Try our new research platform with insights from 80,000+ expert users
Michael Mcdonald. - PeerSpot reviewer
Senior Security Consultant at First Technology
Reseller
Top 10
Comes with an option to switch off an endpoint, and does what it's supposed to do and better than anyone else
Pros and Cons
  • "I find the security heartbeat feature with synchronized security very useful. It's a very nice feature that allows you to basically switch off an endpoint. When an endpoint has got a virus or something like that, or it's infected or compromised, you can isolate it from the network, but only if you've got an XG Firewall as well. It also provides ease of use. It is the only antivirus that can recognize 25 out of the 36 ransomware and virus techniques that have been often used in terms of the behavior base using heuristics. It's beautiful, utterly amazing. No other antivirus can do that."
  • "The pricing could be a bit lower to match the normal retail pricing."

What is most valuable?

I find the security heartbeat feature with synchronized security very useful. It's a very nice feature that allows you to basically switch off an endpoint. When an endpoint has got a virus or something like that, or it's infected or compromised, you can isolate it from the network, but only if you've got an XG Firewall as well. 

It also provides ease of use. It is the only antivirus that can recognize 25 out of the 36 ransomware and virus techniques that have been often used in terms of the behavior base using heuristics. It's beautiful, utterly amazing. No other antivirus can do that. 

What needs improvement?

The pricing could be a bit lower to match the normal retail pricing.

For how long have I used the solution?

I have been using this solution for the last four months. Currently, I am using the latest version.

What do I think about the scalability of the solution?

It's really scalable. We easily did 5,000 installations in six hours. It's good at scalability.

Some of our SMB clients have 20 users, and some have around 200 to 300 users. A big enterprise client has around 5,000 users.

Buyer's Guide
Intercept X Endpoint
June 2025
Learn what your peers think about Intercept X Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
857,028 professionals have used our research since 2012.

How was the initial setup?

I don't set these products up, but they look pretty straightforward and simple to set up. The deployment of 5,000 users happened in around six hours. The deployment was obviously automated a little bit.

What's my experience with pricing, setup cost, and licensing?

When you start going to the EDR technologies and the MTR, it is a little bit expensive. It's a very good technology, and obviously, you're going to pay for it, but the pricing could do a little bit of work.

What other advice do I have?

I would definitely recommend Sophos Intercept X. It's the number one product in my go-to-market strategy. 

I haven't used it so much, but from what I've seen and played around with, it's a brilliant product. It has already got everything. It does what it's supposed to do and does it better than anyone else out there. If you look at Gartner Quadrants, they are at number three in terms of leaders. The Microsoft Defender ATP is number one.

I would rate Sophos Intercept X a nine out of ten. It is a beautiful product, and I love it.

Which deployment model are you using for this solution?

Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
reviewer1238874 - PeerSpot reviewer
Network Administrator at a tech services company with 51-200 employees
Reseller
Not just another simple virus-scanning product, but it does not handle removable USB drives well
Pros and Cons
  • "It is not just a simple virus scanning product. It handles more advanced needs."
  • "This product does not handle USB drives well."

What is our primary use case?

We use Intercept X Advanced along with Sophos EDR (Enhanced Data Detection and Response).  

We use it for our servers and clients as advanced protection. It is not just a simple virus scanning product.  

We use it to work with clients and it is installed on five servers. At this time we have only installed it at one customer site. But we plan to continue to expand.  

What is most valuable?

The most valuable part of the solution in our use case is client isolation. It is a good feature.  

What needs improvement?

What I think Sophos can improve is with the data-loss feature, especially when it comes to using USB sticks and USB hard disks. The feature blocks access to these USB sticks and disks and there seems to be no immediate workaround for that. Our customer was not satisfied with the feature. We actually ended up having to deactivate this feature because it is too aggressive and could not meet the client's needs.  

For how long have I used the solution?

We started using Sophos Intercept X in December of 2019.  

What do I think about the stability of the solution?

We have not had a problem at all with the stability.  

What do I think about the scalability of the solution?

It is easy to scale this product. As far as the typical organization size that it fits, I would say it is suited for smaller and medium-sized companies. We have not yet installed it at a large customer site, so I cannot answer about large or enterprise companies specifically.  

