Sophos XGS Reviews

We typically use Sophos XGS for things like (UTM, acting as a proxy, managing routing, and for point-to-point connections.

The most valuable features of Sophos XGS for me are XGS IPS, SD-WAN, VPN setup, email protection, and integration with endpoint security.

Areas for improvement in Sophos XGS include better balance when handling high availability configurations, smoother firmware upgrades without the need for turning off devices, and simplified configuration after firmware updates.

In the next release of Sophos XGS, I would like to see improvements in log searching within the interface and more functionality available without needing to go to the command line, especially for troubleshooting purposes.

I have been working with Sophos XGS for five years.

Sophos XGS is stable and resilient, even in environments with power fluctuations and instability.

Scalability with Sophos XGS is generally good, but there can be frustrations with switches when setting up VPNs. I would rate the scalability as a four out of ten.

I believe the scalability of Sophos XGS can be improved, especially when compared to competitors like Palo Alto and Check Point. While it is a good product, there is room for enhancement to compete better in scalability challenges.

I would rate the technical support as a seven out of ten.

Neutral

Before Sophos XGS, I used Check Point, Palo Alto, and Cisco data solutions. I switched to Sophos because it is more affordable.

The initial setup of Sophos XGS is generally simple, especially for basic internet access with default features, but more complex configurations may have some difficulties. Overall, it is quick and stable.

It took less than an hour and a half to deploy Sophos XGS initially, including setting up internet access and basic firewall rules. However, migrating from older versions to the new setup took longer due to compatibility issues with the old settings.

Sophos XGS is quite affordable.

Overall, I would rate Sophos XGS as a seven out of ten. I would recommend it to others.

We give both endpoint and firewall together.

We have a set of customers who understand Sophos very well. Once they achieve all the security functions and parameters they want, they are more secure. Many customers who previously used different endpoint and firewall solutions now benefit from synchronized functionality with the complete Sophos suite. So, they become more secure, which is more important.

The security heartbeat feature and MDR are the best for customer security.

The functionality of SD-WAN compared to other boxes is lacking. Certain aspects need improvement, particularly enhancing capabilities like SD-WAN. We should also focus on enhancing XDR and NDR functionality in the firewall boxes and provide more threat protection alerts to users.

I've been working with Sophos for more than 15 years.

The technical team never disappoints us in providing solutions. They give us timely and nice follow-up.

Positive

Many of them were using a different endpoint security and a different firewall. But now, with Sophos, they have better security.

The pricing is competitive, and it's a win-win situation for both partners and customers.

In the financial market and banks, other security appliances are more popular than Sophos.

We highly recommend Sophos XGS.

I'd rate the solution eight out of ten.

We are using it as a firewall to protect and control Internet access, as well as control other access like SAP. Some of our employees connect from remote locations, and our server is on-premises. We use this firewall for access control and also for VPN connections.

It's easy to use, and the service is good. If anything goes wrong, their support system is very reliable.

The renewal process for this box is too frequent. We purchased it five years ago, and it's expiring in 2025. So, I feel they expire it too quickly.

In future releases, this solution could have more graphical elements on the dashboard to make it easier to understand. While there are graphics and a good dashboard, there's always room for improvement.

We have been using Sophos XGS for ten years. At that time, it was new. So somebody recommended us to take this. Our service provider recommended it, and that's why we have taken it.

It is a stable solution.

It is a scalable solution. We have around 300 end users in our organization. 

The customer service and support has been excellent. 

Positive

We have worked with Cisco and Fortinet Firewalls. It's hard to compare.

Installation and understanding are a bit challenging with Cisco, whereas Sophos is easier to install and use.

We have a FortiGate firewall at another location. We recently purchased it.

The initial setup is very, very easy.

The deployment process took me more than two to three hours, including all the checks. I had a backup of the earlier Sophos firewall, so I just restored it and verified everything.

One person for support and checking, so two in total are enough for deployment and maintenance of the solution.

I would definitely advise to use Sophos. Overall, I would rate the solution a nine out of ten. 

The solution is a layer 7 next-generation firewall, which we use as a firewall and router. We customize rules to help with our security.

We like the layer 7 capability. We have a couple of servers behind the XGS firewall which understands HTTP packets. The solution offers a very accurate setup, and we can use it as a kind of reverse proxy device. Based on the connected URL, we can direct traffic to different servers without a solution.

The solution is very user-friendly, and the GUI is so good that I don't have to use the CLI. This eliminates the need for typing; clicking allows me to get to what I'm looking for.

The application is a little slow; it takes five to ten seconds to respond to every click when configuring. If we need to do significant configuration, it can take a lot of time. This might be because we have a low-end machine, and it could be faster with a high-end one.

We have been working with Sophos XGS for nine months. 

The stability has always been good, we haven't encountered any issues. 

I can't speak much to the scalability as we haven't scaled the tool. I don't think it is scalable the way I have it configured, but there is a high-availability function in the menus. I don't know if the configuration is automatically transferred to new devices.

We have 600 users working behind the solution, and it is very lightweight in terms of maintenance. Sophos provides free web access, so we can go to their website and configure the firewall, which is automatically passed on to the device.

