Try our new research platform with insights from 80,000+ expert users
it_user1551411 - PeerSpot reviewer
Technology Infrastructure Manager at a non-profit with 201-500 employees
Real User
Not resource-intensive and does a good job of stopping and preventing different threats from being triggered
Pros and Cons
  • "It is very easy to set up and easy to use. It is also not resource-intensive."
  • "Sophos has a lot of different features. Some of them are tied to different clients, which may mean that different prices or licenses have to be added on. It can be a little bit confusing if you're not familiar with the logic of how they work. They can make it a little bit clearer."

What is our primary use case?

We are using it for endpoint antivirus, hardening, and some DLP policies. Its version is the current one.

What is most valuable?

It is very easy to set up and easy to use. It is also not resource-intensive.

It has been very stable. It has done a good job of stopping and preventing different threats from being triggered.

What needs improvement?

Sophos has a lot of different features. Some of them are tied to different clients, which may mean that different prices or licenses have to be added on. It can be a little bit confusing if you're not familiar with the logic of how they work. They can make it a little bit clearer.

For how long have I used the solution?

I have been using this solution for about a year and a half. 

Buyer's Guide
Intercept X Endpoint
June 2025
Learn what your peers think about Intercept X Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
857,028 professionals have used our research since 2012.

What do I think about the stability of the solution?

Systems have been stable during deployment. It is not resource-intensive, and it has been working well.

What do I think about the scalability of the solution?

It has been easy to add additional Sophos components. They all are using the same console. We have about 400 users who are using this solution.

Which solution did I use previously and why did I switch?

We were using Symantec. We switched because we just needed something that was a little bit more aggressive and next-generation from an antivirus perspective.

How was the initial setup?

It is very easy to set up.

What about the implementation team?

We had a third party that helped us set it up.

What's my experience with pricing, setup cost, and licensing?

It was fairly and reasonably priced.

What other advice do I have?

I would advise others to thoroughly vet out because Sophos has a lot of different features. It can be a little bit confusing in terms of licensing.

I would rate Sophos Intercept X a solid eight out of 10.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
System Administrator at Finlays
Real User
Cloud-based, very stable, and makes it very easy to manage your endpoints
Pros and Cons
  • "I like the way it goes beyond the office space. Being a cloud-based solution makes it very easy to manage your endpoints within the office. In this time of COVID, you can also very effectively manage people who are working from home."
  • "I have not done it, but integrating it with authenticating the users on the Windows system looks a bit complicated to me. It could be because I don't understand it."

What is our primary use case?

We mainly use it on our endpoints. We use it for Windows machines and laptops. They have a server version for the servers.

What is most valuable?

I like the way it goes beyond the office space. Being a cloud-based solution makes it very easy to manage your endpoints within the office. In this time of COVID, you can also very effectively manage people who are working from home.

What needs improvement?

I have not done it, but integrating it with authenticating the users on the Windows system looks a bit complicated to me. It could be because I don't understand it.

Its installation takes a bit longer for each of the vendors. I don't know whether it is because of the internet connection. I don't know if it is just for me or it is the same for every other user.

For how long have I used the solution?

I have been using this solution for two years.

What do I think about the stability of the solution?

It is very stable.

What do I think about the scalability of the solution?

It is very scalable. There are around 120 users and devices. 

How are customer service and technical support?

I have never contacted them about this new product. I used to contact them before, and I don't have issues with their technical support. They respond, and their response is good.

Which solution did I use previously and why did I switch?

We were previously using Sophos Central. It was on-premises, so we migrated from that solution to this solution. It is pretty much the same thing that we were doing before, but now it is cloud-based.

How was the initial setup?

A new device installation is very easy. During installation, when you download the installation file from the web, the registration works so well, but the installation takes a bit longer for each of the vendors. I don't know whether it is because of the internet connection. It looks like it is the web installer that takes longer. I don't know if others have experienced the same issue. 

We also had a few challenges during migration. Because we were doing a migration of the site, we wanted just to maintain what we were doing before. 

What about the implementation team?

We did it ourselves. I'm part of a larger group, and my colleagues had done its implementation.

What's my experience with pricing, setup cost, and licensing?

We have bought a three-year license.

What other advice do I have?

I would very much recommend this solution. I would rate Sophos Intercept X a nine out of 10. 

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Intercept X Endpoint
June 2025
Learn what your peers think about Intercept X Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
857,028 professionals have used our research since 2012.
Sabari Das - PeerSpot reviewer
Technical Director at Geekz Information Technology
Real User
Top 5
Effective EDR, reliable, and scalable
Pros and Cons
  • "I have found the most valuable feature to be the EDR."
  • "The solution is heavy in the usage of resources, you can notice the performance decrease. This should prove in the future."

What is most valuable?

