Sophos Firewall Reviews

Most of the clients use it for web filtering, application control, SSL inspection, and VPN. We have on-premise and cloud or virtual environment deployments. On the cloud, Sophos XG is on Azure or OVH.

The most valuable is the synchronized security between Sophos XG and Sophos endpoint because it provides a lot of visibility about unknown applications. The endpoint shares the information of unknown applications, and you can learn about those applications and create policies to allow or block those applications.

Everything is working as expected at this moment, but the anti-spam solution in Sophos XG needs to be improved. It needs more granular features and more stability. The anti-spam solution currently doesn't have many features, and we would like to have more features. At this moment, there is no expression filter for anti-spam. We need something to be able to filter subjects or attachments in emails based on the keyword. Sometimes, there is an issue with anti-spam, and Sophos XG suddenly stops processing incoming or outgoing emails. The only solution for this issue is to restart the appliance.

Their support should be improved. It takes a long time to escalate a support case from level one to level two.

I have been using Sophos XG for six years.

It is stable, but sometimes, there is an issue with anti-spam, and Sophos XG suddenly stops processing incoming or outgoing emails. This is the only issue that I have with the anti-spam solution on Sophos XG.

It is scalable. Most of our clients are small enterprises. We also have some medium enterprises.

Their support should be improved. When we open a support case on their support portal, it first goes to their tier-one support. When an issue is complex, it takes a long time to escalate a support case to a level-two engineer, which is frustrating. Their response time is slow.

Its deployment and setup are very easy. It is not at all complex to set up. The deployment duration varies. It can take around three days for a deployment with anti-spam, application control, IPS, and VPN with filtering.

For its deployment and maintenance, usually, there are two of us, but sometimes, there is just one person.

Most of the customers here evaluate FortiGate against Sophos XG. Some of them also evaluate WatchGuard Firebox. In the past, FortiGate had the advantage of having an SD-WAN solution, but now Sophos also has an SD-WAN solution with a graphical user interface.

Sophos XG is very easy to follow and easy to configure, which is something very valuable for me and our customers. It is also very easy to use a site-to-site VPN with certificates, which is another pro. SD-RED devices are one more advantage that Sophos has over other vendors. These devices are very useful for those customers who don't have IT personnel in branch offices. With SD-RED devices, they can connect to the central site. The connection is automatically established with Sophos XG on the site. There is no need to have an IT person on the site.

I would recommend this solution because it is really easy to implement. Sophos XG is very focused on cybersecurity. Its ability to synchronize information with Sophos endpoint is a very good feature when you are concerned about security. Other vendors or firewalls are more focused on establishing the connection and policies.

I would rate Sophos XG an eight out of ten. It is very good, but it could be better.

It is a firewall. It is used in my defense line. It provides defense and a form of security for my internal network.

IPS and advanced threat protection (ATP) are the most valuable features. I am able to segment my network traffic and block incoming connections. It is also easy to use.

I would like to have better SSL decryption and HTTPS decryption. There should be filtering of SSL and HTTPS traffic.

Sophos XG consumes a lot of endpoint resources. It consumes a lot of RAM and CPU resources, and they should look into this.

I have been using this solution for two years.

It is stable.

Its scalability is fine. We have about 40 users. We don't have any plan to increase its usage at the moment. However, it depends on recruitments and other things. If required, my company would change my box to a bigger one for better processing speed.

Their technical support is okay. Sometimes, during the webinars, when I have some questions, they respond to them, but sometimes, I don't get any response.

I have worked with Check Point before. Check Point is very expensive. At this time, we are not thinking of switching to another solution. If we were switching, Cisco Firepower would have been an option, but my colleagues, who have good experience with such solutions, would prefer to stay with Sophos XG. Cisco Firepower is a little bit complicated to use. It is also expensive. Cisco and Check Point have different boxes for different things, whereas Sophos brings everything into one box.

It was straightforward.

Its price is fair. It is cheaper and way better than others.

I like this solution. I would rate Sophos XG an eight out of ten.

