the internet. We never faced any problems in our company's network. My company has hardly faced any problems with our computers since it hasn't been infected with any viruses for four or five years.

Sophos XG's interface facilitated our company's security management tasks since it works in an okay manner in our organization. The interface offered by the product is easy to manage since my company has three lines connected to our environment, and whenever we get a new line during which there are some disturbances, the interface allows us to manage such areas easily.

It is very easy to maintain the product.

Speaking about the cost-savings or efficiency gains from the implementation of Sophos XG, it is an okay product from a price perspective that provides the functions of a firewall.

I rate the overall tool a ten out of ten.

We use the solution as a VPN and for web filtering. It helps to connect sites to our data center. 

It's a competent solution. 

It's easy to deploy and connect.

The initial setup is not complex. 

We can scale the solution.

It is stable. 

It's reasonably, competitively priced. 

The solution could have a bit more functionality.

We'd like to have a log viewer. We'd like to have visibility to see what traffic has crossed the firewall. 

They need more local support and different language options available for when they need help.

I've used the solution for four or five years. 

The solution is stable, and the performance is pretty good. It's a good platform. There are no bugs or glitches. It doesn't crash or freeze.

We have between 2,000 and 2,500 users on the solution right now. 

The solution can scale. 

At this point, we have no plans to increase usage, although we may expand in about two years. 

Technical support has been okay. However, they need more local support. They need to, for example, speak French.

Neutral

We also use Palo Alto. We've used it for about six months. It has more functionality than Sophos. 

The solution is very straightforward and simple. It's not overly complex. 

Originally, when we deployed, we migrated from another platform to Sophos. To do the migration took us two weeks. 

I'd rate the ease of setup a three out of five. 

We do have some maintenance tasks we need to perform after setup. For example, we need to do backups and some configurations. We have an internal team that can handle these tasks in terms of network infrastructure. 

The first time we deployed the solution, we did it via a third party, a partner.

The pricing is good and very competitive. 

The costs depend on what model of Sophos we take. A central firewall on the cloud with a cluster might be 70,000 to 80,000 euros for a three-year license. The price of the license and hardware are all under that pricing. You can integrate other features on top.

I'd rate the solution a four out of five in terms of affordability.

We are using the latest version of the solution. We're customers. 

I'd recommend the solution. It has pretty good functionality and good pricing. It's a good product.

I'd rate the solution a seven out of ten.

Our main use case for Sophos XGS is to protect our network and internet connection, which consists of Aruba, HP, Avaya, and Sophos switches. It's a very new product for us at this time, having previously used a variety of other security solutions including Sophos SG (now UTM), Sophos XG, as well as those from vendors such as Fortinet, Hillstone, and WatchGuard. At the moment, I am only working with Sophos SG, XG, and XGS, with the new Sophos switches.

Sophos XGS is deployed on-premises as we tend not to work in the cloud for our kind of environment. We have many different departments where it is currently in use, including accounting, IT and development, administration, and so on, and there are probably around 200 users throughout these departments.

All the features are valuable, in my opinion, but for us the most important features are the network security, application control, and web server protection. Sophos Sandstorm is another good feature off the top of my head.

Having previously worked with the Astaro Security Gateway platform (now called Sophos UTM), I can attest that the configuration and dashboard for this older platform was easier to manage than that of both Sophos XG and XGS. If it were up to me, I would prefer to go back to the older SG dashboard. I am hoping that in future, the dashboard for Sophos XGS will be simpler and easier.

I have been using Sophos XGS for about three or four months. 

So far, the stability of Sophos XGS is better than Sophos XG. With XG, we have faced so many problems with not only the interface, but also with the system itself including the hardware and software. Thus, in comparison with XG, XGS appears more stable at this point.

Currently, our maintenance of Sophos XGS only needs to managed by one person, because alongside the Sophos switches, all the management can be done through the central management system.

I would say it's scalable, as we already have around 200 people using it across not just one single department, but several, including accounting, IT and development, and administration.

When it comes to expanding our usage further, in general, I am not sure. We are currently watching the situation in Lebanon, and whether we have plans to extend it depends on what's happening in the country.

The technical support is helpful.

Positive

Although I am using Sophos XGS in a personal capacity at our company, we are also partners and resellers of not only Sophos XGS, but also many other products from different vendors. For example, I have worked with Hillstone, Fortinet, WatchGuard, and Genesis products, and whichever product we end up using depends on the client's requirements.

It was very easy to set up and it only took a couple of minutes. However, even so, it is still not as easy compared to Sophos SG version 9 (UTM).

We did the whole deployment of Sophos XGS in-house. And further, for maintenance and management, we only require one person, since everything can be managed centrally when you have the Sophos switches.

The licensing is reasonable. Comparing the cost of Sophos XGS with that of Fortinet or Palto Alto firewalls, for instance, it's not that expensive. However, the overall cost depends on the hardware you're using in addition to the licensing cost.

