System Administrator And Network Engineer at Vidyashilp University
Real User
Top 10
Jan 5, 2026
In my opinion, one feature that should be added is the ability to trace emails from individuals who change their IP address or send misbehaving emails from alternative networks. If someone sends a misbehaving email from the network but is not connected to our network and uses a personal network instead, it becomes difficult to trace and identify which network the email is coming from. An inventory system should also be added in the future. Some antivirus solutions have inventory systems that provide all system details. Since we install the Sophos client on client machines, we could obtain details about which software is being used and what the configuration of the machines is. This information would be valuable, as some information was missing when I was using the product previously.
I have observed some disadvantages as we have experienced one particular problem. We were facing an issue of synchronization of the endpoint with our firewall with help on a cloud for heartbeat syncing. However, it was not syncing as per our requirement. The user has to connect our firewall with the help of VPN. We were supposed to assume a solution on a cloud, which has good synchronization on a cloud with Sophos Central. It will sync with our firewall as well with the help of Sophos Central. Endpoint and firewall synchronization is not as smooth as we are expecting from Sophos Network Access Control. We have to connect with VPN. We are expecting that if we have already installed an endpoint on our system and it is connected to the internet, then it must be synchronized on a cloud with Sophos Central. Through Sophos Central, it must connect with our firewall. If the endpoint is configured on Sophos Central and the firewall is also configured in Sophos Central, then there should be no need to connect to VPN.
A point for improvement for Sophos Network Access Control would be to implement a SIEM tool functionality. For example, CrowdStrike is direct competition to Sophos Network Access Control, not even McAfee or Trend Micro, so if they could bring in a SIEM functionality, that would come in very handy here. Users are not controlled by role-based access; it's basically device-based control. The definition of role-based control is a little vague here because on the cloud level, it regulates access rather than tasks.
Sophos Network Access Control could be improved by having an ASIC chip similar to FortiNAC, as this would provide better processing for big organizations. In larger organizations, we need higher speed, and FortiGate's ASIC chip meets that need properly, but Sophos Network Access Control lacks this feature.
Data Office Protect - DPO at DATATRUSTY TECNOLOGIA
Reseller
Top 5
Aug 7, 2024
One area in which the product could be improved is the user interface. While functional, it can be somewhat cluttered and unintuitive, especially for new users. In the next release, including more advanced AI-driven analytics and predictive insights would be advantageous.
Learn what your peers think about Sophos Network Access Control. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
I last used Sophos Network Access Control for user access control. I expected the solution to combine all of the network devices in our organization. We sometimes have problems with the solution's configuration on other devices that are not listed. It would be good if Sophos Network Access Control had better integration with other devices.
I would like more details on the incoming connection, like what is the download speed and how it fluctuates. If Sophos can give that information, it would be really good. In future releases, I would like to see updated information on incoming connections. We would also like more features around manageability.
Information Technology Department at Sunflag Iron and Steel Co Ltd
Real User
Top 20
Aug 15, 2023
It would be beneficial to consider some improvements regarding the dashboard. Developing a new, simpler user interface would be helpful for the clients.
The user interface, in terms of managing the product, could be better. For example, having some sort of configuration scanner could be useful. I need some sort of base solution that I can provide to the company to set up a first level of service for the company. That way, I can install the product and set up a first level of security. After that, we can run some analysis with the company, with the key manager, and so on, and then customize the product to better suit their needs. It would help us create more tailored policies. That said, we need to have some base configuration that we can use as a kickoff in terms of saying, "Okay, this is a first-level configuration; that is enough to guarantee a correct level of protection from your point of view." And in this way, there is the possibility in the weeks to follow to customize the product better and more effectively over time to introduce a second level of features more specific to a single company. What could be an improvement, and what more competitors are doing, is introducing more advanced features in terms of artificial intelligence. This product needs more AI. It's useful to introduce systems to help prevent problems and better identify issues. The product needs to centralize information from devices and work to create a common database where an AI algorithm could have access to all of the information worldwide and therefore become better at predicting issues and finding problems. They need to widen their vision in the way competitors are to provide a higher level of security going forward.
Sophos Network Access Control requires a lot of resources to work, which is an area for improvement. The primary concern is that it has a lot of agents running as it's an endpoint solution, so when you apply the solution on a 4 GB system, you'd need to upgrade to an 8 GB system. At times, you'd even need to upgrade to 16 GB so the agents can run confidently without impacting your operations. I understand that one of the reasons why Sophos Network Access Control uses up more resources is because of all the patches added over time. Still, I wonder what will happen in the next four years. It could mean that you'd need to buy a 16 GB system to ensure that Sophos Network Access Control runs very well, so Sophos needs to work on this area to ensure that the system uses up fewer resources when agents run. The Sophos Network Access Control pricing also has room for improvement, but I know there's not much you can do about it. Sophos recently had a fifty percent off promo, but here in Nigeria, there have been some FX issues, so if you pay $10, for example, years back, that could be the maximum price, so about ten thousand Nairas. That no longer applies today because Nigeria's FX issues have affected Sophos products' pricing significantly. If you're buying Sophos Network Access Control here in Nigeria, you have to pay based on the black market exchange rate and not on the interbank exchange rate, so you can't even blame the channel partners who earn that way. I'm unsure if Sophos can work on the pricing because many users find Sophos Network Access Control very expensive. Two customers who have used it for one year stopped using the product and decided to try Norton because Sophos Network Access Control is very expensive.