How are customer service and technical support?

To this point, I have not had a need to use Sophos support for Intercept X specifically.  

I have used Sophos support for other products that we use. Sophos support for XG is okay if it is just regarding questions about the product. I did not have any problems with them in getting a good answer to questions about the product or installations. But when it comes to device defects, then it can take four to six weeks to get a solution. In that case, the support is really not satisfactory. It does not satisfy me and it is really unacceptable.  

Which solution did I use previously and why did I switch?

We did use other solutions in the past, including Trend Micro, Symantec, and Kaspersky. The main difference between Sophos Intercept X and the other products is the client reservation feature. I believe that is a standalone point for Sophos as it is the only product that has it. It allows particular hosts to always use the same IP address which is sometimes desirable.  

The administration of Trend Micro is one thing which I like about that product. It is very easy to use. I would say that Trend Micro is better than Sophos on that point.  

We switched to Sophos because we are selling Sophos firewalls already. The Sophos Intercept X product works better with these firewall solutions than other virus scanning products from different vendors. We decided to keep to the same vendor for a more unified solution.  

We started to work with Sophos Endpoint Protection originally and we are on Bonfire XG as well. It is convenient to expand out working with the brand as a partner.  

How was the initial setup?

The initial setup for the product is not simple. It is medium to complex to install and setup.  

After deploying it takes only me and the customer team for maintenance. Really one person can do it. So there is just one person at my company and I have communication with one colleague at the customer site.  

What about the implementation team?

We did not need outside help from a vendor to handle the deployment. I did it myself and we are a partner with Sophos.  

What other advice do I have?

Advice that I would have for people considering using virus scanning is that I, personally, would not use Sophos Endpoints. That is the simplest edition of the Sophos virus protection product line. I would use Intercept X Advanced as the entry-level product as the other, simpler product, is not robust enough to provide acceptable protection for businesses in my estimation.  

On a scale from one to ten where one is the worst and ten is the best, I would rate Sophos Intercept X as a seven. First, I never give a ten because every product can be improved. Second, I subtract two points because of my experience with the data loss feature and how it behaves with USB drives.  

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Buyer's Guide
Intercept X Endpoint
June 2025
Learn what your peers think about Intercept X Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
857,028 professionals have used our research since 2012.
KurhulaMaluleka - PeerSpot reviewer
Managing Director at Behold IT
Real User
Very good endpoint protection capabilities with useful AI and effective threat management
Pros and Cons
  • "The security on offer is pretty good. We are happy with it."
  • "The solution can be expensive, although we do see the value in it."

What is our primary use case?

We primarily use the solution for endpoint protection. 

What is most valuable?

The endpoint protection capabilities are great. 

The security on offer is pretty good. We are happy with it. 

I love the threat management on offer.

Their AI is quite good.

We haven't had any issues with stability so far.

Sophos has a central management dashboard, which I'm happy about.

The installation process is very straightforward. 

What needs improvement?

I'm mostly quite happy with the solution. I haven't had any issues with it. 

From the firewall side, from the Intercept X to endpoint protection, everything is there, so there's nothing much that I can complain about.

The solution can be expensive, although we do see the value in it.

For how long have I used the solution?

I've used the solution for over a year now. 

What do I think about the stability of the solution?

The stability has been good. There are no bugs or glitches. it doesn't crash or freeze. It's reliable. 

What do I think about the scalability of the solution?

We have over 200 employees on the solution currently. I haven't had any issues with scaling. 

How are customer service and support?

I'm quite happy with the level of support on offer. 

Which solution did I use previously and why did I switch?

We've used also AVG. We've used it in quite a few different places for different systems.

How was the initial setup?

I found the implementation process sot be easy. It wasn't a problem at all. I did not find it to be overly complex or difficult. 

We have administrators and managers that can handle any technical stuff. 

What about the implementation team?

We were able to handle the setup ourselves, in-house. We didn't need any integrator or consultant assistance. 

What's my experience with pricing, setup cost, and licensing?

We have paid for three years of licensing. 

