There are multiple use cases, and a few examples would be its use in the education, banking, or financial sectors. There are so many other locations and sectors where they deploy this solution.
Head of Operations at a computer software company with 1-10 employees
A solution that provides a balance of stability and scalability to its users
Pros and Cons
- "Stability-wise, I rate this solution a ten out of ten...Scalability-wise, I rate this solution a ten out of ten."
- "The solution's technical support for India needs to be improved."
What is our primary use case?
What is most valuable?
One of the features of Sophos UTM that I find valuable is its user authentication functionality.
What needs improvement?
In Sophos UTM, there is room for improvement in certain areas. For instance, I believe that its feature known as Synchronized Security could be enhanced. The solution's technical support for India needs to be improved.
I will need to think about the additional features the solution needs to include in its next release.
For how long have I used the solution?
I have been using Sophos UTM for almost ten years now. It is a good solution. My company is a partner and an integrator of Sophos UTM.
Buyer's Guide
Sophos UTM
December 2025
Learn what your peers think about Sophos UTM. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,425 professionals have used our research since 2012.
What do I think about the stability of the solution?
Stability-wise, I rate this solution a ten out of ten.
What do I think about the scalability of the solution?
Scalability-wise, I rate this solution a ten out of ten. If I talk about the solution's suitability, then it is suitable for enterprises.
How are customer service and support?
Dealing with technical support can be time-consuming when communicating over the phone. I am unable to provide a rating for the technical support team. My suggestion to others would be that they provide the country location of the toll-free number in the solution. Although a toll-free number has been provided for India, the people in India are good. Compared to the UK, there may be issues with understanding and timing, which could lead to many problems.
Which solution did I use previously and why did I switch?
We use Sophos Access Point, Sophos Firewall, Sophos Switches, Sophos MDR, and Sophos XDR. We have been using Sophos MDR for three years.
How was the initial setup?
Whether the initial setup is straightforward or complex depends on the number of users or people to whom the solution is given.
What's my experience with pricing, setup cost, and licensing?
Compared to the current market offerings, like FortiGate or SonicWall, Sophos offers its solution at a good price.
Which other solutions did I evaluate?
I compared Sophos UTM with Fortinet and found that Fortinet's EPP, ATP, and hardware are good. Sophos UTM has also improved its hardware by updating its dual-core processors with a second processor that uses advanced technology, whereas previously, the hardware was handled by a single processor. However, we are still facing some problems with Multicast User Authentication.
What other advice do I have?
I recommend Sophos UTM, Sophos Access Points, Sophos Endpoint, and Sophos Switches to other users. Overall, I rate this solution a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Very strong firewall with a streamlined interface that treats everything like an object
Pros and Cons
- "The firewall itself is very strong and provides great security."
- "The solution needs better integration with captive portals and XGs."
What is our primary use case?
Our company is a partner and reseller of the solution. We lease, sell, and license boxes for our clients. Use cases are rather unique and not uniform.
We provide support for a few SMBs around the country.
Some customers are heavy users, with involved configurations, and the setup may include high availability configured with two boxes.
Others use it as just a gateway between their infrastructure and the internet with very simple configurations that don't include web filtering.
Active directory integration domain is used for some, but not all customers. Common items include DNATs and SSL VPN. Most customers use VPNs, and site-to-site connections (REDs or IPsec).
We also use virtualized UTMs for LABs.
What is most valuable?
The firewall itself is very strong and provides great security for the internet. Some clients don't use any other special feature but all customers depend on the firewall as a secure gateway.
A lot of thinking went into the user experience because the UTM interface is streamlined, good, and feels like a web application. It does have hiccups here and there but effectively treats everything as an object. You can quickly see where objects are being used or referred to and change them.
What needs improvement?
The UTMs are end-of-life so the web interface is not top-notch and needs more speed. There is still support for the UTMs so they are the best we have right now.
The solution needs better captive portals and they could have faster UIs.
