Sophos XGS Reviews

We use the solution for the firewall.

The configuration is fantastic, highly efficient, and robust. We don’t have to spend more considering the organization’s size. It's easy to configure what you want to do. The response time is very good. VPN connections have been stable.

The payment plan could be improved.

Sophos XGS comes with mostly eight ports, excluding the five ports. It would be better if they could increase the eight ports to ten. Most times, we don't want to use two. I will need to get another switch if I have five ISPs. Sophos engineer should look into that.

There were issues while switching the firmware to an upgraded version.

I have been using Sophos XGS for five years.

The product is stable.

The solution's scalability is good. It depends on what you have and the advanced structures from purchasing a particular version.

We have 80 users and 30 servers in our organization.

The initial setup is straightforward but a bit complex on production. You will need to configure the IP addresses of each device. We have scheduled downtime to safeguard stakeholder data periodically. We anticipate smooth transitions during these times. However, there may be instances where complexity arises, particularly regarding backups. For instance, when transitioning from firmware version 19.0 to 20.0, you must first downgrade the new device to version 19.04 before restoring the backup. This process requires a good understanding of the techniques involved. While we aim for simplicity, complexities may still arise. The migration takes two hours to complete.

We terminated one cable and continued the conversion using the backup from production. We quickly transferred it and pushed it into the new one. When we noticed it was running, we didn't even remove the whole one. We pushed it to the top and started to unplug the cable, then plugged it in again, repeating the process while waiting for the new box to learn the IP addresses of all the devices.

The solution’s pricing is good.

The first thing to consider is the size of the organization. When evaluating pricing, consider your current needs and what the device offers. You may not need all the features immediately. For smaller enterprises like mortgage institutions and microfinance, we recommend Sophos. It's suitable for them. However, larger organizations can also integrate it, perhaps for specific functions. The configuration, efficiency, and scalability are excellent.

Overall, I rate the solution a nine out of ten.

Sophos helps us set public restrictions and add category filtering to secure the network. It provides ATS and IPS scanning for further protection.

I like the Sophos UI. It interface has a more comfortable feel than the competitors.

I recommend Sophos increase the user capacity of the firewall by 1.5 times. For example, say the firewall can accommodate 1,000 users now, then it should handle a load of 1,500 users.

We've been using Sophos XGS for seven years.

Sophos is a stable product.

Sophos XGS is scalable. My company has almost 6,000 users.

We've contacted Sophos support multiple times for help troubleshooting.

We used a Cisco firewall for four years before Sophos. My company has multiple locations, and some had Sophos, but others used Cisco. After we had a good experience with Sophos, we moved the entire company to Sophos.

Installation is pretty straightforward compared to Juniper and Cisco products. The Sophos installation offers better guidance. 

We handled the installation and configuration with our in-house team.

Sophos isn't expensive. It's a mid-range solution that's cheap but not too much cheaper than competitors. It's a good price that meets all our compliance requirements. 

I rate Sophos XGS eight out of 10. 

I am a cyber professional. I support customers with this solution. Sophos XGS is primarily a firewall. The product allows my customers to manage their internet access for their employees while protecting their environment from things like malware.

The solution requires one administrator as it does not require much maintenance. It depends on the usage and the environment. For example, in some account configurations, the environment has only four or five rules, other times there are over 100 rules. More rules will require more maintenance. 

The most valuable feature of Sophos XGS is the application control. I also enjoy the dashboard and reporting that it provides to my customers. 

Sophos helps my customers manage applications from accessing the internet, not only websites. We can ensure there is limited access to applications like Facebook. For example, Facebook is not accessible, but Facebook Messenger for chatting is. This prevents posting and sharing. We make restrictions without prevention.

Sophos XGS would benefit from further development in the SD-WAN area. It would be great if they could give technical people access to all the WAN links that we are connecting to, including inside the SD-WAN. 

They should make available or round robin inside the SD-WAN. This would allow us to move to another link if one goes down.

I have been using Sophos XGS for six years.

There have been issues with the stability of this product. Sometimes it requires restarting. We have looked into the client environment and this is not causing the instability. The problem is common.

