Sophos UTM Reviews

We use this solution ourselves and we also deploy to our clients. It is a capable, general-purpose firewall with VPN tunneling built in, and a lot of web features if you're hosting a website. We are resellers of Sophos and I'm a partner in our company. 

We haven't changed our procedures as a result of using this product but maybe the flip side is the case. We haven't had to change our procedure because we have this great tool that keeps the bad guys away.

I would say the email for sure and the basic firewall functions are great features. It also has advanced firewall scanning. If you receive a file, you can have it scanned through Sophos. It's a really complete product.

Sophos has a very small crew of people who continue to work on enhancing the UTM. At some point, they had actually stopped enhancing it and the word on the street was that they weren't going to enhance it any more because everybody was going to go over to XG, but they found that 50% of their users were still on the UTM and that was five years after they'd come out with the XG line. They decided they were going to rebuild some core parts of XG, and that would take a while. It's been six years and they're still not there. The updates come out agonizingly slowly. They just trickle out and when there's a problem with an update it takes a while to sort out. It's still a viable product but the more they improve XG, the less you have a need to stick with SG.

I've been using this solution for 15 years. 

There are some legacy things that were probably fine back in the day when it was invented in Germany, things like the IPS, the Intrusion Protection engine. It's terrific and it works really well, but it can be a little bit slow. Because of the way that some pieces are built, for example the core for the IPS runs on only core, even if you have a multi-core CPU. 15 years ago that wasn't a big deal because your weak link was going to be your computer. But nowadays, you could have a fast enough computer if they could just let it work with multi-cores. They clearly aren't interested in rewriting large portions of the code because they're going to the XG so all they do is fix it or maybe add a feature that's in the marketplace. Over time, they've been adding more ways to do a VPN tunnel but some things they need haven't been added because it would require a big rewrite and they don't want to go there.

The scalability has worked great for us. Everyone in our company uses it even though some may not know that they're using it. One of our larger clients, with a super computing center and some of the fastest computers in the world, use Sophos, so I would say that it does the job.  

Technical support have been very good. They are very knowledgeable but it can take too long to make contact. They're great once you do get hold of them. They've solved every problem we've had. 

We've tried numerous other solutions. Cisco, and some of the other major ones that were out there, but once we started using this, it was so much better in so many ways, we just dumped all the others.

The initial setup is pretty straightforward. They have a template which takes you through and asks what you want protected. There's still a lot to do after that because there are variations which require more work. For example, if I have clients who need to block certain email addresses, I have to go through and set those up. If I need to allow conversations which require specific ports open in order to get to a particular business or credit card processing, that has to be set up. There is a lot of HIPAA detail in it and it also has credit card compliance things which require a manual set up. The setup requires a knowledge base. 

The solution is 100% free. You can just download the software for up to 50 IP addresses. It is a hundred percent free. Throw it on your own machine. Right, it's a native Linux product, a hardened Linux product and it's free for that sort of user.

The solution has email firewall built in with all sorts of functionality, it is an absolutely excellent firewall, the logging is really good, you get great information about what's going on. It does things like GeoIP tracking and you can make decisions based on where people are coming from. It's just really a complete firewall. I would say if you're just starting right now, get the XG. Not that the UPM isn't outstanding, but it's disappearing. You might as well learn the XG. The product still works really well, although it's getting a bit long in the tooth. The sooner that they come out with the XG that can do everything that the UTM does, the faster the rest of the world will make the jump.

I would rate this solution an eight out of 10. 

We primarily use the solution for perimeter security in order to protect content. We also use it for the XG firewall.

The content filtering is the solution's most valuable aspect.

The initial setup is pretty easy.

The solution is pretty easy to manage.

There needs to be some improvement in the IPsec VPN. There is implementation only support. I have version one. I'd be most interested in having IP version two from the protocol.

I've been using the solution for about five years or so at this point.

The stability of the product is quite good. We haven't had any issues with bugs or glitches. It doesn't crash or freeze on us. We trust its reliability.

We don't really have scalability in mind right now. I need proof of all that. It's a single device that we have.

We don't plan on increasing usage with this device. In fact, we're considering a switch to Sophos XG.

We've never directly worked with Sophos' technical support. We've always dealt with the Sophos partners.

We also don't really have any experience with online community support or documentation.

