Sophos Firewall Reviews

Actually, we are using Tekton for creating CI/CD pipelines for building and deploying applications to different environments.

It helped a lot in terms of automation. We sometimes use Tekton for purposes like sending emails, running batch jobs, and similar tasks.

The valuable features include cloud-native integration, which makes it highly available and efficient in modern containerized environments. Another feature is the modular pipeline that allows reusing CI/CD manifests for different purposes. This modularity helps in reducing redundancy and maintaining a streamlined process.

One area of improvement is the lack of cross-cluster capability, meaning you need different sets of tasks and pipelines for each Kubernetes cluster. Tekton also has an unstable API with frequent changes, making it challenging to maintain consistency across versions. Additionally, there's a need for a better dashboard and built-in authentication mechanisms.

It's about one and a half years we have been working with Tekton.

Tekton is quite stable when used in a well-established Kubernetes cluster. The stability largely depends on the stability of the Kubernetes environment itself, which is designed for high availability.

Tekton's scalability is one of its most advanced features. Since it uses the underlying Kubernetes infrastructure, it can scale easily if the Kubernetes cluster is sufficiently large. I would rate it eight out of ten for scalability.

We primarily used community resources like Stack Overflow for addressing our issues and did not directly contact Tekton's customer service.

In my previous company, we used GitLab and Jenkins for creating CICD pipelines. Currently, Tekton is the primary tool we are using, with Jenkins as a backup solution if Tekton encounters any issues.

The initial setup was manageable but required extensive reading and understanding of documentation. If the Kubernetes cluster is already in place, the setup can be completed in less than ten minutes.

The deployment of Tekton was done in-house with a team of six to seven people handling deployment, creating CI/CD pipelines, and maintaining the solution.

Tekton is an open-source tool, meaning there are no setup costs associated with it. I would rate the cost at one, indicating it is free to use.

In my previous company, we used GitLab and Jenkins for similar purposes.

My advice is to avoid using Tekton if possible due to its complex setup and lack of user-friendly features like a comprehensive dashboard and built-in authentication mechanisms.

I'd rate the solution eight out of ten.

We use Sophos XGS firewall for edge control.

The solution's most valuable features are IPS, IDS, and web application security.

Sophos XGS should improve its customer service and educate its implementation partner. It should also work on building relationships with customers directly because there is no Sophos office or person to handle the Pakistan region. If Sophos opens its local office, its business will increase. Sophos XGS should train the technical staff about new challenges in security.

I have been using Sophos XGS for almost three years.

Sophos XGS is a stable solution.

At our data center head office, we have two high-availability devices. On the remote side, we are using a single piece of equipment. All these are XGS 2000, 126, and 200 series. So, we have already chosen a scalable solution. Around 700 users are using the solution in our organization.

The solution’s initial setup is straightforward. It took hardly one hour to deploy the solution.

We have outsourced the solution's deployment to a service provider or implementation partner. A team of professionals went on-site and installed it, and the configuration will be done through our remote support.

We signed a three-year support contract with the implementation partner when we purchased the hardware. Now, they are providing support, but it is not good. We have lodged an official complaint against the implementation partner because they sometimes refuse to provide support.

Initially, we were going with another partner, but the distributor recommended Information Systems Associates Pvt Ltd to us. So, I have also lodged an official complaint against the distributor.

Sophos XGS is a very expensive solution. It cost us $ 33,000. Huawei and Sangfor make much cheaper firewalls available in Pakistan. The equipment is being sold at throwaway prices. If we compare the market prices, the acquisition cost of Sophos XGS is much higher than that of the other market competitors. However, Sophos XGS is cheaper than Palo Alto.

Its competitor, Sangfor, provides an add-on EDR feature with the same firewall. Each and every node is connected with the firewall through EDR because all traffic is monitored. This functionality is not available in Sophos.

The solution provides threat intelligence capabilities, but some other tools are much better than Sophos XGS. I would recommend the solution to other users.

Overall, I rate the solution a seven out of ten.

It has been a while since I have worked with the product in our company, and so I can't remember its most effective features.

The support service offered by Sophos is an area of concern where certain improvements are required. My company did not get enough support when, in our enterprise, we faced some issues with the product and needed support. For support, one has to go with the online community, and even then, it cannot be guaranteed that one will get the right support.