We are using Sophos XG for remote two-factor authentication. We manage the web and application access, as well as the traffic. We also used it for remote, site-to-site VPNs.

The most valuable feature is the remote VPN.

The multifactor authentication is helpful because whenever the user wants to connect to the firewall, they have to use the authenticator before they can access it.

The LAN traffic management features such as implicit denial are very good.

Technical support can be slow to respond, which is something that should be improved.

In the future, I would like to see the addition of artificial intelligence for identifying and controlling traffic.

We have been using Sophos XG for the past year.

This is a reliable solution.

This product is scalable. We have approximately 400 users, spread across different departments. As our production increases and we onboard more users, we will extend the use of Sophos XG.

The technical support team is good but sometimes, there is a large delay in answering the phones.

The initial setup is straightforward.

We had assistance from the vendor during the onboarding process when the system was being set up. They spotted a lot of things during the implementation, which helped.

We get a return on this investment because the inbuilt two-factor authentication means that we don't need to purchase a third-party tool for this security feature.

The price is good and licensing fees are billed on a yearly basis.

We evaluated Cisco Firepower but we found that Sophos XG was more efficient in terms of cost. As such, we implemented XG.

This is a product that I can recommend for organizations with a medium-level or large-level infrastructure.

I would rate this solution a nine out of ten.

We primarily use the solution for security and protection.

The solution seems to be very easy to use.

The administration is pretty simple.

The solution is easy to deploy.

We've found the solution to be quite stable.

My understanding is that the solution is scalable.

Cyberoam was extremely hard to develop. If this solution makes that process easier, we will be happy.

The solution should be lowered. It would help entice more clients. We'd like to pay a lower price.

We're concerned about the safety of our devices. We are worried if someone manages to hack the firewall, that they will be able to get past other protections and perhaps onto devices. We'd like Sophos to remain vigilant in its protective capabilities and to continuously update its solution to expand its security offering in order to better protect its customers.

It would be helpful if the solution offered some tutorial videos to help new users learn the system quickly.

There should be some trial on offer that allows users to try out the solution and learn it before implementing it.

I've only been working with the solution for about one month or so. It hasn't been that long just yet.

The solution has been very stable. There are no bugs or glitches. It doesn't crash or freeze. It's reliable in terms of the performance it offers.

The solution is scalable. If a company needs to expand it, it shouldn't have any issues doing so.

We have about 200 people using it in our company.

I have not used technical support just yet. If some issue comes through in the future, I will reach out. However, as of now, I can't speak to their level of responsiveness or their knowledgeability.

I used to use Cyberoam. However, this particular solution was acquired by Sophos, and therefore, now the company I work for uses Sophos. It's pretty much the same product.

The product is pretty easy to deploy. We use a gateway from our partner, and not with Sophos.

The solution is a bit costly. It would be ideal if it was less expensive for its user base.

We pay a yearly licensing fee. We do not pay monthly.

I'm a customer and an end-users. I do not have a business relationship with Sophos.

I'm not sure which version of the solution we're using. It might be version 65 or something like that.

We do not use the cloud version. It's for device management, and therefore it's on-premises.

Currently, I would rate the solution at a seven out of ten. I haven't used it for very long, and can't fully evaluate it; I must learn more about the offering and what it can do first.

We use this solution as a firewall for everyone to connect to the internet.

We protect ourself and we use it as a VPN to connect to the internal network. 

It is improved significantly. 

It is simple to use.

The interface should be changed. It should be more user-friendly.

They should also update the policies and statistics because Fortinet is better, but Sophos could grow.

In the next release, I would like to see improvements to simplify the interface and more policy deployments.

It was Cyberoam and we upgraded to Sophos XG. We have been using Cyberoam for more than 10 years and more than one year with Sophos XG.

We were on version 17 and have just upgraded to version 18.

It's stable. We have no problem at all with stability or with Sophos XG.

Its high availability is fine, it's good. It's scalable as well.

 We have approximately 500  employees using this solution.

We will continue and increase our usage of this product.

We had one issue with Cyberoam, but it was upgraded with Sophos. They helped us, but it takes a bit of time to resolve it but it's fine. 