An improvement to the transparent proxy would help. A user should be able to open a webpage and be redirected to the captive portal like with WIFI or XGs. From there, the user should be able to log in with a username and password to gain internet access. Many clients migrate to XG due to this missing feature.
For how long have I used the solution?
I have been actively using the solution for a some time.
What do I think about the stability of the solution?
The stability is pretty good and better than XG. We don't have any issues directly related to the solution.
Stability is rated a ten out of ten.
What do I think about the scalability of the solution?
The solution scales pretty well. Even with a heavy load, the solution shows no issues.
Scalability is rated an eight out of ten.
How are customer service and support?
Technical support is not stellar. We have some good experiences and some not so good experiences. We do not have a lot of support requests for the solution.
Support is rated a seven out of ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
The setup is straightforward.
What about the implementation team?
We implement the solution for customers. We have a specialist, an architect, and four analysts who handle implementations and maintenance.
What other advice do I have?
I recommend you complete the solution's training because it is pretty good. Rely on the documentation and any tech training available.
I rate the solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Sophos UTM
December 2025
Learn what your peers think about Sophos UTM. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,425 professionals have used our research since 2012.
Information Technology Network Administrator at a outsourcing company with 1,001-5,000 employees
Competitively priced option with a good application center for sandboxing
Pros and Cons
- "The solution's sandboxing, application center, and database engine are good."
- "The reporting system needs to allow for customizations because many reports do not include details that we expect."
What is our primary use case?
Our company uses the solution as an edge firewall.
We have 500 users and the solution is managed by five technicians.
What is most valuable?
The solution's sandboxing, application center, and database engine are good.
The endpoint device detection tool integrates very well with Edge devices.
What needs improvement?
The reporting system needs to allow for customizations because many reports do not include details that we expect.
It would be beneficial to have a security fabric feature like FortiGate that integrates with UTM devices and reports to expose issues.
For how long have I used the solution?
I have been using the solution for four years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is very easy to scale up and has no limitations.
How are customer service and support?
Technical support is very knowledgeable and responds immediately to issues.
I rate technical support a ten out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is easy and I rate it an eight out of ten.
What about the implementation team?
We implemented the solution in-house and it does not require much maintenance at all. Three technicians handle any maintenance needed.
What's my experience with pricing, setup cost, and licensing?
The solution's pricing is based on a licensing model and is competitive.
The solution was 20,000 Rial about five years ago.
I rate pricing a ten out of ten.
Which other solutions did I evaluate?
Per market analysis, the solution is in the top three with FortiGate and Palo Alto.
All three solutions are comparable so the best fit depends on your engines, environment, and requirements.
What other advice do I have?
I rate the solution an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Administrator at a comms service provider with 1,001-5,000 employees
User-friendly with lots of online documentation and the ability to expand
Pros and Cons
- "The solution is stable."
- "The support could be better."
What is our primary use case?
The solution is used mainly for user management and access control.
What is most valuable?
It's a little bit easier to use. It's user-friendly, and then there's a lot of documentation for it online, so it's easy to manage without necessarily dealing with a big learning curve. It is easy to understand, basically.
If you need to troubleshoot, everything is basically on Google.
The solution is stable.
It's a scalable product.
What needs improvement?
The support could be better.
They need to improve their email protection. Their email protection is horrible. They have an email protection license that is paid for. However, they need to improve on email protection capabilities.
They need to have proper reporting. What they offer no is weird. I need to get another application to give me a clear diagram of my network. This should instead come directly from Sophos.
For how long have I used the solution?
I've been using the solution for two years now.
What do I think about the stability of the solution?
The product is stable and reliable. There are no bugs or glitches. It doesn't crash or freeze.
It is redundant enough. I don't have any issues with it.
What do I think about the scalability of the solution?
The solution scales well.
We have about 500 people on the product right now. We also have 100 users on the VPN.
How are customer service and support?
It is better to Google rather than use technical support.
They are slow to respond and then the response doesn't exactly give you what you want.