I escalated a question regarding a license issue, and they solved it very quickly, so I rate the tech support highly.

Positive

The initial setup was straightforward. It has an old-style GUI, so we just followed the steps, and much of the setup was automatic.

We implemented via an in-house team. 

We must purchase separate web server licenses, as they are not included in the regular device license. I would rate the product an eight out of ten in terms of price. It's relatively affordable.

I would rate this solution a ten out of ten. 

For personal use, I suggest pfSense, but for business applications, Sophos is great because they have better support and offer an excellent GUI, which makes XGS very easy to operate. pfSense offers console access and is a lot more configurable, which is why I prefer it for home use.

I would advise potential customers to get a free trial license, as it offers the freedom to trial the solution to see if it has the functionality and configuration options required.

In terms of the firewall, I'm using Sophos X on everything, including the VPN, firewall, and endpoints.

Everything about the product is okay. 

I cannot single out anything specifically, as the firewall is working perfectly. The endpoint is helping me greatly and people have been able to work from home using the VPN. It has been great.

The pricing has been fine so far.

It has a pretty straightforward initial setup.

The solution's quite stable. 

The solution is scalable. 

Technical support has always been very helpful.

In terms of updates with the current technologies and current trends, which we're always exposed to, they update their databases frequently. 

It quickly detects issues. 

It is a plug-and-play system. 

Mainly, it's a cloud-based firewall for cloud-based endpoint protection. I can be able to manage my devices from anywhere without configuring all these VLANs and whatnot.

If I could host my emails using an email transfer agent, hosting it, it would be ideal.

The configurations can be a bit complex. It may be a while before you understand the configuration process.

If you do not have any experience with the product, you may struggle to set it up.

I'd like to see more integrated services from Sophos so I can handle everything from one place without a third-party. I would like to have email hosting and management integrated into Sophos XGS.

I've been using the solution for more than five years now.

It is very stable. There are no bugs or glitches. It doesn't crash or freeze. 

The solution can scale. It just depends on the model we are using. For example, on an XG transit, I can add as many users as I want. On XG 105, I can only have limited users. It depends on the package.

We have more than 80 general users on the solution. We use it intermittently.

I've dealt with support several times. They were awesome. We found them to be helpful and responsive. They are quite knowledgable. 

Positive

The setup process is perfectly okay. I'm an IT administrator. It's not very difficult for me to get everything up and running. I also need to check the integration. 

I'd rate the initial setup a four out of five in terms of ease of execution. 

In terms of pricing, it's good. They've been giving us some promotions where we would pay for two years and get an extra year free. We appreciate that level of savings.

We paid for a three-year license a while ago. I can't recall the exact amount that was paid. It was likely around $12,000 or less - around $4,000 a year.

It's one of the best pricing strategies they have used. Initially, if I were paying for a year, I would pay around $5,000 or $6,000. 

It is very affordable for a small enterprise. It is very competitive.

I am looking into Sophos NAC.

We are a customer of Sophos. 

I'd rate the solution eight out of ten.

The performance is good. 

It is scalable.

Technical support has been helpful in general. 

The fabric solution, the access points, and the WiFi, is not being delivered to Egypt due to some regulations. It's hard to get any devices in Egypt right now.  I need one solution and one centralized interface to monitor all the switches, access points, firewalls, and everything. I found this in Fortinet. Sophos is falling short.

We'd like an interface that can monitor everything. 

The costs could be better. 

I've used the solution for two to three years. 

I can't speak to the stability, however, the performance is good. 

The solution can scale well. It's not a problem to expand it. 

We have about 400 people on the solution currently. 

Technical support is good. 

We also worked with Fortinet. While we are on Sophos right now, we're also moving again towards Fortinet. I'm waiting on the delivery right now. 

I am implementing a new public solution for access points and switches. I'm going to FortiGate since it offers a full solution, and it is already delivered to the country, Egypt. With the Sophos access points, they are not delivering regarding regulatory issues and something like that.

We do have some people on the solution that maintains it. I don't handle the initial step myself. We have a team that does it. 

Our own team can handle the initial implementation.

The pricing of Sophos is the same as Fortinet. In general, the solutions in the market are all around the same price. 

When you go to finalize the project and include another competitor, the distributor tends to give a big discount on the solution to exit to another one.

I'm a customer and end-user. 

I don't know which version of the solution we're currently on. I'm the director of the department, and therefore, I'm not working with it directly. There's a team that's working on the versions and upgrading software and so on, while handling the technical issues. 

I'm just dealing with the high level of design or decision-making.

It's not a bad solution. It's a good option and it takes a market share in Egypt. However, I like Fortinet as they have a device that's reaching in the market and the cost is not bad. They also have an impressive monitoring interface with FortiAnalyzer and FortiManager. 

I'd rate Sophos seven out of ten. 

I am a cyber professional. I support customers with this solution. Sophos XGS is primarily a firewall. The product allows my customers to manage their internet access for their employees while protecting their environment from things like malware.

The solution requires one administrator as it does not require much maintenance. It depends on the usage and the environment. For example, in some account configurations, the environment has only four or five rules, other times there are over 100 rules. More rules will require more maintenance. 