I have found the most valuable feature to be the EDR.

What needs improvement?

The solution is heavy in the usage of resources, you can notice the performance decrease. This should prove in the future.

For how long have I used the solution?

I have been using this solution for approximately five years.

What do I think about the stability of the solution?

I have found the solution to be stable.

What do I think about the scalability of the solution?

The solution is scalable. We have multiple clients and have approximately 1,000 users using the solution.

How are customer service and technical support?

We have not had a good experience with technical support. The quality of support we received was not what someone would expect from a leading solution provider.

Which solution did I use previously and why did I switch?

We have used McAfee and Trend Micro previously. The customer's environment would determine what is the best option that we would recommend. For example, if the customer has a Sophos firewall and other Sophos products, then it would be better to go with Sophos Intercept X.

What's my experience with pricing, setup cost, and licensing?

The price of this solution is a little high compared to competitors because they do not have a proper pricing structure.

What other advice do I have?

I rate Sophos Intercept X an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: reseller
PeerSpot user
reviewer1364232 - PeerSpot reviewer
IT Manager at a construction company with 201-500 employees
Real User
Excellent at capturing malicious threats together with an aggressive next generation firewall
Pros and Cons
  • "Anti-virus captures malicious threats and an aggressive next generation firewall."
  • "Deployment on cloud needs to be carried out manually."

What is our primary use case?

The main use cases of this solution are for protection from ransomware and malware. Although we don't have EDR because of its high cost, we do have the capability to filter the website. Our use case is more about capturing crypto and the like that can encrypt files. I'm a system administrator and we are customers of Sophos. 

What is most valuable?

I've found that the most valuable feature is the anti-virus that captures malicious threats and the next generation firewall which is more aggressive in terms of not only looking for viruses, but also for SaaS and the movement of equipment. If something strange comes up we're automatically notified and it's either blocked or quarantined. It enables you to prevent future viruses and enables us to inform the user of malicious websites they have visited.

To date, we haven't had any incidents related to viruses or any types of attacks and we barely get any false positives. It's good to know that any malicious anti-virus detected is automatically blocked, although it makes things more difficult for our IT department.

What needs improvement?

There is an issue when deploying on cloud because it needs to be done manually. For an enterprise company that can have 10,000 or even 50,000 end users, it's a lot to deploy manually. An additional feature they might include would be the ability to control the lockdown on hardware; to control all the entry points such as a USB, a camera or any external storage. 

For how long have I used the solution?

I've been using this solution for three years. 

What do I think about the stability of the solution?

I think this solution is stable. It doesn't allow you to do anything that may cause a problem. If you try to download something that is prone to hacking, the solution won't allow it. It's important to use the admin lock to prevent malicious programs being downloaded. It's good at preventing remote users from downloading malware. 

What do I think about the scalability of the solution?

The solution is very scalable because they don't generally deal with small size office deployments of 10 or 15 users. The solution can scale to 100,000 or even up to 200,000 users.  

How are customer service and technical support?

Initially we didn't have phone support, but now it's part of the enterprise portfolio which we have. We only use the support if we have an issue with the server. It's the benefit of the cloud, there are no concerns about the server whereas on-premise you need to synchronize your server or upgrade the new version to get those features.

Which solution did I use previously and why did I switch?

We migrated from Symantec enterprise to Sophos and SentinelOne. The approach is the same for all of them. 

How was the initial setup?

Initial setup for the cloud is very straightforward because it's managed by the company. It's just a matter of downloading the agent and installing to your end point. The on-premise implementation is more difficult, particularly if you're not familiar with it but the support is very helpful. I believe there's a way to roll out without the need to visit individual users. I believe they integrate with an active directory, and then post from there. Deployment time depends on availability of the user's desktop or and/or laptop. If it's on premise, you can push that one, it would take less than 15 minutes. To deploy in a company would take less than a month. 

What's my experience with pricing, setup cost, and licensing?

If you start with the standard solution, move to Intercept X, and then go to the EDR version, it's almost double the price in comparison to other vendors. It's a choice for any company. Check Point's SandBlast, for example, has two payables but the additional payable includes encrypting your hard drive - not everyone needs that feature. 

What other advice do I have?

This is a good product but it comes at a high price. As a result, I would rate this solution an eight out of 10.

Which deployment model are you using for this solution?

Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer2384883 - PeerSpot reviewer
Network and Security Engineer at a security firm with 11-50 employees
Real User
Top 5
Significantly improves our company's defense against malware and ransomware attacks
Pros and Cons
  • "The most valuable features of Intercept X are server lockdown, auto-remediation, and encryption monitoring."
  • "Intercept X could enhance its support services, particularly in terms of response time and resource allocation."

What is most valuable?

