I've tried out Sophos XG a little. It has a good interface that's very user-friendly, but I haven't used all of its functions because I'm only configuring and running the system.
Senior System & Security Administrator at a legal firm with 51-200 employees
It has a good interface that's very user-friendly
Pros and Cons
- "I've tried out Sophos XG a little. It has a good interface that's very user-friendly, but I haven't used all of its functions because I'm only configuring and running the system."
- "I would prefer if Sophos XG were cheaper. A lower price would benefit me as a system provider for the end customer. The cost of the license and renewal for all the software and devices is somewhat high."
What is most valuable?
For how long have I used the solution?
I've been working with Sophos XG for six months. I am not an end-user. I only provide the solution and implementation.
What do I think about the stability of the solution?
I think Sophos XG is very stable because the users who have installed it never mention any issues. It's very stable and scalable.
What do I think about the scalability of the solution?
Sophos XG is a scalable solution. Our clients who use Sophos are not big companies.
Buyer's Guide
Sophos XG
March 2025

Learn what your peers think about Sophos XG. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
845,485 professionals have used our research since 2012.
How are customer service and support?
I haven't dealt with Sophos support because I'm just doing the basic implementation for the Sophos. But I Sophos support is very experienced and helpful. Sophos has a team for administration and implementation—a good team to improve the application.
How was the initial setup?
It depends on the implementation and the deployment of systems. In my small company, I have four people on my technical team. Two of them specialize in firewall and security. They're working on Fortinet. They deal with antivirus and security implementation as well as Veeam Backup. The other two handle the administration implementation, including Active Directory and other administration solutions.
What's my experience with pricing, setup cost, and licensing?
I would prefer if Sophos XG were cheaper. A lower price would benefit me as a system provider for the end customer. The cost of the license and renewal for all the software and devices is somewhat high.
What other advice do I have?
I rate Sophos XG nine out of 10. I am a Fortinet partner. If a user asks me which solution to buy, I'll tell them Fortinet. But if the customer needs Sophos, I will implement it for him. However, if I had a Sophos partnership, I would recommend it every time.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Software Engineer at a tech services company with 201-500 employees
Dual antivirus sets solution apart from other vendors
Pros and Cons
- "Sophos CG is cost-effective, which makes it really suitable for SMB. If you want basic security and more embedded features, go with Sophos XG."
- "We are facing some technical issues with Sophos XG right now. We have already escalated this issue with the Sophos technical support. They seem to be working on it. We are satisfied with the technical support. They reply quickly to our queries, but sometimes take time upgrading their systems."
What is our primary use case?
We do not have a primary use case for this solution. We are using Sophos XG to configure wireless networks. Some of our clients have Sophos XG integrations and we are using the MAC filtering on it.
We also use the Sophos XG antivirus, content filtering, and as a secure email gateway.
We have a bundled license with an email security subscription. We also use the free Sophos XG VPN.
What sets Sophos XG apart from other vendors is the solution's dual antivirus. We enabled the Security Heartbeat feature, which synchs endpoints with the network layer antivirus; they work as a single unit. If there is a virus attack from outside world, the firewall handles it. If a virus comes when the network layer is idle, the endpoint protection takes care of it, which is why we are using this solution in our office scenario.
What is most valuable?
The solution is not vulnerable and that is the most important aspect of it for me. We deployed the Sophos XG firewall on the Edge browser and everything that comes in from the outside world as a potential threat is handled by the firewall.
I'm satisfied with the user interface and the solution's security level. They have a sandboxing solution for zero-day threats and a real-time cloud solution with millions of tags. I think the number at this point is four million tags. This is a good features in Sophos XG; it provides more security against new attacks, which are generated every day.
What needs improvement?
I don't see any drawbacks to this solution at the moment. I know of other products that have more features and are more advanced stages, but ultimately, an organization's choice of software depends on its budget. If you have a small amount of money and you want to secure your network, Sophos XG can provide you with network security. Sophos ZG is a mid-range solution. There are solutions that are above it in terms of features on the market, but they cost more money.
They could work on their technical support to make it more productive for the end customer. Some of my friends and colleagues have had unfavorable experiences with the tech support taking too long to close their ticket. However, I opened two cases this week and both have been resolved.
For how long have I used the solution?
I have been using Sophos XG for five years.
What do I think about the scalability of the solution?
My impressions of the solution's scalability is that it varies depending on the model or capability of the box. When we have clients that want to deploy a small box on 200 or 150 users, we suggest that they get a box that's better able to cater to problems and their traffic. If a customer has 35 or 50 users, we will propose just a small box.
How are customer service and technical support?
We are facing some technical issues with Sophos XG right now. We have already escalated this issue with the Sophos technical support. They seem to be working on it.