The most valuable feature of Sophos XGS is the application control. I also enjoy the dashboard and reporting that it provides to my customers. 

Sophos helps my customers manage applications from accessing the internet, not only websites. We can ensure there is limited access to applications like Facebook. For example, Facebook is not accessible, but Facebook Messenger for chatting is. This prevents posting and sharing. We make restrictions without prevention.

Sophos XGS would benefit from further development in the SD-WAN area. It would be great if they could give technical people access to all the WAN links that we are connecting to, including inside the SD-WAN. 

They should make available or round robin inside the SD-WAN. This would allow us to move to another link if one goes down.

I have been using Sophos XGS for six years.

There have been issues with the stability of this product. Sometimes it requires restarting. We have looked into the client environment and this is not causing the instability. The problem is common.

Sophos XGS is not scalable. It is a hardware appliance and we should migrate the settings if we need to. In order for it to scale, you require additional hardware.

Sophos' technical support is responsive. There are times we need to push them to accelerate the process because there is a delay in replying. Sometimes, the first stage of first-line support does not have enough knowledge.

Overall, I would rate their technical support a three out of five.

Neutral

The initial setup of Sophos XGS is straightforward. I would rate it five out of five for ease of setup.

The cost of Sophos XGS is based on per unit, per appliance, and capacity. The capacity depends on the environment. Based on the size, we choose the model. The model selected dictates the pricing.

When comparing the pricing of Sophos to the competition, I give them a five out of five. It is competitively priced.

I have worked with Fortinet and WatchGuard. Other solutions have better performance and security value than Sophos XGS. 

Sophos has most of the features. If they don't have the features one year, they are added the next. At one point they did not have SGON, but now they do. It is not performing like Fortinet or Watch Guard, they need to do some enhancements. 

Sophos has the upper hand on reporting on the firewall itself. For small to medium-sized businesses Sophos is better than the competition.

If the organization is small or medium-sized I would recommend this solution. I would give it a nine out of 10 in this case. If the company is enterprise level, I would rate the solution a five out of 10.

Overall, I rate the Sophos XGS a seven out of 10.

We primarily use the solution as a firewall.

Sophos XGS is okay. It’s excellent for firewall purposes.

For me, the platform is stable. It's very stable. It works when it's configured. Also, when you're checking, the logs, the graph, and the graphs are easy to read.

I can also use it for other purposes. For example, it's got a DSCP from there. It can be a distribution. I can have other functions work there, so I can do a lot more than just the firewall components.

It gets easier and easier to set up.

It works. However, Sophos configurations are a bit complex. It's not very user-friendly. I don't find it user-friendly when it comes to setting up the firewalls.

The user interface for the technical admin can be better. It should be set forward to configure a firewall. if a firewall has complexities. I don't know why they did that. However, you should be able to quickly set up a rule to minimize the mistakes that a security administrator or a firewall administrator can make and configure. If not, that becomes an issue. One mistake on a firewall could result in a bridge.

It should be more straightforward. If you compare it with GFI Carrier Control Firewall, which is very straightforward, you can see why it’s helpful when it's easier.

I’ve used the solution for about three years now.

The solution is stable. There are no bugs or glitches. It doesn’t crash or freeze. It’s reliable and the performance is good.

The solution is scalable. However, it depends on the model of the physical appliance. There are virtual and physical appliances, so it depends on which one you use. Obviously, there could be a limitation on the number of interfaces you need to use since you may want to have additional services plugged in. Then, the number of ports available may only be two, and yet you actually need to have 10. Maybe you need to buy a module that plugs in; however, there could be a challenge there.

In our organization, we have three to four security administrators.

I've never spoken to technical support directly the way I've been talking to the Fortinet team. I was working with a local partner to get it set up.

In our case, since we were doing it for the first time, we took about a week to complete everything. We were doing a lot of other things and learning as we went. If I had to redo it now, it wouldn't take me a week as I know exactly what I need to do after learning over a period of time. Also, I have backups that allow me to back up and restore, so I just restore the configuration. It’s much more manageable. The first time there’s a learning curve.

We work with a partner and distributor. We are working with the sales party since it was the first time we used them. They offer us professional services.

I found the solution to be expensive. I pay close to $10,000 per year, which I find to be expensive compared to the other similar solution or equivalent solutions.

It's just that one cost, and it's an annual license. As long as my appliance is working okay, I don't need to replace it. However, it's just that. Of course, within that, there are also support services. You might have technical support costs depending on which one of the tiers you pick.

I'm a customer of Sophos.

We’re using the most up-to-date version of the solution. It’s around version 18.

A new user needs to get trained on the appliance to understand how to implement rules and fully appreciate how to work with it. It's not that straightforward. You need to understand what the different areas are. It's complex in the way the rules are set up. My colleagues in the industry have similar comments about Sophos. It’s more complicated than it looks.

I’d rate the solution a seven out of ten, mainly due to the complexity. If I make a mistake, then that firewall is of no use. It needs to be easier to set up so that it provides me or guarantees me that what I want to set up is what I've set up to secure my environment.