The support team's response time should be minimized. The support should be more available. I think that one has to wait for four or five days to get support. Business cannot stop just because of issues with support. The tool's renewal service was really good and straightforward.

Some of the working features of the product, like sandboxing functionalities, are complex for me to handle, especially since one has to buy them separately. You have to buy sandboxing features separately, but I believe that it needs to be given to a user along with the product. In my company, we couldn't find the detection features of the product. Though I did a remote code execution, and it stopped abruptly, it never showed where it actually stopped. In the area of reporting, there needs to be a lot of improvement in the tool.

Partner engagement is an area in which I feel there should be some improvements. Getting support or being able to deal with certain stuff when it comes to Sophos because of the OEM should be made possible. When an OEM is with you, you'll feel more comfortable doing business. My company started doing Fortinet a few days ago, but before that, we had Sophos. My company is moving away from Sophos because it is no longer needed. When it comes to the price or during some disconnection, my company doesn't get any support from Sophos.

I have been using Sophos XG since 2021.

I rate the technical support a six out of ten.

Neutral

Our company uses Microsoft Defender, Kaspersky, and Trend Micro.

As my company has partnerships with Microsoft and Sophos, the best part we get is in the areas of support services and distributors as we are involved in the reselling business. My company also has to operate with some local resellers, so we get support from them at a good price from them, and even during deployment, we get some support from them. I worked with Microsoft in 2019 and stopped working with it in 2020 during COVID-19. I got familiar with many tools during COVID-19, so I can get the business prices of the solutions. If I keep Microsoft Defender aside, then my company does business with Trend Micro as well. Trend Micro provides whatever help my company needs, and the tool's team greatly engages with us and supports us. With Sophos, my company doesn't get any support. I think Sophos does not do direct business anymore. Sophos doesn't have any OEM office. If there is no OEM office for a product, the company can face a lot of trouble.

I did business with Sophos in 2021. I think that last year, we got a Sophos Firewall deployed in our organization. The product's initial setup phase was straightforward.

The solution can be deployed in two days.

Nowadays, my company recommends Palo Alto and Fortinet. With Fortinet, my company is comfortable because it looks after our needs, and it is really helpful.

The user interface of the product is good, especially since its customers are satisfied.

Sophos XG supports our customers' remote workflows well. As a customer-centric tool, they use it as part of their company.

The product can be recommended to SMBs. My company's people requested Sophos products for 450 people or endpoints, but we didn't get any response from Sophos. My company emailed an agent from Sophos, but we didn't get any response for 44 servers and 400 endpoints we wanted. I work at a hospital, so we didn't get any price quotation associated with the product.

The features of the product are good. It is not like Sophos told me something and its products were working in a different manner.

I rate the solution a ten out of ten.

I mainly use Sophos XG for network firewall protection and VPN access. It helps secure our internet connection and allows us to manage our network traffic efficiently. Additionally, we use it for monitoring our local network.

Sophos XG has significantly improved our remote workforce security. It effectively safeguards our information systems and data, while also enabling us to restrict access to unauthorized websites. This has been particularly valuable for ensuring productivity and security across all our branches nationwide.

The most valuable features of Sophos XG for our use cases are its firewall capabilities, its ability to connect to wide area and local networks, and its VPN functionality. It effectively protects our information systems while simplifying VPN setup across branches, eliminating the need for additional VPN services from our internet service provider.

One area where Sophos XG could improve is in its patch management system. I encountered an issue where installing a new patch resulted in being locked out of the firewall, which was quite inconvenient. This suggests a vulnerability that needs addressing to ensure administrators can update patches without losing access. Such incidents shouldn't require a complete reconfiguration, so there is definitely room for improvement in this aspect.

One piece of advice I would offer is for Sophos XG to consistently incorporate the latest technologies to stay competitive with other vendors. Ensuring that new features are regularly updated and integrated into future products will enhance the platform's effectiveness and appeal to users.

I have been working with Sophos XG for seven years.

I would rate the stability of the solution as a ten out of ten.