I previously worked with Microsoft BMG. At the time we switched, Sophos was the better option. We needed a solution that was easy to manage and Sophos fit the bill in that sense. Microsoft didn't really offer any support. Sophos also was integrated with a directory and a single sign-on.

We're actually looking at switching to Sophos XG in the near future. The main difference between the two lines of Sophos products is the level of support provided. XG offers more of what we need. We may also eventually move to a Huawei firewall.

The initial implementation is not complex. We found it to be very straightforward. It was easy.

The deployment took approximately one week. It didn't take too long.

We had two people on staff that handle deployment and maintenance.

We had a consultant help us manage the implementation. hey were very good and quite knowledgable. We were satisfied with the assistance they provided to our team.

We pay for the service on a yearly basis. The last time we paid was in June, for a year. At the time, it was about $20,000.

There are no costs above a standard licensing fee.

We're just customers. We don't have a business relationship with Sophos.

I can't remember the exact version of the solution I am currently using, however, I believe it to be around version 9.

It's a good product, and I would recommend it, however, I would advise other potential users to instead maybe consider Sophos XG.

Overall, I would rate the solution at an eight out of ten.

Our primary use cases include: 

• Remote SSL connection
• Web-filtering
• Web server protection
• WAF application.
• Firewall rules

We have securely deploy systems accesible only behind encrypted ssl vpn and all user can access without the risk of data exposure.

The most valuable feature is the price. I've been requesting prices all over these years between different solutions like Fortinet, Palo Alto, and Check Point and Sophos has been the cheapest and the best of all of them that I have tried. I have been working with Fortinet, it's a fact that the sophos price is surprisingly better.

I have also worked with Check Point and it's not far enough from what Sophos can do. In terms of quality and functionality, Sophos is very useful and better than the competition.

Sophos should improve its ability to check something like bandwidth consumption for users or something more real-time.

real time trafic graph most show specific info from user, ip and bandwith, in my personal opinion i have seen better traffic graphs in open source firewalls.

I have been using Sophos UTM for six years.

It's very stable. In all the time I have been using it, I haven't seen it fail or gets stuck.

Scalability is not a complex issue and is something you can do within 20 minutes. I've been managing three UTMs, one with 50 users, another one with around 150, and the biggest one has 3,000 users.

i used PFSense, the capabilities of UTM sophos y very much higher and powerfull.

The initial setup was straightforward. It depends on the rules, but a basic setup can take up to seven to 15 minutes max.

Based on cost compare with other vendor who bill per license and OTP users, the ROI have been set as far as 6 moths.

SOphos is the best alternative in features, specifications and lower price.

yes i did, Fortinet, Checkpoint, Palo Alto, Meraki.

It's a good solution, I would say to go for it. 

I would rate Sophos UTM a nine out of ten.

It is a very good product. The threat monitoring process is the most valuable feature. 

Sophos is good for endpoint security but Trend Micro is better than Sophos. APEX is better than Sophos because it has a friendly, usable dashboard, and the implementation is very easy.

Sophos should be more user-friendly, have more dashboards, and an easier implementation.

It is the cheapest product available. It's good if you have a low budget. 

I would rate Sophos UTM a ten out of ten. 

We use it for email security, malware protection, IPS, and filtering.

It is easy to manage. 

The five-factor authentication needs improvement. 

It needs central management. 

I have been using Sophos UTM for a few years. 

It is stable.

We have around 400 users. 

We offer certified support. 

The initial setup was straightforward. We had a problem with the multi-factor authentication.

I would recommend Sophos, it is easy besides for the five-factor authentication. It is good for my needs. 

I would rate it a seven out of ten. 

We mainly use it for web filtration — we have a number of small websites. It's also a VPN — that's filtering, firewalling, and IPS.

Within our organization, there are roughly 250 people using Sophos UTM. Also, we have around 15 XG users.

We plan on using XG for the next few years, but we are going to stop using UTM on our main site.

I think the behavior with the zones was a little bit tricky to understand at the beginning of this project. It can be hard to manage at first, but overall, we don't have many problems with this solution.

I have been using this solution for one and a half years.

It's stable, but the reaction time of the GUI is terrible; however, in my opinion, UTM is more stable than XG.

Sometimes, It can be quite a time-consuming process to book a session with Sophos' support.

The initial setup was not straightforward because we had experience with UTM, but not with XG. It's a completely different system. 

We had it up and running within one week.

We installed it on our own.