Because it's such a new product for us, I would need some more time to determine whether there are any issues with bugs or hardware failure, so for now I would rate Sophos XGS an eight out of ten because it otherwise ticks all the boxes for us in terms of features.

Most of the features that we take advantage of are packet tutoring, web and application filtering, bandwidth management, and also multi-link management.

The most useful aspect of the solution for us is the reporting. Commonly, the reporting is separate, whereas, with Sophos, it's already in-built, so you don't need to invest in another reporting tool.

It offers an easy initial implementation.

The first time a person sets it up, they will need training.

We’d like to see an easy migration. They did an upgrade on VMware that might have affected things. We’d like them to return to something like they were running before from 2018 going to 2019.

The scalability could be better.

I’ve been dealing with the solution for the past year. IN total, I have used it for about seven years.

Every appliance has some problems. That said, while Sophos once had these issues, the company could immediately address those problems.

It is stable if you will be going to use VMware. They will give you an option if you want to try the new VMware.

The scalability is limited. In their firewall, there’s only a maximum of two appliances, or you have to cluster it. However, if you expand beyond that, there will be some limitations.

Right now, we have about 50 users. If you count the other branches, it’s closer to 200.

The support has been quite good. We are happy with their capabilities.

I’ve used Fortigate, SonicWall, Check Point, and NetBox brands in the past. We switched to Sophos for the easy interface and user-friendliness.

The initial setup is not really complex. If you're already familiar with the firewall, it will be simple. It will be already easier for the engineer as well. That said, if you're just starting, it will be a bit complex. You will need training

For us, since we have some other branches that we use to interconnect with our main branch, the deployment takes about three days with the other branches.

You only need two people to manage the deployment and maintenance.

I’m not sure of the exact pricing. However, some of it does go towards acquisition costs. In general, my understanding is that they are a bit cheaper than other options.

We both use and sell the solution.

We are using an older version of the solution. It’s not the most up-to-date.

I’d rate the solution nine out of ten.

I would recommend the solution to those who are implementing their security infrastructure to reach compliance. It does not hamper the business operations either.

Basically, we are using these products for our waste filtering, then application filtering and bandwidth management purpose.

The major benefit is that I can shape my bandwidth, basically. In Bangladesh, we do not have a lot of bandwidth management or bandwidth capacity. We have a limited capacity and we share the many people in this capacity. I can shape my bandwidth using this Sophos file, so everyone gets a minimum level of bandwidth. If the user is higher-end, then getting the lower end and the user has the minimum level or less than 1000 or 500, and they're getting better than that.

Sophos has a feature for user credentials, which means if users are not logging into the capital portal of Sophos, they're not using any internet. We can advertise some products and features using these portals for our university. Basically, I am working at a university, so the university's different features and the different departments are using this portal. If students see this advertisement and then after they log in to the credential in the capital portal and use the internet.

Sophos is good for a mid-level company, not a large-level one. If the user level is very large, Sophos is not capable of handling such a high level of users. It, therefore, needs to improve the devices so that they work in larger organizations and with a large number of users.

When we use the hardware level of the device, the RAM or other storage capacity is fixed. We could not change the memory or other capacity of this device. If we need some improvement in capacity, we get different types of problems. If RAM usage is too high or capacity moves higher, the Sophos device does not work properly.

Sophos has a number of additional features, however, the user graphical interface, the graphical interface when we are using CyberRoam, the user portal, or user interfaces, are so much smarter than Sophos. In Sophos, the user portal is not user-friendly. This needs to change, the UI.

I've worked with the solution for the last four years. 

The solution is stable and reliable. There are no bugs or glitches, and it doesn't crash or freeze. I'd rate the performance at 75%. Some improvements could be made. 

We have 4,000 or 5,000 people that are connected in Sophos.

It is not easily scalable as it has fixed capabilities and that means C2 RAM is fixed. That makes it not easily scalable.

We use the product on a daily basis. 

Sophos' technical support is not good. I have not been getting better support from their technical people. The response time needs to be better.

I am also using the Cisco Firepower model 4110.

The main difference is basically Sophos is not like a Firepower. Sophos we can call by the UTM device management. For security purposes, we are using a Cisco firewall for different types of attacks. For bandwidth management with filtering and other activities, just normal activities, we are using Sophos.

The initial deployment is not complex, however, it's mid-level. You do need some experience. It depends on the device model. If we purchase the higher model, then the price or other investment is also more.

The deployment takes a maximum of one month. We do maintenance on the devices maybe once a year. 

For the deployment process, the partner helped us deploy the devices and three people were working on the deployment.

The initial price is high and we purchased a three-year licensing model. Every three years, after every three years, we need to renew Sophos. Everything is included under the license. 

The pricing is quite low, and we are quite happy with it.