I understand they can't give you a solution to something that you'd expect them to. They try to give you something. You're going to go to Google and find the information on Google faster and easier anyway.
Which solution did I use previously and why did I switch?
We worked with Cisco mainly in the past. When we went to renew with Cisco, we found the pricing to be quite high. We're happy now with Sophos. We have no interest in switching to anything else.
How was the initial setup?
The initial setup is very easy. The interface makes it simple.
I'm not sure how long the deployment took exactly.
We have four people that are able to handle maintenance.
What about the implementation team?
I was able to set it up myself, however, you do really need to know it or work with someone who does.
What's my experience with pricing, setup cost, and licensing?
The cost could be considered reasonable based on other plans. However, when I was looking at when you renew our licenses, the pricing is a little bit weird. When you renew your license, the licenses are at the cost of buying a new device in your plan. I haven't renewed yet. However, I would need to figure out that aspect.
I can't recall the exact costs of the product as it's been a while since we originally licensed it.
Compared to Juniper, the difference is the pricing. It's more affordable than Cisco or Juniper, actually.
What other advice do I have?
I'm a user and a consultant.
I'd advise potential new users that they should let someone that knows how to do it set it up fast. You should work with someone that knows how to do it.
I'd rate it an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Head Of Network & Technical Support at a financial services firm with 201-500 employees
Straightforward, easy to manage, and simple to install
Pros and Cons
- "The solution is scalable."
- "They could use more SSL VPN support."
What is our primary use case?
We primarily use the solution for security purposes.
We use it as a WAF with an application firewall.
We can use it for VPN SSL as a remote-access VPN. We have used it on the internet for applications and web servers.
What is most valuable?
The product is easy to manage and easy to install. It's straightforward to manage.
It is stable.
The solution is scalable.
What needs improvement?
They could use more SSL VPN support.
We'd like the setup to be even easier, if possible.
For how long have I used the solution?
I've been using the solution for four to five years.
What do I think about the stability of the solution?
It is stable and reliable. The performance is good. There aren't bugs or glitches. It doesn't crash.
What do I think about the scalability of the solution?
The product can scale well.
We have about 500 users on the solution. We don't have plans to increase usage at this time.
How are customer service and support?
We have three years of support services.
Which solution did I use previously and why did I switch?
We have the Juniper SRX firewall, for local zones, process zones, and server zones.
How was the initial setup?
The initial setup is very straightforward. It's not complex at all.
It takes about two hours to set up.
We have three to five engineers that are able to handle deployment and maintenance tasks.
What about the implementation team?
We handled the implementation ourselves.
What's my experience with pricing, setup cost, and licensing?
We have a three-year license and have support services as well.
What other advice do I have?
I'd recommend the solution to others.
I would rate it nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Seamless scalability, robust, and flexible
Pros and Cons
- "The stability of Sophos UTM is very good. The solution has been stable since Sophos took over Cyberoam which was the original company providing this solution."
- "The initial setup was straightforward. The full deployment takes approximately two days which could be simplified to reduce the time. The major part of the process is the configuration and the policy setup."
What is our primary use case?
We use Sophos UTM as a firewall and access control. The firewall has web filtering and anti-fishing tools. We synced Sophos UTM with our Microsoft Windows Active Directory.
What is most valuable?
Sophos UTM is a robust solution and it provides flexibility.
For how long have I used the solution?
I have been using Sophos UTM for approximately five years.
What do I think about the stability of the solution?
The stability of Sophos UTM is very good. The solution has been stable since Sophos took over Cyberoam which was the original company providing this solution.
What do I think about the scalability of the solution?
The scalability of Sophos UTM is seamless if you have the right UTM device. However, for every device there are limitations, we have 150 users on it at this time.
How are customer service and support?
The support from Sophos is very helpful. We raise a support ticket on the portal and we receive a response.
How was the initial setup?
The initial setup was straightforward. The full deployment takes approximately two days which could be simplified to reduce the time. The major part of the process is the configuration and the policy setup.
What about the implementation team?