Sophos XGS is not scalable. It is a hardware appliance and we should migrate the settings if we need to. In order for it to scale, you require additional hardware.

Sophos' technical support is responsive. There are times we need to push them to accelerate the process because there is a delay in replying. Sometimes, the first stage of first-line support does not have enough knowledge.

Overall, I would rate their technical support a three out of five.

Neutral

The initial setup of Sophos XGS is straightforward. I would rate it five out of five for ease of setup.

The cost of Sophos XGS is based on per unit, per appliance, and capacity. The capacity depends on the environment. Based on the size, we choose the model. The model selected dictates the pricing.

When comparing the pricing of Sophos to the competition, I give them a five out of five. It is competitively priced.

I have worked with Fortinet and WatchGuard. Other solutions have better performance and security value than Sophos XGS. 

Sophos has most of the features. If they don't have the features one year, they are added the next. At one point they did not have SGON, but now they do. It is not performing like Fortinet or Watch Guard, they need to do some enhancements. 

Sophos has the upper hand on reporting on the firewall itself. For small to medium-sized businesses Sophos is better than the competition.

If the organization is small or medium-sized I would recommend this solution. I would give it a nine out of 10 in this case. If the company is enterprise level, I would rate the solution a five out of 10.

Overall, I rate the Sophos XGS a seven out of 10.

The solution is a layer 7 next-generation firewall, which we use as a firewall and router. We customize rules to help with our security.

We like the layer 7 capability. We have a couple of servers behind the XGS firewall which understands HTTP packets. The solution offers a very accurate setup, and we can use it as a kind of reverse proxy device. Based on the connected URL, we can direct traffic to different servers without a solution.

The solution is very user-friendly, and the GUI is so good that I don't have to use the CLI. This eliminates the need for typing; clicking allows me to get to what I'm looking for.

The application is a little slow; it takes five to ten seconds to respond to every click when configuring. If we need to do significant configuration, it can take a lot of time. This might be because we have a low-end machine, and it could be faster with a high-end one.

We have been working with Sophos XGS for nine months. 

The stability has always been good, we haven't encountered any issues. 

I can't speak much to the scalability as we haven't scaled the tool. I don't think it is scalable the way I have it configured, but there is a high-availability function in the menus. I don't know if the configuration is automatically transferred to new devices.

We have 600 users working behind the solution, and it is very lightweight in terms of maintenance. Sophos provides free web access, so we can go to their website and configure the firewall, which is automatically passed on to the device.

I escalated a question regarding a license issue, and they solved it very quickly, so I rate the tech support highly.

Positive

The initial setup was straightforward. It has an old-style GUI, so we just followed the steps, and much of the setup was automatic.

We implemented via an in-house team. 

We must purchase separate web server licenses, as they are not included in the regular device license. I would rate the product an eight out of ten in terms of price. It's relatively affordable.

I would rate this solution a ten out of ten. 

For personal use, I suggest pfSense, but for business applications, Sophos is great because they have better support and offer an excellent GUI, which makes XGS very easy to operate. pfSense offers console access and is a lot more configurable, which is why I prefer it for home use.

I would advise potential customers to get a free trial license, as it offers the freedom to trial the solution to see if it has the functionality and configuration options required.

The performance is good. 

It is scalable.

Technical support has been helpful in general. 

The fabric solution, the access points, and the WiFi, is not being delivered to Egypt due to some regulations. It's hard to get any devices in Egypt right now.  I need one solution and one centralized interface to monitor all the switches, access points, firewalls, and everything. I found this in Fortinet. Sophos is falling short.

We'd like an interface that can monitor everything. 

The costs could be better. 

I've used the solution for two to three years. 

I can't speak to the stability, however, the performance is good. 

The solution can scale well. It's not a problem to expand it. 

We have about 400 people on the solution currently. 

Technical support is good. 

We also worked with Fortinet. While we are on Sophos right now, we're also moving again towards Fortinet. I'm waiting on the delivery right now. 

I am implementing a new public solution for access points and switches. I'm going to FortiGate since it offers a full solution, and it is already delivered to the country, Egypt. With the Sophos access points, they are not delivering regarding regulatory issues and something like that.

We do have some people on the solution that maintains it. I don't handle the initial step myself. We have a team that does it. 

