We use it with Microsoft Exchange Online for all our email scanning. Microsoft Exchange Online pushes the emails to Sophos, which scans and classifies them before sending them to us. Once it's set up, it's a seamless and efficient solution.
Technical Director at SPATIAL DATA ENGINEERING Ltd
Automatically scans messages and attachments for sensitive data, with encryption that integrates seamlessly
Pros and Cons
- "The filtering capabilities are precious and far superior to others I've used. It's intuitive in what it pushes to quarantine, and users can quickly review, free, or delete items without needing an administrator, making it ideal for a multi-user environment."
- "However, the setup was tricky, particularly with the DNS routing between Microsoft Exchange Online and Sophos cloud services. It took me about four attempts to get it working correctly. Despite that, Sophos Email does everything we need, so we don't require any additional capabilities now."
What is our primary use case?
How has it helped my organization?
Sophos Email has significantly improved security in our organization, which is critical as a defense subcontractor. It provides much better protection than just using Microsoft's products alone.
What is most valuable?
The filtering capabilities are precious and far superior to others I've used. It's intuitive in what it pushes to quarantine, and users can quickly review, free, or delete items without needing an administrator, making it ideal for a multi-user environment.
What needs improvement?
However, the setup was tricky, particularly with the DNS routing between Microsoft Exchange Online and Sophos cloud services. It took me about four attempts to get it working correctly.
Despite that, Sophos Email does everything we need, so we don't require any additional capabilities now.
Buyer's Guide
Sophos Email
March 2026
Learn what your peers think about Sophos Email. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,264 professionals have used our research since 2012.
For how long have I used the solution?
I've been working with Sophos Email for about eighteen months.
What do I think about the stability of the solution?
I’d give it a nine for stability—it’s very stable, which is crucial for us and the main reason we chose it.
What do I think about the scalability of the solution?
I rate the scalability of Microsoft Exchange Online a ten out of ten. It's a pure enterprise solution. We have about twenty users since we’re a micro-business, but if the company expands, we will increase usage.
How are customer service and support?
Regarding technical support, it was a great experience, although I know others may havedifferent experiences. Before using Microsoft Exchange Online, we were using Microsoft’s product, but we needed something more robust and stable. We evaluated several options and chose Microsoft Exchange Online because it offered a strong industry presence.
How was the initial setup?
The setup process for Sophos Email was quite challenging, and I would rate it a three or four out of ten. However, it wasn’t a nightmare. Once the DNS setup was correct, the deployment became straightforward. It’s deployed in the cloud, and the initial deployment took less than a week. After configuring DNS, it was mainly self-deployed and integrated with Microsoft Active Directory, making it easy to add users.
I handled the deployment with help from Sophos and completed
Their Accreditation Training helped me get up to speed quickly. In terms of manpower, only two people were involved in the deployment process. Now that it's set up, the system is robust and self-maintaining. Reporting is configured on the Sophos appliance and integrated with monitoring tools. If an issue arises, the system attempts to fix itself, and if it can’t, it notifies both us and Sophos automatically. Overall, it’s very low maintenance.
What was our ROI?
In terms of return on investment, while I can’t put a financial figure on it, the product has significantly reduced unsolicited emails and strengthened our security. It’s been critical, especially for our government contracts.
What's my experience with pricing, setup cost, and licensing?
The pricing is affordable, so I’d rate it around a four out of ten on the pricing scale. We pay about fifty pounds a month, including hardware so that costs may differ without it.
What other advice do I have?
I’d rate Sophos Email a nine for our use case, as I haven’t found a better
solution. My advice for new users is to work with an authorized Microsoft dealer to get direct support. Many resellers sell licenses, but having a primary dealer ensures better technical support, which is invaluable. It may be more expensive, but the benefits outweigh the costs.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sales Manager at iSolutions International, Inc.
Prevents phishing emails and other cybersecurity attacks
Pros and Cons
- "Our client recently received many emails, and their employees didn't realize these emails were phishing attempts. Consequently, they clicked on them and fell victim to the attack. Therefore, it is important to secure their system with Sophos Email Security."
What is our primary use case?
The solution prevents phishing emails and other cybersecurity attacks.
How has it helped my organization?
Our client recently received many emails, and their employees didn't realize these emails were phishing attempts. Consequently, they clicked on them and fell victim to the attack. Therefore, it is important to secure their system with Sophos Email Security.
What is most valuable?
Sophos Email protection is very active. It has updated signatures for phishing and email attacks. Additionally, it can also send alerts regarding ransomware.
For how long have I used the solution?
I have been using Sophos Email since June last year.
What do I think about the stability of the solution?