It is expensive, however, for what you getting out of it, from the firewall side and to endpoint protection, everything seems to be worth it.

What other advice do I have?

I'd recommend the solution to other users and organizations. I'd rate it at a ten out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Head IT (Infrastructure) at Nilkamal Ltd
Real User
A cloud-based solution with anti-malware capability and reasonable price
Pros and Cons
  • "The base product and the anti-malware feature are most valuable."
  • "It consumes a lot of resources, and something needs to be done for that."

What is most valuable?

The base product and the anti-malware feature are most valuable.

What needs improvement?

It consumes a lot of resources, and something needs to be done for that.

For how long have I used the solution?

We use Intercept X Advance in our company, and this is the third year.

What do I think about the stability of the solution?

It is stable.

What do I think about the scalability of the solution?

It is scalable. We have around 2,500 users. For its maintenance, there are just two or three people.

How are customer service and support?

I never faced any issues.

Which solution did I use previously and why did I switch?

We were using Symantec. It was on-premises. There was an issue with the company, and I faced an issue with their support. So, I had to switch. I wanted something on the cloud.

How was the initial setup?

It was easy. On the client-side, it hardly takes 15 minutes.

What's my experience with pricing, setup cost, and licensing?

Its price is reasonable.

What other advice do I have?

They have to take care of the resource part. I would rate it a nine out of 10.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer1729950 - PeerSpot reviewer
Inside Solutions Architect at a tech services company with 1,001-5,000 employees
Real User
Good price with robust and stable cloud console
Pros and Cons
  • "What I have found the most valuable about Sophos Intercept X is the ease of use with management administration and the solution's ability to stop exploits and ransomware."
  • "Sophos Intercept X doesn't have its own firewall that utilizes the Windows Firewall or intrusion prevention."

What is our primary use case?

Our primary use cases for Sophos Intercept X are endpoint protection, corporate enterprise endpoint protection, EDR, and endpoint detection and response. And if you add the Sophos MTR to Sophos Intercept X, you could do managed threat response, as well. 

What is most valuable?

What I have found the most valuable about Sophos Intercept X is the ease of use with management administration and the solution's ability to stop exploits and ransomware. Sophos Intercept X has great exploit prevention capabilities.

What needs improvement?

Sophos Intercept X doesn't have its own firewall that utilizes the Windows Firewall or intrusion prevention.

For how long have I used the solution?

I have been using Sophos Intercept X for four or five years.

What do I think about the stability of the solution?

Sophos Intercept X is stable. The cloud console they have been creating for a while is both stable and robust.

What do I think about the scalability of the solution?

Sophos Intercept X is definitely scalable for all enterprises, from small to large.

How are customer service and support?

I do not engage with Sophos Intercept X's technical support too often. I would say that they are okay. They are certainly not the best out there or the worst, so they are good.

How was the initial setup?

The initial setup is straightforward in terms of the ability to integrate with an active directory and add users and put them into a default profile. You have to do a bit of learning to know which additional settings to activate sometimes, but the default settings are a good start.

What's my experience with pricing, setup cost, and licensing?

I would say that Sophos Intercept X is comparable to other solutions out there, but it is a premium business product. The pricing reflects that.

What other advice do I have?

If you are using other Sophos technology, it is worth it to take a look at Sophos Intercept X because of the integration and XDR technology capabilities.

Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Founder, Director at Tres Infosol Pvt. Ltd.
Reseller
Top 20
A stable and scalable solution which is easy to install and allows for synchronized protection
Pros and Cons
  • "One of the best use cases involves synchronized security staff, which allows us to manage both the firewall and the anti-virus features from the cloud."

    What is our primary use case?

    One of the best use cases involves synchronized security staff, which allows us to manage both the firewall and the anti-virus features from the cloud. They work in tandem with each other. So, if there is any threat detected by the endpoint, it communicates information concerning this change to the firewall. For that particular client, at the firewall, it can update all other endpoints into the network to check if the same threat is visible on any other machine. Then, corrective action can be taken collectively with a single click.

    What is most valuable?