We are satisfied with the technical support. They reply quickly to our queries, but sometimes take time upgrading their systems.
How was the initial setup?
The initial setup was not complex. I was new to the solution when I deployed it and I didn't face any problems; it wasn't a hassle or challenging for me.
Which other solutions did I evaluate?
I did not evaluate any other options.
What other advice do I have?
This is a mature product. It has a good Gartner rating. It is best for the enterprise level, for the SMBs. Anyone can deploy according to the needs of their customers.
Sophos CG is cost-effective, which makes it really suitable for SMB. If you want basic security and more embedded features, go with Sophos XG.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Buyer's Guide
Sophos XG
March 2025

Learn what your peers think about Sophos XG. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
845,485 professionals have used our research since 2012.
Network Team Lead at a manufacturing company with 5,001-10,000 employees
It is user friendly and reliable, but it needs granular control over the traffic
Pros and Cons
- "It is very user friendly and easy to manage from the administrative point of view. It is good, reliable, and easy to implement."
- "It is a very basic and entry-level firewall. It doesn't give very granular control over the traffic. It should have more granular control over the traffic. This feature should be there similar to Palo Alto and Cisco. It should have such advanced features."
What is most valuable?
It is very user friendly and easy to manage from the administrative point of view. It is good, reliable, and easy to implement.
What needs improvement?
It is a very basic and entry-level firewall. It doesn't give very granular control over the traffic. It should have more granular control over the traffic. This feature should be there similar to Palo Alto and Cisco. It should have such advanced features.
For how long have I used the solution?
I have been using Sophos XG for the last two years. We are using the latest version.
What do I think about the stability of the solution?
Its stability and reliability are fine.
What do I think about the scalability of the solution?
If you want to have multiple firewall rules, it has this type of scalability. When I compare it with some other products, such as Palo Alto, I can't find similar scalability in Sophos XG. In Palo Alto, we can have rules based on applications or app IDs, and we can create multiple rules for a single ID. We can create a single user or single IP, but such options are not there in Sophos XG. Granular level scalability should be there in Sophos, and they should do better.
How are customer service and technical support?
I appreciate their support. Their support is good.
Which solution did I use previously and why did I switch?
I also use Palo Alto. Palo Alto provides application IDs, which is a very powerful feature. Sophos XG is a very normal next-generation firewall with URL filtering, application filtering, and all such features. It is not something extraordinary. It is a very normal next-generation firewall.
How was the initial setup?
The initial setup is straightforward. It is a single day task to do the initial configuration and move the traffic over there. The firewall hardening, of course, will take some time depending upon the traffic, but the initial setup is a single day task.
What other advice do I have?
It is a normal firewall. All the basic features are there. However, it is not as advanced as some of the other solutions, such as Palo Alto. As we have more security threats, we need more granular control, but these features are not available in Sophos XG.
I would rate Sophos XG a five out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Lead NOC Engineer at a energy/utilities company with 51-200 employees
Has an intuitive interface. Easy to look at the logs and troubleshoot issues.
What is most valuable?
For one, its ease of use is the most valuable feature. It's very easy to look at the logs and troubleshoot issues as they arise. Things just make sense and it is a very intuitive interface.
How has it helped my organization?
It is easier to use than Cisco ASA, so it has reduced our SLAs by a considerable margin.
What needs improvement?
The VPN and central management need to be improved, but that's being nit-picky.
The IPsec VPNs are a little on the buggy side and you sometimes have to jump through hoops to get it to work. When I looked at them last, they were still in development for the centralized management of the firewalls, so when I saw it, it was very much in its infancy.
One more thing to add to what they can improve is the firewall policy presentation, they have their own special way of doing it which takes time for some to get used to, especially if you’re used to Cisco ASA.
For how long have I used the solution?
I have used this solution for about a year.
What do I think about the stability of the solution?
There were no stability issues.
What do I think about the scalability of the solution?
There were no scalability issues, it is very scalable.
How are customer service and technical support?
I would rate the technical support a 10/10; they are very professional. I know a couple of those guys over there on a first name basis.
Which solution did I use previously and why did I switch?
Previously, we were using another solution. However, we switched as we needed to upgrade our infrastructure.
How was the initial setup?
The setup was pretty straightforward. They had someone come in, walk us through it and train us on the platform.
What other advice do I have?
Get the professional support contract; it is well-worth it and those guys know their product very very well.
It is a very solid product, easy to use and implement.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Owner at InternetWorld Solutions Sdn Bhd
Functionality is straightforward, but tech support could be improved
Pros and Cons
- "In terms of the functionality, I think it's pretty straightforward. It's easy to pick up. It's also user-friendly."
- "Support could be improved."
What is our primary use case?