The most valuable features of Intercept X are server lockdown, auto-remediation, and encryption monitoring. Server lockdown prevents malware installation and automatically removes any unauthorized software. Auto-remediation reverses encryption attempts by malware, ensuring data integrity.

What needs improvement?

In terms of improvements, Intercept X could enhance its support services, particularly in terms of response time and resource allocation. While the product itself is solid, better support documentation and faster response times would be beneficial.

For how long have I used the solution?

I have been working with Intercept X Endpoint for four years.

What do I think about the stability of the solution?

I would rate the stability of the solution as a nine out of ten.

What do I think about the scalability of the solution?

I would rate the scalability of the solution as a ten out of ten.

How are customer service and support?

I would rate the technical support as a seven out of ten.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

While I found Symantec easier to implement and manage, it is not a fair comparison to say it is better than Sophos. My experience with Symantec's interface was good, but both products have their strengths.

How was the initial setup?

Configuring Intercept X is generally straightforward and user-friendly. It is designed to be easy to understand and use. I would rate the easiness of the initial setup as an eight out of ten.

The deployment time for Intercept X varies depending on factors like network complexity and organizational policies. Typically, for around 100 users, it can be completed in a day or two. Maintenance is generally straightforward unless support assistance is required, which can sometimes be challenging to coordinate.

What's my experience with pricing, setup cost, and licensing?

Intercept X falls within the average price range compared to other solutions on the market. While not the cheapest option available, it also isn't considered expensive.

What other advice do I have?

Intercept X has enhanced our ability to prevent malware and ransomware infections. It is a top-notch product, providing robust protection against various threats, including zero-day attacks, while also monitoring encryption levels.

Intercept X has been instrumental in managing and responding to ransomware attacks. I have witnessed multiple organizations using Intercept X remain completely secure when ransomware incidents hit the news. 

Deep learning technology enhances our security posture by providing a deeper analysis of malware behavior. It monitors and analyzes malware actions in real time, leveraging extensive threat intelligence data collected since 1985. This comprehensive approach improves our ability to detect and respond to malware threats effectively.

The exploit prevention capabilities of Intercept X effectively safeguard against various attack methods, including SQL injection and CodeSight scripting. It continuously monitors system vulnerabilities and application processes to prevent exploitation attempts. 

For those considering Intercept X Endpoint, I would recommend prioritizing its comprehensive protection and user-friendly experience. Even after transitioning from server management, I continue to use Intercept X for mobile security, highlighting its effectiveness and versatility.

Overall, I would rate Intercept X as an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
PeerSpot user
Head of Technology at Speed enterprises
Real User
Top 5Leaderboard
Stops data leaks, highly stable and scalable solution
Pros and Cons
  • "It is quite scalable. You can always add more users. I would rate the scalability a nine out of ten."
  • "It's a bit heavy on the computers. So once you install it, the computer slows down. It is a resource-intensive solution."

What is our primary use case?

It is an endpoint. So it's antivirus and DLP, and all those integrated in one.

What is most valuable?

It is like an antivirus. So it stops viruses. DLP stops data leaks in the organization.

What needs improvement?

It's a bit heavy on the computers. So once you install it, the computer slows down. It is a resource-intensive solution. 

For how long have I used the solution?

I have been using this solution for two to three years now. We use the latest version. 

What do I think about the stability of the solution?

It is a stable solution. I would rate the stability a nine out of ten. 

What do I think about the scalability of the solution?

It is quite scalable. You can always add more users.  I would rate the scalability a nine out of ten.

How was the initial setup?

The initial setup is easy. The server, the main server, is online. And then the agent is on the premises. 

After online configuration, the agent installation takes only ten minutes. It is a very quick installation. 

The configuration takes around two hours. 

What about the implementation team?

I do maintenance for this solution. A team of four engineers handles the maintenance and deployment. 

What's my experience with pricing, setup cost, and licensing?

The pricing is quite expensive compared to the rest. I would rate the pricing a four out of ten; one is expensive, and ten is cheap. 

What other advice do I have?

It's a good product. So, link it with the security policies because you can link it with the firewall. The endpoint can communicate with the hardware firewall. So that's one of its strong points.  

Overall, I would rate the solution an eight out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
Peter Forster - PeerSpot reviewer
Network Administrator at Sechelt Indian Band
Reseller
Is easy to install and manage, and has anti-exploit protection
Pros and Cons
  • "One reason why I have stuck with Sophos is because it grabs it and deals with it, and if it's known malware, it can quarantine it or delete it."
  • "As for improvement, more notifications or emails about what to watch out for globally would be nice. For instance, information about the spread of a current phishing campaign or ransomware would be very helpful. I find that I have to dig in the back to find out what is happening on the global scene for things to be aware of."

What is our primary use case?