I would rate the scalability of the solution as an eight out of ten. It is highly scalable and capable of covering a growing number of end users. Whether managing a small or large user base, its scalability makes it adaptable to varying network sizes and user demands. In my organization, we have approximately two thousand users across various branches using Sophos XG daily.

I would rate the initial setup of Sophos XG as a solid ten out of ten in terms of ease. With a clear understanding of the process and step-by-step guidance, setting it up was straightforward and hassle-free.

It took me around 30 minutes to deploy Sophos XG. The deployment process involved configuring the LAN, WAN, and VPN settings at each branch. Once connected to the switch and router, it was ready to use, making it a straightforward and quick setup process. 

Maintaining Sophos XG typically requires only one or two people, depending on the size and complexity of the network deployment.

The most effective feature of Sophos XG for threat prevention is its regular patch management system. By consistently updating software and firmware with new patches, it helps prevent attacks by addressing vulnerabilities and staying ahead of emerging threats.

The web filtering capability of Sophos XG has benefited our organization by effectively blocking users from accessing specific websites during office hours and even restricting access to certain sites altogether. This feature has been instrumental in enforcing our web usage policies and ensuring a secure browsing environment.

The performance of Sophos XG's firewall has met our expectations perfectly.

We have integrated Sophos XG with other security equipment such as routers and switches. While we primarily use it as a standalone product, in some branches, we have connected it with other security solutions for enhanced protection.

I would recommend implementing Sophos XG for its effectiveness as a firewall. Before installing it, consider factors like your current network equipment, intended use, user compliance with security controls, and whether your technical staff may need training if they're unfamiliar with Sophos firewall.

Overall, I would rate Sophos XG as a ten out of ten.

I use Sophos XG in my company as a firewall for my company's network. The product is used to manage the internet access received through routers for our company's network.

The most valuable feature of the solution stems from the fact that the routing functionality provided by the product is very easy for our company to use in our network since it provides for the movement of packets from one device to the other devices in our network, making it an area which works really fine for us.

I want an increase in the ability of the product to block and delete the websites and applications that don't work fine for our company. The tool ends up blocking another website that I need when I only want it to block a particular website or application. I can't use the product's application control feature, making it a disadvantage of the solution where improvements are required.

I have been using Sophos XG since around 2019, making it five years. I use Sophos Firewall Home Edition.

It is a very stable solution. In my company, we have had a reason to restart the product for a long time since the services offered by the tool have been fine enough for our organization.

The product was installed in our company in 2019 when we had around 15 employees. I don't see any issues with the product, considering the increase in the number of devices over the years in our company.

Sophos Firewall Home Edition doesn't provide technical support.

Sometimes, my company needs to rely on pfSense to deal with the area of backup. My company prefers pfSense to save data.

The product's initial setup phase is very easy.

I use Sophos Firewall Home Edition, which is available for free.

I haven't used the VPN capabilities provided by the product since my company already has a VPN-based solution in our environment.

The application control feature of the product is very good. My company doesn't use the application control feature for now since there was an increase in the blocking and deletion of applications when it was used.

The integration of the product into our company's infrastructure did not have any impact on our network performance. In general, the product is a bit buggy when it comes to the area of its impact on network performance.

I recommend the product to those who plan to use it.

I rate the overall tool an eight out of ten.

We encounter difficulties while navigating through certain features and functionalities of the product. The GUI could be much more transparent.

We have been using Sophos XG for two years. At present, we use the latest version.

I rate the product’s stability an eight out of ten.

We have around 15 to 20 customers using Sophos XG. It is suitable for larger companies. We have around 200 technical engineers in our organization managing it. I rate the scalability a nine out of ten.

The technical support team is friendly and supportive in terms of technical assistance.

Positive

We are working with CheckPoint, SonicWall, and FortiGate.

The deployment method involves navigating through several pages, such as selecting the country and configuring LAN and WAN ports, before reaching the manual configuration stage. Instead, simplifying the process by allowing users to log in directly to the dashboard and initiate configuration without additional prompts could be helpful. The implementation time depends on specific firewall requirements.

The product is more expensive than SonicWall. Our customers compare devices for office compatibility, such as Sophos XG 4100 and SonicWall NSA 2300, and question license cost disparities.

I rate the pricing a six out of ten.