We also use Fortinet FortiGate for large locations. The Fortinet usage is completely different than Sophos. Sophos is simple, but I prefer Fortinet.

It's easy to install. 

It takes the team one hour to launch it.

We have a team of 15 people to deploy and maintain this solution.

We completed the installation ourselves.

We purchased the technical appliances for on-premises.

We have our license for three years.

Yes. Fortinet. However the price is much better to Fortinet.

I would recommend Sophos XG to others, but it would depend on their capacity.

I would rate Sophos XG a seven out of ten.

We are an IT solution company and we provide network security. This solution is used for securing your network.

The solution has very good security features, is easy to use for administrators and users, and has informative reports.

I would like to see in future releases a tool to scan for malicious packets and give the location of where they are coming from. Nowadays all over the world is suffering from ransomware threats. If they could map where those packets are coming from and make the packet monitoring more efficient it will be helpful to prevent more of these kinds of threats.

I have been using the solution for approximately five years.

The solution has been highly stable.

We have used SonicWall and Fortinet in the past.

The installation is very easy for anyone. The configuration is straightforward, all the information is available through a quick Google search.

The price can be a bit steep but for the number of features, it is worth it. Additionally, the enterprise version of this solution is priced well for all the features that you receive.

If you are thinking about implementing Fortinet, SonicWall, or any other product you will pay extra for additional security features and might need to purchase additional licenses. If they just spend a little more on this solution they will get the extra features for the same amount.

This solution has security features that in other solution you have to purchase them as add-ons, such as malware and email filters. Comparing this solution overall to competitors it is by far the best.

I rate Sophos XG an eight out of ten.

The product has a console that is based in the cloud for all their products. In this console, they have email security, firewall security, endpoint security, et cetera. All of the products on offer in the console are very useful for us.

The solution is stable.

The solution works well for enterprises and large-scale organizations.

The manuals or guides we are given are too simple. When we are implementing the product, it is difficult for us as we don't have more detailed information. 

The technical support on offer is slow. When I have questions, they answer me very slowly. Sometimes within 24 hours, I have a response. However, it can be longer. In Mexico, Sophos doesn't have technical support locally. It's in Argentina or in other countries. It would be nice if support was available in the country.

The stability is okay. That said, as an enterprise solution, it can be a bit unstable during the initial implementation.

The solution works well for enterprise-level organizations.

We're not overly satisfied with technical support. We'd like to see local support, from within our country. Due to the fact that it is coming from outside, the response is very slow. We'd like it to be faster. We aren't completely satisfied with the level of service we get. 

The initial setup is difficult in that there isn't enough documentation available to walk a user through the process. It can cause some issues. It's not exactly straightforward.

Sometimes we need to work with other resellers. We don't always implement the solution by ourselves. 

We are partners with Sophos.

We are using the 130-type of solution.

We take a hybrid approach to deployment. Some servers are on-premise and some servers are in-cloud.

I'd rate the solution at an eight out of ten.

I'm providing services to my customers. They are using Sophos firewalls, and a few of them are also using antivirus.

Content filtering and intrusion prevention are most valuable. Our customers are fully satisfied with the performance of Sophos. It has all the features that they require in a firewall. 

They need to do more quality checks before they release firmware upgrades. Currently, a few Cyberoam firewall customers are facing some issues while upgrading the Cyberoam firmware to Sophos. After the new firmware is installed, they are seeing some performance issues, which require some bug fixes. The performance is fine after getting the required support. Customers who are already using Sophos hardware are quite satisfied with this solution. 

Their support should also be improved. We are facing difficulties getting support on time through email or phone.

I have been using this solution for three to four years.

I regularly contact them. Connecting Sophos support is quite a difficult task during the pandemic. We are facing difficulties getting support on time through email or phone. Sometimes when a problem comes, it has to be sorted for the customer quickly, but it is taking time. One of the customers has just upgraded a firewall from Cyberoam firmware to Sophos, and it took them around ten days to get that firewall upgraded from Sophos.