    We have not encountered any issues involving the solution. A point in its favor is that it has not slowed down our systems, such as occurred with McAfee, Symantec or even Quick Heal. This has been a positive experience for us. Also, the synchronized security, in which things work with each other, provides us with a pretty automated remediation methodology which cuts down on much of the manual steps and workload. 

    What needs improvement?

    At present, the solution meets the needs of our business scale. Perhaps in the future, as we grow and face increased challenges, there would be a need to explore other options. 

    For how long have I used the solution?

    We've been using Sophos Intercept X for around six months.

    What do I think about the stability of the solution?

    The solution is pretty stable. 

    What do I think about the scalability of the solution?

    The solution is, indeed, scalable. As a cloud-based solution, it is all about scalability. 

    How are customer service and technical support?

    We have yet to encounter a situation in which we had a need to call tech support. 

    How was the initial setup?

    The solution is pretty straightforward and very easy to configure.

    Installation took no more than two or three minutes. 

    What about the implementation team?

    We, ourselves, are system integrators and we have a staff of around seven people, consisting of eight engineers and a person who is responsible for the accounts, meaning the support staff. 

    What's my experience with pricing, setup cost, and licensing?

    One can pay for the license annually, or at two and five year intervals. 

    What other advice do I have?

    The solution is cloud-based.

    I would absolutely recommend this solution to others. So far, so good. 

    There are roughly 25 people making use of the solution in our organization. 

    I rate Sophos Intercept X as a ten out of ten. 

    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    PeerSpot user
    reviewer1640424 - PeerSpot reviewer
    Technical Director at a security firm with 1-10 employees
    Real User
    A very good detection rate, good security metrics and AI
    Pros and Cons
    • "Offers artificial intelligence, security metrics and a lot of information gathered to make decisions."
    • "Needs more flexible reporting, particularly for medium to large size companies."

    What is our primary use case?

    I'm the technical director and we are partners with Sophos. 

    What is most valuable?

    This solution is an EDR antivirus with some artificial intelligence, security metrics and a lot of information gathered to make decisions. Without Intercept X, I think Sophos would have lost the antivirus fight and stayed as a UTM vendor. The solution has a very good detection rate. With the new threats, if you don't have Intercept X, you won't be protected from attacks. 

    What needs improvement?

    I think this solution needs more flexible reporting, particularly for medium to large size companies and I'd like to see some varied options for making reports. Communication with all the antivirus vendors could be improved. We need lateral communication with other antivirus and security products. We need to communicate from one site to the other, possibly nothing will be required as a result, but it would be good to have this information and to have it easily transferred. 

    What other advice do I have?

    I rate this solution a nine out of 10. 

    Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
    PeerSpot user
    Technical manager at Andalusia Hai Aljamea Hospital
    Reseller
    Offers very good performance and has great features
    Pros and Cons
    • "This solution offers very good performance and it has great features."
    • "Should include additional integration."

    What is our primary use case?

    Our primary use case is for securing the endpoints or endpoint users and Sophos servers.

    What is most valuable?

    This solution offers very good performance and it has great features. 

    What needs improvement?

    I'd like to see more integration in the solution. 

    For how long have I used the solution?

    I've been using this solution for five years. 

    What do I think about the stability of the solution?

    The solution is stable. 

    What do I think about the scalability of the solution?

    The solution is scalable. 

    How are customer service and technical support?

    Customer service is good, they're knowledgeable and customer friendly. They provide good support. 

    How was the initial setup?

    We don't install Intercept X in all devices, we do it for ourselves and the customers do their own deployment. It took around two hours for implementation within the company. 

    What's my experience with pricing, setup cost, and licensing?

    There is an annual license fee. 

    What other advice do I have?

    I would recommend this solution and rate it an eight out of 10.

    Which deployment model are you using for this solution?

    Public Cloud
    Disclosure: My company has a business relationship with this vendor other than being a customer: Distributor
    PeerSpot user
    Buyer's Guide
    Download our free Intercept X Endpoint Report and get advice and tips from experienced pros sharing their opinions.
    Updated: June 2025
    Buyer's Guide
    Download our free Intercept X Endpoint Report and get advice and tips from experienced pros sharing their opinions.