We use Sophos Email for various solutions, setting it up for different customer environments as part of our strategy.
The best thing about it is the logs.
There have been some issues with compatibility and effectiveness, particularly when integrating it with our firewall. The main challenge has been email protection, especially due to compatibility issues and difficulties with log access and email relay configuration.
I would like to see more detailed logs in the future releases. The firewall logs don't show the in-depth logs, so we can only see the software in detail, not the logs themselves. This is a problem we've been facing in customer environments for some time.
Emails go to spam even though there's no legitimate reason for them to be there. There's no summary of the necessary issues, either.
If an email goes to spam, the system will drop it. There should be a certificate email on the query, but support comes and goes, and they might see learning and run the Linux command or show the unrigorous answers.
But if there is some read-only show on the reporting or clear reporting, it would be good for the customers.
We use Sophos Email Protection. We've deployed it in various scenarios, either on-premises or using Sophos Cloud Email Protection.
Considering our experience with firewall integration, I'd rate it a five out of ten. I haven't used the cloud solution extensively to comment on that aspect.
The rating reflects the challenges we've faced. These different appliances have more limitations, like reporting limitations. They don't have good reporting, and it's not a good solution.
If there's another issue, we have to go to the CLI and change something to embroider the other issue, which is spam.
If we go and prepare the spam, it gets stuck, and there's no option to understand it on the GUI. There is an option to go to the CLI and run the script. There's a predefined script. There are a lot of things.
The initial configuration isn't difficult, but managing permissions there are some issues. We've encountered issues where some emails are incorrectly flagged or missed, which complicates management.
We're using the on-premises version of Sophos Email Protection. We haven't utilized cloud email protection. Our focus has been primarily on integrating it with the firewall.
There are different price tiers for different customer sizes. I sell the bundle, which includes all the licenses, web protection, and other features.
The customers who are using email servers are not using anything else. Most of our new users moved to a better solution, like Fortinet email or other solutions, but they didn't want to move. For the new users, it's combined and deployed by themselves.
It's best to take the POC from the so-called official, test it thoroughly, and then make a decision. If it's compatible with the environment and works well, then keep the POC successfully.
Overall, I would rate the solution a five out of ten.