I would recommend UTM over XG because it's easier to manage.

On a scale from one to ten, I would give XG a rating of 6. Conversely, I would give UTM a rating of nine.

We primarily use this solution for:

• VLAN separated network
• Proxy / SSL-Interception
• VPN (IPsec and SSL)
• Reverse Proxy / Webserver Security
• Email Security / Mail gateway
• HA (Hot-Standby)
• IPS / ATP

This is a very good security solution for SMB, so this solution is a good fit for many of our customers.

We find all of the features valuable because together they fit the needs of our customers.

We would be happy with fewer new features over the same time, but with more stable updates!

We would like to have unique viewable IDs for rules and in the packet filter logfile, for easier debugging of old log files.

Sophos UTM shouldn't die.

We use this solution for IPsec & site-to-site SSL VPN.

My environment involves connecting all of our branches with the head office through one Sophos XG 210 device. This is done using IPsec and SSL VPN, after which we apply a web filter, as well as an application filter to ensure that we are getting a secure connection.

It allows me to easily connect with more than forty-five remote sites and more than fifty remote users between IPsec and SSL VPN, applying the web filter and application filter to ensure a secure connection.

This solution also gives me varieties of VPN policies for good data encryption.

The most valuable features of this solution are:

• High Availability between IPsec site tunnels provides a valid continuous connection and ensures we have no downtime affecting our business.
• Log Viewer allows me to monitor all incoming and outgoing traffic, as well as view and block vulnerabilities.

I would like to see the SD-WAN feature improved. I want to manage many lines and load-balance them, getting high availability by making SLA tests according to:

1. Check interval.
2. Failures before inactive.
3. Restore link after.
4. SD-WAN Rules to control bandwidth, download and upload stream.

I switched to Sophos as it is more reliable.

This solution is less expensive than FortiGate. 

We did not evaluate other solutions prior to choosing this one.

I use this solution in both the home and office, and I am also a reseller of the product. It is used for Unified Threat Management for SMB to Mid-Size companies. It provides VPN solutions for our clients, and it has the absolute best UI in the industry.

This solution makes remote support of clients extremely easy and flexible. Modifications can be made in minutes. New definitions of network objects, users, groups, etc. can be made from anywhere in the UI.

The most valuable feature is the user interface, which is flexible, powerful, and easy to understand. Configuration troubleshooting is eased by the use of the color-coded, live firewall log. Live logs for most features are also available.

Support for IKEv2 is needed in this solution. But, the handwriting is on the wall that Sophos will probably stop development in favor of their XG Firewall. No timeframe on that yet though.

We have been using this solution since it was the Astaro Security Gateway (/products/sophos-utm-reviews ).

We use this solution for communication endpoint, encryption, and network security. We are focused on providing security software to the small to mid-market enterprises; the essence of our delivery is internet security.

The features that I've known to be the most valuable are both the web security features as well as the web firewall capabilities. As a partner of Sophos firewall, we have some clients that are using Sophos firewall UTM and we use it as well.

One additional feature that should be included in the next release is
synchronized security, which would enable all the security to work together as a system. Another suggestion is to add advanced threat protection (ATP) to defend against sophisticated Malware. Seeing these additional improvements would be a great thing going forward.  

The product is stable. It's a product that our clients are able to use and enjoy. We haven't had many complaints about the product at all. Internally we haven't experienced any problems. 

The scalability is also fine. Currently, we have 20 employees using the product to date and only one employee needed to maintain the product. At the moment we don't have any plans to increase usage in the company. Not now, next year maybe.

We train our employee's on technical support. I don't need any outside technical support.

The only time we faced a problem or issue is when we place a ticket. We have found that the response is very slow. That seems to be our biggest problem.

We previously used Cyberoam but Sophos acquired Cyberoam. That's why we migrated to Sophos.

The initial setup was done with our engineers, they also set up that server firewall. The setup was straightforward.

The deployment took one month. We're a support base reseller. Our in-house team took care of it. We don't use anyone from the outside, we can deploy the product on our own.

Everything involving pricing and licensing is maintained by our Bangladesh Sophos country managers. The pricing is okay and the licensing is also included in the price.

Sophos UTM is a good product for security purposes and maybe if Sophos provided another company option to implement their products then I would say that Sophos UTM is great.

On a scale of one to ten with 10 being the best, I would give this solution a nine out of 10.