Our own team can handle the initial implementation.

The pricing of Sophos is the same as Fortinet. In general, the solutions in the market are all around the same price. 

When you go to finalize the project and include another competitor, the distributor tends to give a big discount on the solution to exit to another one.

I'm a customer and end-user. 

I don't know which version of the solution we're currently on. I'm the director of the department, and therefore, I'm not working with it directly. There's a team that's working on the versions and upgrading software and so on, while handling the technical issues. 

I'm just dealing with the high level of design or decision-making.

It's not a bad solution. It's a good option and it takes a market share in Egypt. However, I like Fortinet as they have a device that's reaching in the market and the cost is not bad. They also have an impressive monitoring interface with FortiAnalyzer and FortiManager. 

I'd rate Sophos seven out of ten. 

For network security and filtering through our infrastructure, we rely on Sophos Firewall, specifically using Connect Sophos Cloud in our branches. 

Endpoint protection is crucial, so we integrate with DuoSet, and the system allows for VPN connections with various devices like SaaS, Alibaba, Fortinet, and Cisco, supporting encryption detection and more.

It's crucial for our company, as well as other companies and customers. When our customer licenses expire, they request to renew or make changes to their Sophos XGS boxes. This process is significant and managed by our technical team or engineers.

The Sophos XGS product is highly versatile and well-suited for various companies, including small, medium, and large enterprises. Its effectiveness lies in its inspection firewall capabilities, making it a commonly chosen option in our country due to its reasonable pricing. Sophos Firewall's support for VPN encryption and thorough inspection makes it a suitable choice for many companies, and I recommend it accordingly.

At the moment, I can't propose any new features. The primary concern is traffic stability, which needs improvement. Although the traffic stability is generally good, it has been noted that it can impact RAM and CPU, affecting workflow and inspection.

In my view, Sophos operates effectively in a reactive mode, focusing on static detection and forwarding traffic. However, Fortinet takes a more proactive approach, blocking both connection and route connections. While Sophos forwards any connection in both inbound and outbound traffic, I believe this is a positive aspect, especially in a country with various sizing considerations. This is my perspective, emphasizing the significance of Sophos XGS in software work.

I have been using Sophos XGS for two years. 

It's a stable solution. I would rate it around nine. There is room for improvement, especially in terms of support. As I mentioned earlier, when the CPU and memory reach their maximum capacity, the tool forwards traffic. This is a critical aspect—no inspection, no traffic, and no log.

It is a highly scalable solution. I can't provide an exact count because I work with multiple solutions, including Sophos XGS, Fortinet, and Palo Alto. Counting all the users across these platforms is challenging.

Positive

In the last two years, I have worked with Sophos Firewall, and it is an excellent firewall. It's easy to set up with encryption and inspection features. In my view, it's well-suited for all.

The initial setup of Sophos XGS has been quite smooth and user-friendly. Unlike my experience with Fortinet and Palo Alto, which posed challenges, Sophos XGS stands out for its ease of use. End users can handle the setup themselves without requiring an engineer to configure the firewall or register the device.

It's highly effective and well-suited for medium and small companies. The pricing is attractive, and our customers find it suitable for regular license renewals.

In terms of the firewall, I'm using Sophos X on everything, including the VPN, firewall, and endpoints.

Everything about the product is okay. 

I cannot single out anything specifically, as the firewall is working perfectly. The endpoint is helping me greatly and people have been able to work from home using the VPN. It has been great.

The pricing has been fine so far.

It has a pretty straightforward initial setup.

The solution's quite stable. 

The solution is scalable. 

Technical support has always been very helpful.

In terms of updates with the current technologies and current trends, which we're always exposed to, they update their databases frequently. 

It quickly detects issues. 

It is a plug-and-play system. 

Mainly, it's a cloud-based firewall for cloud-based endpoint protection. I can be able to manage my devices from anywhere without configuring all these VLANs and whatnot.

If I could host my emails using an email transfer agent, hosting it, it would be ideal.

The configurations can be a bit complex. It may be a while before you understand the configuration process.

If you do not have any experience with the product, you may struggle to set it up.