The product’s new variant allows for faster processing of data packets from LAN to WAN, surpassing the capabilities of an 8G firewall. It provides threat prevention features, including WAF, IPS, and AV. We have configured SSL VPN capabilities for different branches, which have been working efficiently. For our minimalistic usage, it has been performing well in transferring data from on-premise devices. It helps us generate detailed reports on the dashboard. The product’s integration with Sophos Central enhances security architecture by enabling centralized management under a single dashboard.

We recommend Sophos XG as a priority as it is much more reliable and has efficient technical assistance. It is much easier for configuration, web filtering, or web extension than one of its competitors.

I rate it a seven out of ten.

I use Sophos XG for network security and VPN policies. It is crucial for safeguarding data, enforcing user access controls, and ensuring secure communication. The firewall features, like application control and intrusion prevention, provide a strong defense against cyber threats. With centralized management, setting up and monitoring policies becomes easy, and the VPN capabilities ensure secure remote access for our team.

What I like about Sophos XG is its versatility in tailoring security features to our specific needs. In our environment where certain services are only needed part-time, the flexibility to deploy services selectively is valuable. The comprehensive protection, from firewall to market inspection and routing, ensures a robust defense. I particularly like the visibility it provides into network traffic, allowing us to identify and address issues efficiently.

While Sophos XG has been reliable for remote troubleshooting sessions, it would be beneficial if the platform provided more flexible support for a variety of devices. The user interface is intuitive for those familiar with it, but improving accessibility and user guidance could be beneficial for newcomers. Additionally, although the features are comprehensive, fair pricing and more flexibility with device compatibility could make it even more appealing in the market.

I have been working with Sophos XG for two years.

It is quite stable.

I would give it a ten out of ten for scalability. We have approximately 100 users.

Tech support for Sophos XG is great. They are professional, respond quickly, and help resolve issues effectively.

Previously, I have used Fortinet and SonicWall.

The initial setup of Sophos XG is not complex, especially with familiarity and experience. As you work with it over time, it becomes more straightforward, and mastery comes with continuous use. Deployment depends on specific organizational needs, but in general, it involves configuring the connection between the internet and the local network, setting up VLANs, and defining firewall rules. For me, as a consultant, the process varies based on different client scenarios. Sophos XG simplifies the deployment process, and once configured, it efficiently manages network access for different user categories.

I have done both in-house deployments and collaborated with integrators based on the client's preference. As a consultant, I assess the needs, design the setup, and can either guide the in-house team through the deployment or handle it myself. The process involves configuring the live site for optimal security, and in some cases, I work remotely on existing setups. Sophos XG's flexibility makes it feasible for both in-house and external experts to manage the deployment effectively.

The payment structure can depend on the reseller or partner. Typically, it involves getting the device first, and then the licensing is managed, often in US dollars, through the partner or reseller. The process ensures proper handling and support through authorized channels.

I would recommend Sophos XG for anyone looking to build robust IT systems. It is ideal if you have a clear vision of your IT infrastructure and want a solution that can seamlessly integrate and enhance security. The flexibility to tailor it to specific needs makes Sophos XG a valuable choice for building a reliable and secure network. Overall, I would rate it as a ten out of ten.

We use Sophos XG firewall primarily for threat management, including firewall and endpoint equipment protection. We are in the process of upgrading to Sophos XG 33 firewall.

Sophos has greatly improved our network's security posture. In terms of network security and user activity reporting, it has helped us to manage and analyze the activities of the users. From the reporting, we can now see areas where we need improvements, such as blocking certain sites from users.

The most valuable features are its protection capabilities like threat prevention, malware security, web protection, and web security. The security features are very good.

There should be a workaround in case of equipment breakdown, like a stopgap measure while the equipment is being returned or replaced. An improvement in the product's pricing would also be beneficial so that more people can afford it.

We have been using Sophos XG since 2018.

Sophos' technical support is very prompt and efficient. For instance, when our equipment failed to reboot, their team was quick to diagnose and resolve the problem by exchanging the equipment within two weeks.

Positive

We used another firewall before Sophos.

Having a Unified Threat Management system like Sophos XG has helped us spend less on network security, thus providing a good return on investment by managing our income effectively.

