Intercept X Endpoint Reviews

We are still working with Sophos firewalls and we still have some antivirus for end users, but we might shift to something else as the whole antivirus paradigm is changing, so maybe we will be shifting to something different.

We work with Sophos UTM and Sophos XG. Both systems are used, with XG being predominant now as all locations have shifted to XGS models.

These are all UTM boxes, and we are still dealing with Sophos UTM as well.

The product is Intercept X Endpoint.

The whole design of Intercept X Endpoint needs to be looked at, particularly the way it has been implemented and how it is filtering the systems. Once we started using CrowdStrike, it was so lightweight; the servers have hardly any lag unlike when we used to use Intercept X Endpoint for servers, so it's actually very good.

Intercept X Endpoint could learn from CrowdStrike in terms of overall performance and filtering because performance is most important, especially these days as Windows is getting buggier and buggier, which puts a huge load on the PC, and even with the most advanced CPUs and everything in place, it still lags in performance in so many places, thanks to Windows' clumsy design of these collaboration suites that make it extremely heavy on PC's resources.

The interface of Intercept X Endpoint is quite old-fashioned. The Sophos interfaces, including for Intercept X Endpoint, are quite bad actually; to be very honest, even in UTM boxes, they are not great at all. You can hardly see a very small portion of windows while it's creating the firewall rules, and we have been complaining about this for quite some time, but there hasn't been any improvement on those grounds.

Intercept X Endpoint's anti-ransomware capabilities failed us during a bad attack, and just because of our own backup policies, we could restore our normal operations; otherwise, if we had to depend on this solution, we would have been long dead because the infection was so bad, it couldn't even detect the infection.

Intercept X Endpoint cannot handle zero-day attacks; in my experience, last year, we had this major issue with a malware attack, and it happened just because of our backup policies that we were able to recover without any support from Sophos, which just told us they would charge us some 1 Crore in rupees.

Intercept X Endpoint should improve their implementation; things will never be perfect for the new world. This new world is always facing new kinds of attacks and new ways to compromise the system. They need to learn fast, implement fast, and sometimes redesigning the solution is the solution—not just patchwork. There was a time we used to love Sophos because of its fresh design and innovative thought. In my experience, when technical companies are led by MBA professionals, they lose their shine on the technical part and become more dependent on target sales; it turns into a marketing-centric operation that loses the technical focus completely.

I have been using it for more than five plus years, most probably.

It is okay; just okay, rating about five or six somewhere when rating the stability of Intercept X Endpoint from one to ten.

My experience with the technical support by Sophos is that it is okay. There was a time when we were very basic, so we used to find it very good, but after that, it deteriorated. Maybe because of COVID or something, but by that time, we became quite good, so we don't need much of their support, but whenever required, they have provided it, and I can't complain that they didn't provide it; most of the time they have solved the issue also.

Overall competence could use some improvement; there are too many levels of support in their model, such as level one, level two, level three. For a user, we just want to get the issue resolved; this is a typical model that everybody does, not just Sophos; it happens with all companies that come with solutions, whether it is Cisco, EMC Dell, or whatever. When you are in real deep trouble, you just want to get out of it; you don't need so many jargons.

Positive

We do not use its root cause analysis feature from Sophos; that's the reason why we changed to CrowdStrike, which has most of the things on the dashboard, allowing you to quickly see what exactly is happening, what exactly is getting infected, and how it is affecting. CrowdStrike has a very different way of looking at things.

Pricing of Sophos, including for Intercept X Endpoint, is okay; definitely, it is okay. We pay for Sophos on a product by product basis, whatever we buy, whatever we use.

We are looking for some other options, such as CrowdStrike and maybe SentinelOne.

I don't know whether Intercept X Endpoint's deep learning technology is doing its job because, for the user basis, it's okay; it's not top of the line, it's just okay.

I took part in the implementation of Intercept X Endpoint a long time back. At that time, the deployment of Intercept X Endpoint was quite okay; it was good in its own time and quite competitive actually.

On a scale of one to ten, I would rate Intercept X Endpoint as a five.

My main use case for Intercept X Endpoint is to save my endpoints from viruses and attacks. I use Intercept X Endpoint to protect my endpoints from viruses and attacks by using the policies to protect my computer's threat policy, web control, application control, and some types of DLPs.

I am blocking unproductive websites from Intercept X Endpoint in my daily work.

I have noticed multiple improvements in security since using Intercept X Endpoint, which protects me effectively. Intercept X Endpoint positively impacts my organization by protecting me from viruses and attacks, thus preventing loss of productivity.

Intercept X Endpoint offers multiple features, including the Threat Analysis Center, remote run ransomware protection, and CryptoGuard. I enable the policies for CryptoGuard and ransomware protection features in Intercept X Endpoint to ensure our endpoints are protected. If I want to block any types of peripherals from working in my environment, I can simply block that in peripheral control.