The firewall is used to maintain security. Basically, it's used to make sure that our clients' corporate network is secure. We want to make sure that their email is scanned, protected, and so on.
What is most valuable?
In terms of the functionality, I think it's pretty straightforward. It's easy to pick up. It's also user-friendly.
What needs improvement?
Support could be improved.
For how long have I used the solution?
I have been selling Sophos XG for two years. It is deployed on-premise.
What do I think about the scalability of the solution?
When it comes to scalability, of course we can upgrade. A lot of firewalls don't allow upgrades. An upgrade would mean changing the box. For our customers, a lot of the functions of the firewall don't reduce. We just need to make sure they enable the security, and then make sure it's giving the protection to the client.
For scalability when it comes to the server, I can add the RAM, the hard disc, and the CPU to boost up the performance.
How are customer service and support?
The principal tech support is not very present in Malaysia. We are relying on the distributor. Most of the technical things we can handle on our own, like when it comes to setup. When it comes to the issues related to product hardware or software bugs, we will reach out to them. But the response is from the distributor.
The support could be a bit better.
How was the initial setup?
Installation for each version, like Fortinet and Next Generation Firewall, is simple. Based on how familiar we are with the client, it can take a day or two.
We only need one or two people for deployment.
What's my experience with pricing, setup cost, and licensing?
For every firewall, you will need to pay the license for the following year. If they don't pay for the license renewal, they basically won't get the support from Sophos.
What other advice do I have?
They do have their own integration, so I don't really have much to comment about Sophos because we basically just maintain the Sophos Firewall that we supply. We don't do a lot of fancy design work.
We are currently still evaluating the solution.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
Senior Manager, Information Technology at a university with 201-500 employees
Reliable and easy to install, but the policies should be upgraded
Pros and Cons
- "It is simple to use."
- "In the next release, I would like to see improvements to simplify the interface and more policy deployments."
What is our primary use case?
We use this solution as a firewall for everyone to connect to the internet.
We protect ourself and we use it as a VPN to connect to the internal network.
How has it helped my organization?
It is improved significantly.
What is most valuable?
It is simple to use.
What needs improvement?
The interface should be changed. It should be more user-friendly.
They should also update the policies and statistics because Fortinet is better, but Sophos could grow.
In the next release, I would like to see improvements to simplify the interface and more policy deployments.
For how long have I used the solution?
It was Cyberoam and we upgraded to Sophos XG. We have been using Cyberoam for more than 10 years and more than one year with Sophos XG.
We were on version 17 and have just upgraded to version 18.
What do I think about the stability of the solution?
It's stable. We have no problem at all with stability or with Sophos XG.
What do I think about the scalability of the solution?
Its high availability is fine, it's good. It's scalable as well.
We have approximately 500 employees using this solution.
We will continue and increase our usage of this product.
How are customer service and technical support?
We had one issue with Cyberoam, but it was upgraded with Sophos. They helped us, but it takes a bit of time to resolve it but it's fine.
Which solution did I use previously and why did I switch?
We also use Fortinet FortiGate for large locations. The Fortinet usage is completely different than Sophos. Sophos is simple, but I prefer Fortinet.
How was the initial setup?
It's easy to install.
It takes the team one hour to launch it.
We have a team of 15 people to deploy and maintain this solution.
What about the implementation team?
We completed the installation ourselves.
What's my experience with pricing, setup cost, and licensing?
We purchased the technical appliances for on-premises.
We have our license for three years.
Which other solutions did I evaluate?
Yes. Fortinet. However the price is much better to Fortinet.
What other advice do I have?
I would recommend Sophos XG to others, but it would depend on their capacity.
I would rate Sophos XG a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior IT Manager at a agriculture with 11-50 employees
A stable, flexible, and easy-to-use solution that works well and comes with a web management portal that can be accessed from anywhere
Pros and Cons
- "It is stable, flexible, and easy to use. It has got a web management portal that can be accessed from anywhere."
- "I would like to have more artificial intelligence in the web monitoring service that comes with it. It should alert us when particular events happen. It has already got some of that. I know that it is more of a service, and Sophos is already looking at it. It is called SIEM."
What is our primary use case?
It can be used as a firewall, SD-WAN enabler, and secure web gateway. You can also use it for unified threat management, email detection, mobile device management, and wireless management. I use it in the cloud and on-premises, and I have its latest version.
What is most valuable?
It is stable, flexible, and easy to use. It has got a web management portal that can be accessed from anywhere.
What needs improvement?
I would like to have more artificial intelligence in the web monitoring service that comes with it. It should alert us when particular events happen. It has already got some of that. I know that it is more of a service, and Sophos is already looking at it. It is called SIEM.
For how long have I used the solution?
I have been using this solution for a few years.