The price is reasonable, but if reduced, it could become accessible to more people. Currently, it costs about four million shillings in Kenya.

Before using Sophos, we used another firewall.

Regular prompts from Sophos to the users for instant reporting of any challenges would be very beneficial. Including more YouTube videos, webinars, and other educational content would also help users understand and utilize the product more effectively.

I'd rate the solution nine out of ten.

I use the solution in my internal network for my home office, for which I have applied a router in my home. I have deployed a couple of switches in my home network, but I need to secure my network from attacks.

Adaptive security is the most usable and most efficient feature in Sophos XG. The performance and scalability of the tool are advantageous areas.

With the firewall part in Sophos XG, it is not very flexible if you want to block access to a particular site during your internal usage. The tool is not able to block access to a particular website instantly or easily since it takes a considerable amount of time to configure a few things. If you specify that a user should not be able to go to www.google.com, it should be denied for sure.

The support engineers of the product are not very tech-savvy, making it an area where improvements are required.

I have been using Sophos XG for four years. I am a customer of the product.

At times, there are some issues that I have faced with the stability of the product. Not many firmware updates pushed into the tool are bug-free, and because of this, I face issues.

I rate the tool's stability a seven out of ten.

It is a scalable solution.

Based on my experience with the product's support team, I feel that Sophos provides good technical support to its users.

I rate the technical support a six out of ten.

Neutral

The product's initial setup phase was easy, especially compared to Cisco.

The solution is deployed on the cloud. I have also worked with the on-premises model.

The solution can be deployed in only a couple of hours.

The product has improved the security posture. Sophos XG provides features that are almost the same as those Cisco Firepower devices provide. I would say that a couple of features in Sophos XG are the same as the ones provided by other Cisco devices, which are top-notch.

The management tools or log-related solutions that are presented with Sophos are okay but not top-notch when it comes to Cisco. I rate the reporting and visibility tools in Sophos XG a six out of ten compared to Cisco.

Sophos xG's integration capabilities do not apply to a limited number of security tools. Cisco provides integration capabilities with many products, while Sophos XG offers integration with a limited number of products. Cisco provides integration capability with almost any tool that is present in the world. Cisco works day and night to ensure that it provides good integration capabilities with the solutions.

I recommend the tool to those who plan to use it, especially if you own a very small office where you don't need a product with too many functionalities.

I rate the tool a seven out of ten.

We use Sophos XG for ensuring security, implementing web filtering, enforcing policies, and blocking traffic as needed.

I appreciate its interface, but I find that the available ports are insufficient. I've encountered limitations, often finding that three to four ports are not adequate for our needs.

It stands out with its side-to-side VPN and SSL VPN capabilities.

The most significant aspect is the protection it offers.

I encountered an issue while implementing web filtering for users. Specifically, when attempting to access reports detailing which sites users are visiting, the diagnostic report fails to display the complete URLs of the websites visited. This becomes particularly problematic when users utilize proxy software to bypass the firewall, as it renders tracking their website visits nearly impossible. Training presents a major challenge as there are numerous features available, such as IPS and IDS, which many network administrators are unfamiliar with and tend to leave disabled. Users are unable to enable these features themselves due to their lack of understanding of their functionalities and configuration processes. The training manual provided to users lacks proper guidance on configuration procedures. The content outlined in the user manual differs significantly from the live configuration process.

I have been working with it for approximately six years.

There are several glitches in the new firewall. One particular issue arises when applying filtering settings. The firewall fails to unblock sites without requiring a restart to save and execute the changes properly.

We have a multitude of distinct sites, amounting to a total of six to seven thousand users in total.

Our experience with Fortinet was better compared to Sophos. Also, configuring Fortinet is much easier than configuring Sophos.

Installation is not straightforward; it's a bit complex. For instance, when setting up two ISP connections and terminating them on two firewalls, the process involves configuring LAN and WAN interfaces separately, along with DNS and routing configurations in different tabs. Many users may find these functions unfamiliar. It would be more convenient if all functions related to traffic routing were consolidated into a single tab for easier management. Maintenance is also challenging.

The price of Sophos in PTR is significantly higher compared to Fortinet.

Overall, I would rate it three out of ten.