An area that could be improved is the information about licensing, which is fairly confusing at present. I've also had some issues with disabling ports.
Network Engineer at kamla raheja vidyanidhi institute for architecture
Real User
Sep 2, 2021
We would like to be able to implement an access point range. There are a number of clients we have at one time and only one access point. In order to provide better management, it would be ideal with they offered better plugins for their firewall. The solution could always offer better security.
The interface on the cloud could be a bit better - just to give more performance on it. However, it's just a very little thing that can be improved. Overall, the product has a very good level of quality. In terms of features, at this point it truly satisfies out needs and nothing is really missing from the offering.
IT Network Engineer at a tech services company with 51-200 employees
Reseller
May 20, 2020
This solution needs to including machine learning and AI functionality to assist with intrusion prevention. In Indonesia, there are a lot of false positives. For example, many websites from our government and local industries are blocked by the IPS. More advanced security features could be added. I would like to be able to fully customize the reports.
Security Analyst at a tech company with 11-50 employees
Real User
Mar 16, 2020
We don't have much experience with the solution just yet. It's only been a few months. I'm not sure which features are lacking. A few items are complex when it comes to handling the initial setup. The solution could offer more useful documentation. We found it difficult to find metrics on the solution. They should work to make this more intuitive.
Manager at a financial services firm with 201-500 employees
Real User
Jan 12, 2020
What needs to be improved on is the fact that Sophos consumes a lot of processor resources and, once it starts scanning, the RAM utilization is very high. I am a little bit worried about where Sophos is. A system with 4 GB would struggle. Even when it scans systems that have 8 GB, they struggle. Also, one of the things that Sophos has not been able to tidy up properly — and I asked them about it — is that it would be nice if a person who is using Sophos on mobile devices could connect to the office using some type of multi-factor authentication. I would like to see a mobile app that generates a token inside our system and then it signs you into our network.
Sophos Network Access Control strengthens network defense with its comprehensive management and endpoint integration. Its seamless integration with firewalls and centralized visibility offers robust security for organizations looking to secure their network environments efficiently.Sophos Network Access Control offers centralized management and seamless firewall integration, enhancing user protection with features like application filtering and web protection. Its modular design supports easy...
In my opinion, one feature that should be added is the ability to trace emails from individuals who change their IP address or send misbehaving emails from alternative networks. If someone sends a misbehaving email from the network but is not connected to our network and uses a personal network instead, it becomes difficult to trace and identify which network the email is coming from. An inventory system should also be added in the future. Some antivirus solutions have inventory systems that provide all system details. Since we install the Sophos client on client machines, we could obtain details about which software is being used and what the configuration of the machines is. This information would be valuable, as some information was missing when I was using the product previously.
I have observed some disadvantages as we have experienced one particular problem. We were facing an issue of synchronization of the endpoint with our firewall with help on a cloud for heartbeat syncing. However, it was not syncing as per our requirement. The user has to connect our firewall with the help of VPN. We were supposed to assume a solution on a cloud, which has good synchronization on a cloud with Sophos Central. It will sync with our firewall as well with the help of Sophos Central. Endpoint and firewall synchronization is not as smooth as we are expecting from Sophos Network Access Control. We have to connect with VPN. We are expecting that if we have already installed an endpoint on our system and it is connected to the internet, then it must be synchronized on a cloud with Sophos Central. Through Sophos Central, it must connect with our firewall. If the endpoint is configured on Sophos Central and the firewall is also configured in Sophos Central, then there should be no need to connect to VPN.
A point for improvement for Sophos Network Access Control would be to implement a SIEM tool functionality. For example, CrowdStrike is direct competition to Sophos Network Access Control, not even McAfee or Trend Micro, so if they could bring in a SIEM functionality, that would come in very handy here. Users are not controlled by role-based access; it's basically device-based control. The definition of role-based control is a little vague here because on the cloud level, it regulates access rather than tasks.
Sophos Network Access Control could be improved by having an ASIC chip similar to FortiNAC, as this would provide better processing for big organizations. In larger organizations, we need higher speed, and FortiGate's ASIC chip meets that need properly, but Sophos Network Access Control lacks this feature.
For now, I may not be able to say exactly what needs improvement. However, continuous development in specific areas might be required.