Intercept X Endpoint is currently working well, and potential improvements could include following the best practice threat analyst data and enabling SSL/TLS encryption. It would be beneficial if Sophos could add on-prem support to enhance security from the website.

I have been using Intercept X Endpoint for the last two years.

Intercept X Endpoint is stable.

Intercept X Endpoint's scalability is good; if I currently have 50 computers and need to increase by 10 more, I can simply increase my licensing.

Customer support for Intercept X Endpoint is very good, which is why I chose it over CrowdStrike.

Positive

I was using Trend Micro earlier, but I switched because it had no quick support compared to the quick support from Sophos.

The pricing cost is a little bit more, but it is acceptable due to the many features, and the setup costs and licensing for Sophos Intercept X Endpoint are good.

I initially evaluated CrowdStrike before deciding on Intercept X Endpoint.

I rate Intercept X Endpoint a 10 out of 10 because it is working very fine for my environment and has prevented loss of productivity. I choose 10 out of 10 because Intercept X Endpoint protects my environment well, featuring web control, peripheral control, Threat Analysis Center, application control, and DLP alongside being accessible from cloud services. I advise others looking into using Intercept X Endpoint to choose Sophos for a cloud solution due to its AI and behavior-based detection capabilities. I believe Intercept X Endpoint is the best EDR solution, and I would always recommend it to customers because it is very effective. My overall review rating for Intercept X Endpoint is 10 out of 10.

My main use case for Intercept X Endpoint is to prevent outside malware. Intercept X Endpoint has multiple features such as threat protection, which prevent my systems and the EDR. With the help of Intercept X, we can also block peripheral control such as web control and application control as well as DLP, which helps to prevent and secure our organization from outside attacks and attackers.

The best features Intercept X Endpoint offers in my experience include the threat protection policy, which is the best feature. The protection policy provides multiple capabilities in live scanning such as CryptoGuard prevention, so we can secure our network and our organization.

One more feature I want to mention is Live Response in the threat policy. If any malware has been detected on any system, I can easily take remote access from Intercept X and delete the particular file or folder from the end user machine.

Intercept X Endpoint has positively impacted my organization because I am the administrator of our organization's Sophos Intercept X. I can see multiple logs in my console that prevent multiple malware, including any PUA attacks, any Trojan attacks, as well as scanning that prevents attackers.

Intercept X Endpoint can be improved in several ways. Currently, it is only available on the cloud, and having it available as an on-premises solution would be helpful for our organization as well as others.

I have noticed that there is no licensing for the Linux endpoint machine, which means we have to install the server endpoint agent on the Linux machine, making it costly for our organization.

I have been using Intercept X Endpoint for the past two years.

Intercept X Endpoint is stable in my experience.

Intercept X Endpoint's scalability meets my needs. We currently have fifty endpoint licenses, and in the future, we can scale. The customer support is scalable because if we take licenses for fifty machines and later purchase one hundred fifty more, we can increase our licensing with the support team.

My experience with customer support has been very good for Sophos. Whenever I need support, I can easily log the call in the queue of Sophos support. I rate the customer support as excellent because it has great support from Sophos.

I previously used Trend Micro before Intercept X Endpoint, and I switched because Trend Micro did not have great support, unlike Sophos, which has excellent support.

I have seen a return on investment with Intercept X Endpoint. With the help of Sophos Intercept X, we can save our time.

I evaluated other options before choosing Intercept X Endpoint. I took the demo and POC for CrowdStrike.

My advice to others looking into using Intercept X Endpoint is to consider using Sophos because it has multiple features that prevent outside threats. In my opinion, no other OEM can defeat the price range of Sophos EDR.

Intercept X Endpoint is deployed in my organization using the Sophos X-Ops Cloud. The cloud provider I use for Sophos Cloud is the Sophos database.

My experience with pricing and licensing is good, but we face issues with the Linux endpoint agent solution as it becomes costly due to the need to install the server agent.

I find this interview very valuable and have no suggestions for changes in the future. I would rate this product a nine out of ten.

In my last organization, I was working with a market research company. This company I'm working with is financial, legal, and focuses on law firms in the United States. My clients' requirement is that they have to follow US compliance ensuring that nobody shares SSN numbers, credit numbers, and mobile numbers of their clients. We have implemented it in our environment, and it is implementing effectively. They are blocking the appropriate content.

The DLP is the most important feature of Intercept X Endpoint, and other than that, the application and web policy are also significant. There's another feature, which is the threat management and peripheral control. Almost all these features I love about Intercept X Endpoint, except one. It doesn't filter with the QUIC protocol web policies.

We were trying to block QUIC protocol (Q-U-I-C protocol) websites. We were unable to block these types of websites from the Sophos Central. I raised a ticket with Sophos Central last month, but they didn't provide us with the right solution. That's the only feature I'm not satisfied with on Sophos Central, Intercept X Endpoint.