Sophos gives good results and good feedback from clients.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
Support is excellent. They do have some delays.
How would you rate customer service and support?
Positive
How was the initial setup?
We also handle the implementation. I manage the branch, sales, and operations. Additionally, we have other roles, such as the technical team and support engineers, to ensure smooth operation for our clients. The deployment requires two technical personnel, including one certified support engineer.
What's my experience with pricing, setup cost, and licensing?
The solution's pricing is reasonable.
What other advice do I have?
Sophos is not difficult to maintain. Overall, I rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Sophos Email
March 2026
Learn what your peers think about Sophos Email. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,264 professionals have used our research since 2012.
Has a good user interface, but its DLP features need enhancement
Pros and Cons
- "It has enhanced our approach to tackling malware and spam. It is a reliable product with a good user interface."
- "Sophos Email could improve DLP features."
What is most valuable?
The product provides valuable performance.
What needs improvement?
Sophos Email could improve DLP features.
What do I think about the stability of the solution?
The platform is stable. However, they could provide more updates to streamline the product. I rate the stability as seven out of ten.
What do I think about the scalability of the solution?
We have 50 Sophos Email users in our organization. It has good scalability.
How are customer service and support?
The technical support team could be faster, more knowledgeable, and more customer-friendly.
Which solution did I use previously and why did I switch?
We are using multiple products as system integrators.
How was the initial setup?
The deployment steps involve simply downloading and executing the links, as it's a cloud-based solution. It requires one engineer to handle the maintenance.
What's my experience with pricing, setup cost, and licensing?
The platform is inexpensive. It offers a cost-effective licensing model. We purchase its yearly license.
What other advice do I have?
We utilize Sophos Email Gateway to protect against phishing in our company. Following the standard recommendation provided by Sophos, we established connectivity between Sophos Email Gateway and Microsoft 365.
It has enhanced our approach to tackling malware and spam. It is a reliable product with a good user interface.
The integration capabilities still need improvement, as some functionalities are not operating properly. Specifically, attention needs to be given to AD integration capabilities, which are crucial for various operations.
I rate it a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Pre-sales manager at National Information Technology Company
Helps to filter emails from spam and malware
Pros and Cons
- "Sophos Email offers encryption and malware protection, provides visibility into emails, has 99% accuracy in catching spam, enhances organizational safety, integrates with various vendors like Microsoft, is deployable with any email service, prevents data loss, features authentication rules, synchronizes with Active Directory and Azure, and includes a self-service portal. The product is very flexible."
- "Sophos Email needs to increase the number of promos."
What is our primary use case?
We use the solution to filter out emails from spam. The main use of it is to secure the enterprise because you don't want to get spam and malware. They can come through email attachments. It helps to protect your organization by filtering the emails.
What is most valuable?
Sophos Email offers encryption and malware protection, provides visibility into emails, has 99% accuracy in catching spam, enhances organizational safety, integrates with various vendors like Microsoft, is deployable with any email service, prevents data loss, features authentication rules, synchronizes with Active Directory and Azure, and includes a self-service portal. The product is very flexible.
What needs improvement?
Sophos Email needs to increase the number of promos.
For how long have I used the solution?
I have been working with the product for six to seven years.
What do I think about the stability of the solution?
The product is stable, and we have recently updated it. I rate it a nine out of ten.
What do I think about the scalability of the solution?
Sophos Email is scalable and allows you to grow as much as you want. It lets you add 1000 or 2000 users.
How are customer service and support?
As partners, we prioritize training and certification. We haven't opened a case with the tech team directly for about five years because our team possesses the necessary knowledge and expertise. However, customers who need to contact them directly usually receive a response within four to six hours, even for urgent matters. They have support teams in various locations, including India, the United States, the UK, and Dubai, making them reachable via phone, chat, or email.
How was the initial setup?
The tool's deployment is easy for IT personnel. It is on the cloud, and you must add information like the IP address. However, it is not designed to be deployed by normal resources who are not in IT.
What's my experience with pricing, setup cost, and licensing?
The solution is affordable compared to other alternatives in the market. I rate its pricing an eight out of ten.
What other advice do I have?
The product is SaaS-based, meaning it's on the cloud. When deployed, it communicates with your email server, whether on-premises or hosted by Microsoft, Google, or AWS. With DLP configured, emails containing credit card numbers are quarantined, and notifications are sent to designated administrators for review. The system follows Australian standards for financial security. However, you can use your templates for governance and financial security.
I rate the overall solution a nine out of ten. I recommend starting with a small user base, perhaps five to six users initially. If they're satisfied with the service, they can expand. A trial period, maybe seven days, before making a purchase decision is good. It's also worth exploring other solutions in the market, with Microsoft being one of the top contenders, especially considering its built-in spam protection with certain subscriptions. However, opting for Sophos offers the advantage of multiple layers of security and centralized filtering.