Sophos Intercept X is the antivirus protection of my choice and my client's choice because it does not only malware, antivirus, and Trojan protection but also anti-exploit protection. It has a quarantine process as well. It does all of the usual antivirus plus the anti-exploit and anti-ransomware processes.

What is most valuable?

One reason why I have stuck with Sophos is because it grabs it and deals with it, and if it's known malware, it can quarantine it or delete it.

I look at all my network workstations and laptops, and if any one of them has some issues with updates or receives a notification, then the server console in the cloud will send me an email as well.

I like it's user interface, cloud integration, and the GUI. It's easy to work with it with clients.

I also like Sophos Intercept X because I can install it on a computer, and if it's set for tamper proof, then nobody can uninstall the program.

What needs improvement?

As for improvement, more notifications or emails about what to watch out for globally would be nice. For instance, information about the spread of a current phishing campaign or ransomware would be very helpful. I find that I have to dig in the back to find out what is happening on the global scene for things to be aware of.

For how long have I used the solution?

I've been working with Sophos Intercept X ever since it was released three years ago.

It is a cloud solution. The installation is local on the device, but it communicates to the cloud where the cloud server manages the reports, notifications, and licensing.

What do I think about the stability of the solution?

My impressions of the stability of Intercept X is that it's excellent.

What do I think about the scalability of the solution?

The scalability is not a problem at all.

How are customer service and support?

I've received really good technical support. They're amazing.

Which solution did I use previously and why did I switch?

I've had experience with other antivirus programs such as Trend, Norton, and McAfee, and they just flag it and indicate that you are infected. However, Sophos has always taken care of things. This way, if my users don't know what to do with a popup, at least I know that Sophos will just grab it, quarantine it, and protect the user.

Sophos is easy to install and easy to manage, and I have had no issues with it. I've had better protection and quarantining features with Sophos Intercept X.

How was the initial setup?

On a scale from one to five, where one is complex and five is easy, I'd rate the initial setup at four. This is because sometimes you'll get a popup asking you to reboot, but actually, if you've installed it a few times, you know that you have to reboot it after the installation. So, there are a couple of popups that don't make it seamless.

If I've got 10 new workstations with a new client and I've sold them 10 licenses and one server, I will have that set up in the cloud as soon as I get the license. It will probably take half an hour to set that up. I can then start adding computers instantly. To install 10 computers, it would take about five hours.

What about the implementation team?

My team and I implement it. We also, sometimes, walk a client through the process remotely.

What other advice do I have?

Sophos Intercept X is a good protection service package for small businesses and large corporations. You can have two computers, five computers, or 5,000 computers, and it'll be just as easy to manage.

I haven't had any issues with ransomware since I began using anti-exploit. I trust Sophos Intercept X and rate it at ten on a scale from one to ten.

Disclosure: My company has a business relationship with this vendor other than being a customer:
PeerSpot user
AdemolaOlamide - PeerSpot reviewer
Business Development Manager at Computer Learning centre
Real User
Top 20
Stable and scalable solution that provides endpoint detection and response, email protection, and data loss prevention
Pros and Cons
  • "Solution for endpoint detection and response, with good stability and scalability. Users also benefit from email protection and data loss prevention."
  • "Installing Sophos Intercept X was not as straightforward, as we had to ask support and had to work with an integrator, though the process didn't take much time, e.g. it was completed within one hour."

What is our primary use case?

We use a normal EDR solution in the office: Sophos Intercept X, for endpoint detection and response, email protection, and data loss prevention.

For how long have I used the solution?

I've been using Sophos Intercept X for a long time, and I'm currently in my second year of using the solution.

What do I think about the stability of the solution?

Sophos Intercept X is a very stable solution.

What do I think about the scalability of the solution?

My impression of Sophos Intercept X is that it's a scalable solution.

How was the initial setup?

For the installation of Sophos Intercept X, we had to ask support from their sales staff. The installation process didn't take much time, as it was completed within an hour.

What about the implementation team?

We implemented the solution through an integrator.

What's my experience with pricing, setup cost, and licensing?

We pay for the Sophos Intercept X license annually.

Which other solutions did I evaluate?

We were initially using ESET.

What other advice do I have?

I'm not yet satisfied with Sophos Intercept X, but I know how to use it. It's good for now, so I can't think of what I'd like to change in the solution.

We have up to 25 users of Sophos Intercept X, and one person in charge of the deployment and maintenance of the solution. For the installation, that person works with an external consultant.

I'm recommending this solution to others who may want to start using it.

I'm rating Sophos Intercept X an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Download our free Intercept X Endpoint Report and get advice and tips from experienced pros sharing their opinions.
Updated: June 2025
Buyer's Guide
Download our free Intercept X Endpoint Report and get advice and tips from experienced pros sharing their opinions.