For the deep learning technology of Intercept X Endpoint, the main component is the Sophos database. They have an updated database about malicious sites and any data, including DLP.

AI should be implemented in Intercept X Endpoint. While scanning the files of the server, because I have the license with both desktop system and server subscription endpoints license, it consumes more RAM than the desktop. During daily scanning of files, if my file server is present, it consumes more RAM. Almost 60% of RAM has been consumed from the last week by Sophos.

There should be a profile where I can see what files Sophos is scanning when I notice in my Task Manager that Sophos is taking more than 15 to 16 GB of memory. This feature would allow me to check from the module if it is periodically or randomly scanning one folder regularly on a daily basis, so I can exclude that folder from Sophos. This would help minimize memory utilization.

I have been working with Intercept X Endpoint for the last five to six years.

I find the management console for Intercept X Endpoint very easily manageable. From my personal experience last year, which is not related to Intercept X Endpoint but to Sophos, we were using the Sophos firewall. This year we upgraded to another firewall, which is not Sophos. My decision was incorrect, as we should have upgraded with Sophos.

The anti-exploit technology within Intercept X Endpoint is excellent. Whenever we try to download any files related to ManageEngine and other third-party applications which are freeware or open source, it sometimes locks down or blocks those applications.

Based on my experience with Intercept X Endpoint, I have recommended it to two to three friends for their organizations, and they have implemented it.

On a scale of one to ten, I rate Intercept X Endpoint an eight out of ten.

Many customers want web filtering and content filtering features for Intercept X Endpoint. They also want MDM features such as USB blocking and Wi-Fi blocking. Fewer customers want MDR features, including 24/7 SOC.

Sophos provides many tools including XG Firewall, Intercept X Endpoint, and Network Access Control, and I work with XG.

Intercept X Endpoint covers these features extensively. Sophos has many more features than other antivirus and endpoint products.

According to my knowledge, Intercept X Endpoint is the only endpoint security product that provides content filtering and application controls. I have never seen that feature in other endpoint products. Most endpoint products focus on endpoint protection, threat protection, and malware protection. They only focus on that side and do not focus on content filtering and URL filtering.

There is a licensing issue with Intercept X Endpoint. Their licenses are user-based. Most of our customers use per device licenses, and they need per device licenses because they use one PC for multiple accounts. This creates a problem.

There was one customer who complained about the slowness of PCs using Intercept X Endpoint. They use minor performance PCs, which causes their PCs to become slow.

I have been working with Intercept X Endpoint for more than three years.

I work with Sophos and Kerio Control. We are resellers of Sophos.

The RAM, SSD, and other system features need to be upgraded for Intercept X Endpoint. The hard disk and other features need to be upgraded in those PCs.

On a scale of 1-10, this solution rates between 6 and 8.

Neutral

Deploying Intercept X Endpoint involves providing implementation for my customers and deployment services.

The effectiveness of Intercept X Endpoint's deep learning technology in threat detection helps my team and my customers through automated incident response features. In future updates of Intercept X Endpoint, I would like to see additional features. I wanted to ask about the anti-ransomware capabilities with Intercept X Endpoint, specifically how effective they are and how they help organizations manage threats.

From my perspective, what needs to be improved in Intercept X Endpoint are the weak points of this solution and what needs to be eliminated or enhanced. I do not use the root cause analysis feature with Intercept X Endpoint very much.

I have been using Trend Micro Web Security for more than three years.

I have been using Trend Micro Web Security because I moved to different system integrators and different system integrators use different solutions. Looking back to 2023, I moved to other solutions.

Providing the root cause analysis is done by request, and if it is asked, then it is easier for us to extract it from there. However, as mentioned, most of the time it is not being asked in our organization.

Deploying Intercept X Endpoint involves providing implementation for my customers and deployment services, which may require one hour, a couple of hours, or perhaps even a few weeks if it is a larger enterprise.

Intercept X Endpoint has some impact on the budget. It is quite costly when measuring Intercept X Endpoint's protective capabilities against zero-day attacks.

I am familiar with Intercept X Endpoint from Sophos, and I am currently using Sophos.

I am familiar with Intercept X Endpoint from Sophos. Approximately how much time Intercept X Endpoint implementation takes depends on the scope, ranging from a few hours to a couple of days. My review rating for this product is 5 out of 5.

We use Intercept X Endpoint because it has proved stable. We also have a Sophos firewall and Sophos server.

Intercept X Endpoint has been stable, and I appreciate the centralized management and the reporting feature. The Heartbeat is another valuable feature of Intercept X Endpoint.

I would inquire why it is not sold directly to end users.

I have been using Intercept X Endpoint since 2018.

I rate the stability of Intercept X Endpoint as eight out of ten.