Customers are very happy with the product and renew its license.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior Technical Support Engineer at Capricot
Robust cybersecurity with advanced attachment and link filtering and affordable fixed pricing
Pros and Cons
- "The most significant aspect is the response filtering concerning attachments and links."
- "The main drawback is regarding the technical support."
What is our primary use case?
Our client specifically opted for it to address attachment-related concerns in both inbound and outbound email traffic. The primary focus lies in leveraging it for scanning and filtering attachments to enhance security measures. The choice is driven by the need for robust link protection, ensuring comprehensive inbound and outbound protection against potential threats associated with email links.
What is most valuable?
The most significant aspect is the response filtering concerning attachments and links.
What needs improvement?
The main drawback is regarding the technical support. Unfortunately, we may not receive immediate assistance, and the resolution process might extend beyond a week. Internal filtering is an additional feature that should be incorporated. I would appreciate having the option for spam blocking.
For how long have I used the solution?
I have been working with it for approximately four years.
What do I think about the stability of the solution?
I would rate its stability capabilities eight out of ten.
What do I think about the scalability of the solution?
Scalability is an area that could be enhanced, particularly in terms of technical aspects related to server maintenance. We lack control over certain aspects, such as policy management and updates, and we do not receive training for these functionalities. I would rate it eight out of ten.
How are customer service and support?
The technical support services should be improved. I would rate it six out of ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup was relatively straightforward. I would rate it eight out of ten.
What about the implementation team?
Deployment process is managing proposal related.
What's my experience with pricing, setup cost, and licensing?
The pricing is quite reasonable, with a fixed cost and no additional charges. I would rate it four out of ten.
What other advice do I have?
Overall, I would rate it nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. reseller
L1 System Engineer at a tech services company with 11-50 employees
Offers good log features but challenges with compatibility, management, and reporting
Pros and Cons
- "The best thing about it is the logs."
- "There have been some issues with compatibility and effectiveness, particularly when integrating it with our firewall. The main challenge has been email protection, especially due to compatibility issues and difficulties with log access and email relay configuration."
What is our primary use case?
We use Sophos Email for various solutions, setting it up for different customer environments as part of our strategy.
What is most valuable?
The best thing about it is the logs.
What needs improvement?
There have been some issues with compatibility and effectiveness, particularly when integrating it with our firewall. The main challenge has been email protection, especially due to compatibility issues and difficulties with log access and email relay configuration.
I would like to see more detailed logs in the future releases. The firewall logs don't show the in-depth logs, so we can only see the software in detail, not the logs themselves. This is a problem we've been facing in customer environments for some time.
Emails go to spam even though there's no legitimate reason for them to be there. There's no summary of the necessary issues, either.
If an email goes to spam, the system will drop it. There should be a certificate email on the query, but support comes and goes, and they might see learning and run the Linux command or show the unrigorous answers.
But if there is some read-only show on the reporting or clear reporting, it would be good for the customers.
For how long have I used the solution?
We use Sophos Email Protection. We've deployed it in various scenarios, either on-premises or using Sophos Cloud Email Protection.
What do I think about the scalability of the solution?
Considering our experience with firewall integration, I'd rate it a five out of ten. I haven't used the cloud solution extensively to comment on that aspect.
The rating reflects the challenges we've faced. These different appliances have more limitations, like reporting limitations. They don't have good reporting, and it's not a good solution.
If there's another issue, we have to go to the CLI and change something to embroider the other issue, which is spam.
If we go and prepare the spam, it gets stuck, and there's no option to understand it on the GUI. There is an option to go to the CLI and run the script. There's a predefined script. There are a lot of things.
How was the initial setup?
The initial configuration isn't difficult, but managing permissions there are some issues. We've encountered issues where some emails are incorrectly flagged or missed, which complicates management.
We're using the on-premises version of Sophos Email Protection. We haven't utilized cloud email protection. Our focus has been primarily on integrating it with the firewall.
What's my experience with pricing, setup cost, and licensing?
There are different price tiers for different customer sizes. I sell the bundle, which includes all the licenses, web protection, and other features.
Which other solutions did I evaluate?
The customers who are using email servers are not using anything else. Most of our new users moved to a better solution, like Fortinet email or other solutions, but they didn't want to move. For the new users, it's combined and deployed by themselves.
What other advice do I have?
It's best to take the POC from the so-called official, test it thoroughly, and then make a decision. If it's compatible with the environment and works well, then keep the POC successfully.