We're a customer and end-user.

We are using the hardware version of the product. It's the latest version. 

I'd rate the solution a seven out of ten.

I am a system integrator. We integrate SG, XG, and XGS.

We are also deploying it on Azure on-premises for our clients.

Sophos XG is a firewall. It can protect your internal users if it is on-premises. It can publish applications such as websites, it can also protect your internal networks like IPS, and IDS. It provides you with VPN Access, and it gives you reports on the consumption of the internet.

If you have deployed the endpoint between the antivirus in Sophos, it can also communicate with your endpoint and protect your users if infected.

It's a complete firewall solution that has everything.

It is very useful.

It competes with the majority of the market's products, including Palo Alto and Fortinet.

We always strive for more features.

We could see the bandwidth use right away with the prior version, which was the SG version. The current bandwidth consumption is no longer shown in the XG and XGS.

They are nearly a complete solution. However, they are missing this feature with the ability to view the current bandwidth usage. We have requested this, but have not had a reply yet. It was in SG before but it was removed in XG.

We have been working with Sophos XG for six years. 

We started with SG, then XG, and now XGS nine years ago.

It can be deployed both on the cloud and on-premises. 

Sophos XG is very stable. We haven't had a single issue with stability in the nine years we have been using Sophos.

All electric appliances rely on a stable electric current, which requires the use of a UPS, and a backup power supply. The main issue is the stability of the power.

All Sophos appliances are SSD-based, which means the hard drive in the appliance is solid-state.

we have deployed more than 50, 60 for our customers in Kuwait and we haven't had an issue or, any RMA.

When purchasing a firewall, as a customer, you must first plan, consult with your partner(s), and decide on the sizing. If you buy an XGS 230, for example, it can support up to 200 users and 50 VPNs. If you buy the wrong product, you won't be able to scale it up.

You should always size upfront. If you have a hundred users, you buy an appliance that can support 150. The license is the license.

It's all about the hardware. If you purchase small hardware and you know that after one year you're going to have more employees then it is wrong.

It's not a server, where you can just add more drives, It only has expansion units for the network. If you need to add fiber, for example, you can. There are expansion units, but you can't expand the architecture of the firewall.

We have more than 50 customers.

We haven't required any technical support. I have however heard from my peers that they have not had any issues with the customer support.

They have offices in India, Dubai, and even in the United Kingdom. As we are certified Gold partners in Kuwait, we haven't had any issues with the Sophos team. They are quite responsive when you have a tender to submit. I have no complaints at all.

in the past, we also integrated Palo Alto.

The initial setup is easy and straightforward. As certified partners, this is something that we do every week. If the customers provide you with the network details, you can have it up and running in 30 minutes with no issues.

It's a problem if you don't know your firewall, or how to deploy it, or know how to put the proper rule in place. It is very important that in any firewall if the customer doesn't know what rule should be in place, it is possible they will create the wrong rule and expose the network.

You have to have a certified person to maintain the solution. How many you will need depends on the number of customers. If you have a lot of customers, you will need two technical people. It also depends on the size of your business. One is fine but as you grow with more customers, you will need at least two to deploy and maintain the solution.

I don't have any issues with the price. The price varies depending on the market. The price of Sophos in Europe differs from that in our region, GCG, and from that in the United States. You will notice that each region has a different pricing structure. 

Customers will always try to minimize the cost. When compared to other products, Sophos licensing is very affordable.

They have already released the XGS. If you are referring to the previous version, XG. It is still in production and available for purchase. They have already released the XGS, which is the next generation of the XG. It has a more advanced architecture. Now that we have passed XG, there's XGS on the market.

Remember to size your customers. You'll need to know how many web applications you will be publishing, how many end customers the company has, and how many of them will need to connect to the VPN. It's a formula that, based on the data, that will determine which appliance you require. You can start with a little one, but it's best to understand the requirements first.

We are very happy with Sophos products.

I would rate Sophos XG a ten out of ten.

I use the solution in my company for VPN connectivity and security purposes.

The most valuable feature of the solution stems from its ability to block websites.

The product's user interface has certain shortcomings where improvements are required.

I have been using Sophos XG for a year and a half.

There are no stability issues in the product.

The solution's technical support was good. I rate the technical support a ten out of ten.

Positive

I don't have experience with any other product apart from Sophos XG.

The product's initial setup phase was straightforward.

The solution can be deployed in two months.

The product doesn't help save time or money in our company.

Sophos XG can be considered as an averagely-priced tool in the market.

My company chose Sophos XG over other products in the market, considering that the solution provides its users with good support and a strong firewall.

Sophos XG has improved our company's network security.

The product's threat intelligence capabilities are very nice.

I am satisfied with the user interface of the product.

It is easy to manage the product.

The product has not been integrated with other tools.

I rate the tool a ten out of ten.