I rate the scalability as eight out of ten.

Technical support from Sophos is rated as nine out of ten, which represents high quality.

Positive

Before Intercept X Endpoint, we used McAfee and Kaspersky. We switched to Sophos because it provided a unified solution.

The first setup is not very straightforward and requires a lot of expertise.

The solution is cost-effective.

The pricing of Intercept X Endpoint is a bit high.

Based on my experience, I would recommend Intercept X Endpoint to other people.

I'd rate the solution eight out of ten.

We mainly use Intercept X Endpoint for endpoint security, ransomware, virus protection, and server security.

The most effective features of Intercept X Endpoint for threat prevention are ransomware protection, miscellaneous behavior detection, and network threat protection. We are also using Sophos' next-generation firewall. That device and endpoint security are syncing each other with our users.

The endpoint security and firewall know and understand each other, and they understand what kind of package is coming and what kind of package is going through. Hence, the solution's protection is fabulous.

Since Intercept X Endpoint is a process-consuming solution, the older machines or computers cannot handle it. Intercept X Endpoint is a very heavy solution that consumes a lot of RAM and should be made lighter.

I have been using Intercept X Endpoint for three years.

There are no glitches because the client automatically receives all the updates. The protection process is slowed down in case of a network issue. It takes more RAM and a processor to check all the files. There are no issues if there is internet and connectivity with the network.

I rate the solution a six or seven out of ten for stability.

More than 3,000 users are using the solution in our organization.

I rate the solution an eight out of ten for scalability.

The initial setup of the solution is very easy.

The solution’s pricing is high.

Intercept X Endpoint is deployed on the cloud in our organization. Previously, we had two ransomware attacks when we were using Kaspersky as an endpoint security. We didn't face any ransomware attacks after using Intercept X Endpoint for endpoint security.

Intercept X Endpoint has simplified our malware detection. Since we have already implemented the policies in the cloud, all the malware is automatically detected. The solution also detects and removes new malware that can also come from the cloud AI engine.

Integrating Intercept X Endpoint with our current security infrastructure was very easy. In my opinion, Sophos is a better solution because we are using Sophos endpoint security and network security. These two things sync with each other and monitor the packets and network traffic. No other vendor has simultaneous devices to check everything. I would recommend the solution to other users.

Overall, I rate the solution an eight out of ten.

We've been selling Intercept X Endpoint for eight years now. It's best suited for customers already using Sophos Firewall or considering one. Deploying both solutions offers synchronized security, where the firewall and endpoint communicate to enhance security posture. If an endpoint is attacked, it sends a signal to the firewall to isolate it until it's clean. This setup is especially helpful for users lacking security expertise. We've deployed this successfully for over fifty customers, and it's proven to be a great product.

I highly recommend Intercept X Endpoint for real-world incident response scenarios. It's a top-performing product recognized by industry leaders like Gartner and Forrester. Sophos has a strong global presence and market share and offers Managed Detection and Response services for customers who lack the budget or infrastructure to implement it themselves including a 24/7 operations team to help prevent incidents effectively.

The Managed Detection and Response service provided by Intercept X Endpoint is highly valuable. With a team of 600-700 individuals monitoring systems, they swiftly respond to attacks, either informing us to isolate or directly removing threats. This full MDR service is especially recommended for sectors like finance, where data security is critical. The deep learning technology within Intercept X Endpoint enhances our security posture by analyzing behaviors and algorithms to differentiate between legitimate users and threats, effectively preventing attacks on our network infrastructure.

I recommend that Intercept X Endpoint should include a patch assessment feature. Various vendors offer virtual patching solutions, which could be a game-changer, especially for the financial sector where frequent service restarts are challenging. These solutions allow patching servers without the need for restarts. Incorporating these features into Intercept X Endpoint would enhance its effectiveness in securing endpoints and servers.

We haev been working with Intercept X Endpoint since 2016. 

Intercept X Endpoint is a highly stable product.

It's scalable to meet varying needs. We've deployed it for over fifty customers.

In terms of scalability, I would rate it 9 out of 10.

The technical support provided by Intercept X Endpoint is excellent. They offer prompt assistance whenever needed. 

Implementing Intercept X Endpoint is straightforward and doesn't require advanced technical knowledge. In terms of ease of deployment and management, I would rate it 9 out of 10, as it's very convenient and straightforward to deploy.Deployment can be done easily through the cloud console by downloading and installing the agent. 

Intercept X Endpoint has had a positive impact on our system.

Customers need to pay for a license for Intercept X Endpoint based on the number of users and servers they have. The pricing is considered normal and not overly expensive.

I rate Intercept X Endpoint a 9 out of 10. My advice for those starting to use it is to evaluate the product thoroughly; it offers great value for its price and features. As for additional features, I would like to see improved patch management and virtual patching capabilities in future releases.