Overall, I would rate the solution a five out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
Information Technology Project Support at Coastal Qatar
Reliable email filtration features, but it needs to update safeguards against phishing
Pros and Cons
- "I found the user interface friendly."
- "The solution has not found a way to block certain kinds of phishing emails."
What is our primary use case?
We use Sophos Email for use cases involving email security, but there are many policies which we have defined. Like, let's say, like, spamming emails which we have defined and encryptions email which we have defined. Filtering emails we have defined, and there are many more.
What is most valuable?
I especially like the filtration. We are filtering what emails need to go out. I also found the user interface friendly.
What needs improvement?
Phishing email is evolving. Sometimes we use tools to send an email. Some companies are using those tools to send an email keeping the face of another company to make it look like that email came from the same person. The solution has not found a way to block these kinds of emails.
For how long have I used the solution?
It's been almost four years that we have continuously worked with it. We use the latest version of the solution because it's on a subscription, that way we always get the updated version.
What do I think about the stability of the solution?
The solution’s stability is good.
What do I think about the scalability of the solution?
The solution has good scalability because I haven't seen any problem which has lasted more than three days.
How are customer service and support?
Maintenance is through on-call support. Whenever we face issues, we raise a complaint to the service provider. They have their own level of support.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We used to use Symantec. Compared to Symantec, Sophos was giving better facilities and better solutions.
How was the initial setup?
The initial setup is not difficult. The solution takes up to 48 hours to deploy, and up to a week to define all the policies and test them.
What about the implementation team?
We used a third-party integrator to deploy the solution. There was one staff member from our side, and the third-party integrator had three people.
What's my experience with pricing, setup cost, and licensing?
Sophos Email is neither cheap nor expensive. It’s affordable, especially for a company like ours.
Which other solutions did I evaluate?
We found Palo Alto was a bit expensive compared to Sophos. That was the reason we started with Sophos.
What other advice do I have?
I rate Sophos Email a seven to eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT- Manager. at a retailer with 51-200 employees
A strong appliance with excellent filtering and an easy setup
Pros and Cons
- "The speed and stability were fine."
- "It filtered most of the spam and junk emails and quarantined them."
- "The solution should be able to support the cloud environment."
- "The solution should be able to support the cloud environment."
What is our primary use case?
We primarily used the solution as an email gateway, for filtering.
What is most valuable?
It was a really good appliance. It filtered most of the spam and junk emails and quarantined them. It was working fine for us.
The speed and stability were fine.
It had good features.
The initial setup was very simple.
What needs improvement?
We didn't have any issues with the solution. It was a good appliance.
The solution should be able to support the cloud environment.
Sometimes, if there is any ransom email or mails are queued, it will take little time to deliver.
For how long have I used the solution?
We used the solution for almost eight or nine years. It was a good appliance. The last time we used it was six to eight months back.
What do I think about the stability of the solution?
The solution was stable and reliable. There are no bugs or glitches, and we never had trouble with it after eight or nine years.
How are customer service and support?
We are closely in touch with our local partners, and our local principals for Sophos. They are also very supportive.
Which solution did I use previously and why did I switch?
Initially, we had an on-premise exchange server. That time, we were using Sophos. After migrating to Office 365, currently, we don't have anything. We are exploring, and we are doing a POC with Antigena, Mimecast, Defender, and then Sophos Email Labs.
How was the initial setup?
The initial setup was very easy.
What's my experience with pricing, setup cost, and licensing?
This is a licensed product.
What other advice do I have?
I'm a customer.
We have decommissioned the solution completely.
We did not change Sophos to a new product. We migrated on-premise email to Office 365.
I'd want people to know this is a good product. I'd recommend it.
I'd rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Sophos Email Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2026
Popular Comparisons
Darktrace
Microsoft Defender for Office 365
Cloudflare One
Proofpoint Email Protection
Check Point Harmony Email & Collaboration
Mimecast Email and Collaboration Threat Protection
Cisco Secure Email
Microsoft Exchange Online Protection (EOP)
Fortinet FortiMail
Barracuda Email Protection
Avanan
IRONSCALES
TitanHQ SpamTitan
Perception Point Advanced Email Security
Hornetsecurity 365 Total Protection
Buyer's Guide
Download our free Sophos Email Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- When evaluating Messaging Security, what aspect do you think is the most important to look for?
- Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?
- What is the best email encryption software for small enterprises using Office 365?
- What security measures should businesses prioritize to support secure remote work?
- When evaluating Email Security tools, what aspects do you think are the most important to look for?
- Why is Email Security important for companies?
- Which is the best email security gateway?
- Why are Email Security tools important for companies?

