What do I think about the scalability of the solution?
We have roughly 700 users who use this firewall.
How are customer service and technical support?
I have interacted with them a few times. I am very satisfied with their technical support.
Which solution did I use previously and why did I switch?
We were using FortiGate.
How was the initial setup?
It is easy to install. I have done the installation in less than a day.
What about the implementation team?
We did it ourselves. We have two people for its deployment. We have one engineer and one admin.
What's my experience with pricing, setup cost, and licensing?
It is not that expensive compared to the other solutions. It is about the same price range as Fortigate, which we used previously. Licensing is on a yearly basis.
What other advice do I have?
I would recommend this solution. We're very happy with the product. It works very well, and we don't have too many issues.
I would rate Sophos XG a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Network Engineer at Spectrum Engineering Consortium Ltd.
Reliable and flexible for small and large companies, but has some feature issues to resolve
Pros and Cons
- "Sophos XG Firewall is very usable, very easy to install, and very user friendly."
- "We are facing some problems on this firmware version, version 18, that require improvement. We want to improve the email security because it doesn't give proper security with the data protection. Also, our clients are facing some problems where most of the sites which they're accessing are getting blocked. I want to improve those sites, that email security, and the data protection on the Firmware version 18."
What is our primary use case?
You can use Sophos XG in small or large companies. In a small company we are using it as a router and firewall. In larger company, like in the Bangladesh government, they are using Sophos Firewall in various sites, including the Bangladesh Navy. Many of the sites are using Sophos Firewall as a router and firewall and also for security purposes.
How has it helped my organization?
Sophos XG Firewall is for security purposes and we are also using it as a router. Wherever we are deploying it as a router we are mapping and also port forwarding. More clients take it as a router and also a firewall.
What is most valuable?
Sophos XG Firewall is very usable, very easy to install, and very user friendly.
The features that I have found most valuable are the infiltration prevention and data protection. We provide immune security. There are also many features on the VPN. We provide a social VPN. We deployed so many features.
What needs improvement?
We are facing some problems on this firmware version, version 18, that require improvement. We want to improve the email security because it doesn't give proper security with the data protection. Also, our clients are facing some problems where most of the sites which they're accessing are getting blocked. I want to improve those sites, that email security, and the data protection on the Firmware version 18. Also, sometimes it gets frozen and we cannot access it. After we shut it down and restart, then it's perfect. That's a point that we want to improve.
In the next release, I want them to please improve version 18 so that it has more features and is more user friendly and it should have a VRF option.
For how long have I used the solution?
We are using Sophos XG for five years.
What do I think about the stability of the solution?
Sophos XG is stable.
Maintenance, once it is established on the network, requires about two to three people dedicated to Sophos Firewall. We have to give about two to three days monthly.
What do I think about the scalability of the solution?
Scalability is good.
We have about a thousand or more users and have plans to increase usage of this product.
How are customer service and support?
The Sophos support team is good now.
How was the initial setup?
Initial setup is easy. It took about one hour to do the initial setup.
What about the implementation team?
I am an implementer so I deployed it by myself.
What's my experience with pricing, setup cost, and licensing?
Sophos XG is on a subscription basis. We can take a one year or two year subscription.
What other advice do I have?
On a scale of one to ten, I will give Sophos XG a seven.
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Buyer's Guide
Download our free Sophos XG Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2025
Product Categories
FirewallsPopular Comparisons
Fortinet FortiGate
Netgate pfSense
OPNsense
Cisco Secure Firewall
Palo Alto Networks NG Firewalls
Check Point NGFW
Azure Firewall
WatchGuard Firebox
SonicWall TZ
Juniper SRX Series Firewall
Fortinet FortiGate-VM
SonicWall NSa
Sophos XGS
Untangle NG Firewall
KerioControl
Buyer's Guide
Download our free Sophos XG Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Sophos XG 210 vs Fortigate FG 100E
- What Is The Biggest Difference Between Sophos UTM and Sophos XG?
- What is the biggest difference between Sophos XG and FortiGate?
- Which firewall is better and why: Sophos XG 210 or Fortinet FortiGate 100E?
- Which solution do you prefer: Fortinet FortiGate or Sophos XG?
- What are the main differences in features between Sophos XG and FortiGate 80F?
- Which solution do you prefer: Fortinet FortiGate or Sophos XG?
- How does Meraki MX compare with Sophos XG?
- Which firewall to choose for an SMB to prevent malware damage: Cisco Firepower or Sophos XG?
- Looking for a technical comparison between Sophos XG550 and Fortinet FortiGate 600E
Thanks Sean, a very informative review. I am seriously considering the XG125 but slightly concerned about the VPN aspect as VPNs are used predominantly in our network. Also considering the Fortigate 60E.