I'd like to see more integrated services from Sophos so I can handle everything from one place without a third-party. I would like to have email hosting and management integrated into Sophos XGS.

I've been using the solution for more than five years now.

It is very stable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution can scale. It just depends on the model we are using. For example, on an XG transit, I can add as many users as I want. On XG 105, I can only have limited users. It depends on the package.

We have more than 80 general users on the solution. We use it intermittently.

I've dealt with support several times. They were awesome. We found them to be helpful and responsive. They are quite knowledgable. 

Positive

The setup process is perfectly okay. I'm an IT administrator. It's not very difficult for me to get everything up and running. I also need to check the integration. 

I'd rate the initial setup a four out of five in terms of ease of execution. 

In terms of pricing, it's good. They've been giving us some promotions where we would pay for two years and get an extra year free. We appreciate that level of savings.

We paid for a three-year license a while ago. I can't recall the exact amount that was paid. It was likely around $12,000 or less - around $4,000 a year.

It's one of the best pricing strategies they have used. Initially, if I were paying for a year, I would pay around $5,000 or $6,000. 

It is very affordable for a small enterprise. It is very competitive.

I am looking into Sophos NAC.

We are a customer of Sophos. 

I'd rate the solution eight out of ten.

We primarily use the solution as a firewall.

Sophos XGS is okay. It’s excellent for firewall purposes.

For me, the platform is stable. It's very stable. It works when it's configured. Also, when you're checking, the logs, the graph, and the graphs are easy to read.

I can also use it for other purposes. For example, it's got a DSCP from there. It can be a distribution. I can have other functions work there, so I can do a lot more than just the firewall components.

It gets easier and easier to set up.

It works. However, Sophos configurations are a bit complex. It's not very user-friendly. I don't find it user-friendly when it comes to setting up the firewalls.

The user interface for the technical admin can be better. It should be set forward to configure a firewall. if a firewall has complexities. I don't know why they did that. However, you should be able to quickly set up a rule to minimize the mistakes that a security administrator or a firewall administrator can make and configure. If not, that becomes an issue. One mistake on a firewall could result in a bridge.

It should be more straightforward. If you compare it with GFI Carrier Control Firewall, which is very straightforward, you can see why it’s helpful when it's easier.

I’ve used the solution for about three years now.

The solution is stable. There are no bugs or glitches. It doesn’t crash or freeze. It’s reliable and the performance is good.

The solution is scalable. However, it depends on the model of the physical appliance. There are virtual and physical appliances, so it depends on which one you use. Obviously, there could be a limitation on the number of interfaces you need to use since you may want to have additional services plugged in. Then, the number of ports available may only be two, and yet you actually need to have 10. Maybe you need to buy a module that plugs in; however, there could be a challenge there.

In our organization, we have three to four security administrators.

I've never spoken to technical support directly the way I've been talking to the Fortinet team. I was working with a local partner to get it set up.

In our case, since we were doing it for the first time, we took about a week to complete everything. We were doing a lot of other things and learning as we went. If I had to redo it now, it wouldn't take me a week as I know exactly what I need to do after learning over a period of time. Also, I have backups that allow me to back up and restore, so I just restore the configuration. It’s much more manageable. The first time there’s a learning curve.

We work with a partner and distributor. We are working with the sales party since it was the first time we used them. They offer us professional services.

I found the solution to be expensive. I pay close to $10,000 per year, which I find to be expensive compared to the other similar solution or equivalent solutions.

It's just that one cost, and it's an annual license. As long as my appliance is working okay, I don't need to replace it. However, it's just that. Of course, within that, there are also support services. You might have technical support costs depending on which one of the tiers you pick.

I'm a customer of Sophos.

We’re using the most up-to-date version of the solution. It’s around version 18.

A new user needs to get trained on the appliance to understand how to implement rules and fully appreciate how to work with it. It's not that straightforward. You need to understand what the different areas are. It's complex in the way the rules are set up. My colleagues in the industry have similar comments about Sophos. It’s more complicated than it looks.

I’d rate the solution a seven out of ten, mainly due to the complexity. If I make a mistake, then that firewall is of no use. It needs to be easier to set up so that it provides me or guarantees me that what I want to set up is what I've set up to secure my environment.