One area in which the product could be improved is the user interface. While functional, it can be somewhat cluttered and unintuitive, especially for new users. In the next release, including more advanced AI-driven analytics and predictive insights would be advantageous.
I last used Sophos Network Access Control for user access control. I expected the solution to combine all of the network devices in our organization. We sometimes have problems with the solution's configuration on other devices that are not listed. It would be good if Sophos Network Access Control had better integration with other devices.
I would like more details on the incoming connection, like what is the download speed and how it fluctuates. If Sophos can give that information, it would be really good. In future releases, I would like to see updated information on incoming connections. We would also like more features around manageability.
It would be beneficial to consider some improvements regarding the dashboard. Developing a new, simpler user interface would be helpful for the clients.
The solution can improve the for applying policies. They can be complex depending don't the group they are applied to.
The user interface, in terms of managing the product, could be better. For example, having some sort of configuration scanner could be useful. I need some sort of base solution that I can provide to the company to set up a first level of service for the company. That way, I can install the product and set up a first level of security. After that, we can run some analysis with the company, with the key manager, and so on, and then customize the product to better suit their needs. It would help us create more tailored policies. That said, we need to have some base configuration that we can use as a kickoff in terms of saying, "Okay, this is a first-level configuration; that is enough to guarantee a correct level of protection from your point of view." And in this way, there is the possibility in the weeks to follow to customize the product better and more effectively over time to introduce a second level of features more specific to a single company. What could be an improvement, and what more competitors are doing, is introducing more advanced features in terms of artificial intelligence. This product needs more AI. It's useful to introduce systems to help prevent problems and better identify issues. The product needs to centralize information from devices and work to create a common database where an AI algorithm could have access to all of the information worldwide and therefore become better at predicting issues and finding problems. They need to widen their vision in the way competitors are to provide a higher level of security going forward.
Sophos Network Access Control requires a lot of resources to work, which is an area for improvement. The primary concern is that it has a lot of agents running as it's an endpoint solution, so when you apply the solution on a 4 GB system, you'd need to upgrade to an 8 GB system. At times, you'd even need to upgrade to 16 GB so the agents can run confidently without impacting your operations. I understand that one of the reasons why Sophos Network Access Control uses up more resources is because of all the patches added over time. Still, I wonder what will happen in the next four years. It could mean that you'd need to buy a 16 GB system to ensure that Sophos Network Access Control runs very well, so Sophos needs to work on this area to ensure that the system uses up fewer resources when agents run. The Sophos Network Access Control pricing also has room for improvement, but I know there's not much you can do about it. Sophos recently had a fifty percent off promo, but here in Nigeria, there have been some FX issues, so if you pay $10, for example, years back, that could be the maximum price, so about ten thousand Nairas. That no longer applies today because Nigeria's FX issues have affected Sophos products' pricing significantly. If you're buying Sophos Network Access Control here in Nigeria, you have to pay based on the black market exchange rate and not on the interbank exchange rate, so you can't even blame the channel partners who earn that way. I'm unsure if Sophos can work on the pricing because many users find Sophos Network Access Control very expensive. Two customers who have used it for one year stopped using the product and decided to try Norton because Sophos Network Access Control is very expensive.
An area that could be improved is the information about licensing, which is fairly confusing at present. I've also had some issues with disabling ports.
We would like to be able to implement an access point range. There are a number of clients we have at one time and only one access point. In order to provide better management, it would be ideal with they offered better plugins for their firewall. The solution could always offer better security.
The interface on the cloud could be a bit better - just to give more performance on it. However, it's just a very little thing that can be improved. Overall, the product has a very good level of quality. In terms of features, at this point it truly satisfies out needs and nothing is really missing from the offering.
I would like to see mobile administration capabilities in the next release so that we can administer the device from a mobile device.
This solution needs to including machine learning and AI functionality to assist with intrusion prevention. In Indonesia, there are a lot of false positives. For example, many websites from our government and local industries are blocked by the IPS. More advanced security features could be added. I would like to be able to fully customize the reports.
We don't have much experience with the solution just yet. It's only been a few months. I'm not sure which features are lacking. A few items are complex when it comes to handling the initial setup. The solution could offer more useful documentation. We found it difficult to find metrics on the solution. They should work to make this more intuitive.
The difficult thing was finding the metrics.
What needs to be improved on is the fact that Sophos consumes a lot of processor resources and, once it starts scanning, the RAM utilization is very high. I am a little bit worried about where Sophos is. A system with 4 GB would struggle. Even when it scans systems that have 8 GB, they struggle. Also, one of the things that Sophos has not been able to tidy up properly — and I asked them about it — is that it would be nice if a person who is using Sophos on mobile devices could connect to the office using some type of multi-factor authentication. I would like to see a mobile app that generates a token inside our system and then it signs you into our network.
The solution could increase the integration with other platforms or other systems. This would be very useful.