Most of the customers compare Sophos with Fortinet. In comparison to Fortinet, people are more satisfied with Sophos. Sophos has a big customer base in India. Therefore, they are good in terms of performance and customer satisfaction.

I would rate Sophos XG a seven out of ten. We are satisfied with its performance.

We are primarily using Sophos XG for the identity base, policies, load balancing, and SD-WAN. Right now we have separate, different branches, therefore, we need to integrate it with SD-WAN. Of course, with SD-WAN, we need to do the load balancing, the VPN failovers, and also watch the connectivity. We are more particular on the link, and also the implementation of user policies.

The Multi-Link, or the Multi-Wan, SD-WAN, is extremely valuable to our organization.

The Anti-Spam and the Gateway Anti-Virus capabilities have been very useful.

The solution offers a very good Network Ring, QRS, and landing management. 

We've found that the reporting is very good overall.

They really work scalability into the solution at the outset.

The SD-WAN could be improved. It is not yet full-blown; it's only basic, really. They need to move on with the algorithm on how the SD-WAN works, and how it works in comparison to other brands of SD-WAN. Sophos should study those algorithms on how they do the SD-WAN to learn a few things that may help them build out their own solution.

I've been using the solution and various other Sophos solutions for a while.

If you do the right planning, most of the time Sophos is good for five years. It depends on the recommendations as well. Sometimes the Sophos team or supplier will show you the number of users or number of networks and they'll illustrate to you a plan most suited to what you have and what you might have. They assess everything and give you a five-year plan. That way, if you need to expand, they've already taken that into consideration at the outset and there's room to scale.

We have about 100 users.

Due to the pandemic, we don't really have any plans to expand. We may be downsizing a bit. We'll see.

We've been satisfied with Sophos' technical support. They are very helpful and responsive. Their staff is quite knowledgeable.

I've worked with Sophos previously and we had a different setup. In terms of implementation, sometimes there are complex setups and sometimes the setup s are more basic. Right now, we have a complex setup. We need to ensure interconnectivity between our branches. We'll have different networks, different sites, and a lot of complexity. 

It doesn't really take too long to deploy, however. The support from the supplier is good. They're always available to assist. They are well-trained and they are already familiar with the setups and configuration so they're doing a pretty good job in terms of helping us.

The supplier, the reseller, the partner of Sophos, is doing the change for the end-users. Most of the basic configuration has already been already done by us, however, for more complex areas, we could ask them, and they could come to us to configure it for us.

The pricing is based on the acquisition cost.

We have evaluated a few different solutions. We've looked at Palo Alto and FortiGate products. In terms of our end-point security, we've also looked at Trend Micro and a few others.

We are just a customer and an end-user.

We are using the latest version of the solution.

ON a scale from one to ten, I would rate this solution at an eight.

We use the SRX from Juniper as the second firewall, and Sophos is useful as a first firewall facing the internet edge. We also use it as an SD-WAN, and we're going to use it as a load balancer instead of a BIG F5 load balancer. All of the things like web filtering and internal email filtering will be inside Sophos XG.

Sophos is a stable solution, and we haven't had any bugs or limitations.

The GUI and support could be better. I think there are other products that we are going to deploy instead of Sophos. We have already upgraded a month ago because the interfaces and support for Sophos are really weak. But other products like Juniper, Cisco, or FortiGate are better than Sophos. It's also complicated, and the end-user or client does not understand it.

The interfaces and the GUI design are not easy, and when you do something, unrelated things are in the same configuration site. There are different sites to visit to configure Sophos. This is even more than other products. Many features can be improved, especially the VPN and web filtering features.

We have been using Sophos XG for about five years.

Sophos XG is stable. 

Technical support could be better. I already opened a ticket three days ago, but they are not interested or have not cooperated with the end customer. But Juniper and Cisco are fast to respond compared to Sophos. Sophos is really complicated, and it's not fair to buy the annual support when they don't provide any support quickly when you request it.

The price is fair.

I would advise potential users not to use Sophos if they are not buying the appliance. They should use another product like FortiGate, Check Point, or Palo Alto.

On a scale from one to ten, I would give Sophos XG a six.