We did the implementation of Sophos UTM using our internal team. We have certified engineers that can handle the process. If there are any issues we can reach out to the support of Sophos.
We have two people that handle the maintenance for the solutions.
What's my experience with pricing, setup cost, and licensing?
There is a license for the device and for the software. We pay annually for the solution and the cost is competitive.
What other advice do I have?
Sophos has an aggressive 360-degree security deployment. They are securing your mobile phone and data, both data security and also device security. They're on the cloud too, if you look at the company they really working hard on a 360 approach for security. The coverages they offer makes them robust. You can always start from somewhere, and then you scale up. You can start with their device management solution, or with their firewall, and then you begin to scale up with other features seamlessly. The flexibility they provide is also very good with Sophos, I can recommend Sophos confidently.
I rate Sophos UTM a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Manager at a consultancy with 51-200 employees
Great features with easy centralized reporting and good performance
Pros and Cons
- "So far, the solution has been problem-free."
- "We'd like to see them offer their services on mobile devices like tablets. I'm not sure if that's an option or not."
What is our primary use case?
The features that we're currently using are mainly just for the endpoint protection, which is for the service and the workstations. We basically use it for the servers, the main servers, and then from there for the client, which is basically the laptops and the PCs.
How has it helped my organization?
The fact that it's not heavy on the machines has really helped. It's basically lightweight. One advantage is that we, having a cloud solution, do not require a physical machine that we have to administer on our network.
What is most valuable?
The fact that it's on the cloud means we don't have to administer it on our network or deal with a physical machine, which saves us money.
The solution has many great features.
From the console, we can start different scannings on different machines. We enjoy the centralized reporting part of it.
The initial setup is simple.
We enjoy its general stability.
The solution can scale.
So far, the solution has been problem-free.
What needs improvement?
We don't need any extra features. We only use it for the servers and the workstations. We'd like to see them offer their services on mobile devices like tablets. I'm not sure if that's an option or not.
For how long have I used the solution?
I've been using the solution for over a year now.
What do I think about the stability of the solution?
It's been very stable. In fact, we haven't had any complaints or any issues with it. There are no bugs or glitches. It doesn't crash or freeze. The performance is great.
What do I think about the scalability of the solution?
The scalability is quite good.
Right now, we have 40 users.
We will definitely scale in the future. As we get new employees, we just request additional licenses.
How are customer service and support?
I've never had any issues.
Which solution did I use previously and why did I switch?
I also use FortiGate.
How was the initial setup?
The implementation process was straightforward. What basically happens is that you just have to pick that certain client from the console and then you just install it on the machines. From there, of course, you handle connectivity after that. It's pretty straightforward.
A full deployment on one machine took less than 20 minutes. The thing is, if you have fast internet, it can even be much less.
Maintenance is very simple. Support is inbuilt from the manufacturer's side. Therefore, internally, if there are any issues on the client machine, you just reinstall it. There isn't much to do really, in terms of maintenance, except maybe the licenses. It's hosted on the cloud and updates are automatic, and are available from the portal.
What about the implementation team?
We did not need a reseller or consultant's assistance. It was all handled internally.
What was our ROI?
I haven't really explored ROI. I only have worked with it for slightly over a year. Maybe we need to start looking at it.
That said, so far, we are protected and we haven't been hit so far. We're getting the returns from it in that sense.
What's my experience with pricing, setup cost, and licensing?
Having a cloud option is a real cost saving.
In terms of licensing, we pay on yearly basis. From there, what happens, in the last month, we request a quotation for renewal, and then from there we just pay through the local reseller.
We're thinking of maybe dealing with the supplier, the manufacturer, directly, however, right now, we're still using the local supplier for licensing and payments.
What other advice do I have?
We are on the latest version of the solution.
We are customers.
I would rate the solution at a nine out of ten. We are very happy with it. I would recommend it to others.
I'd advise new users that, if they are going to go with the cloud option, that issues related to maintenance is actually handled within the cloud. The rollout is pretty smooth.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Consultant at a real estate/law firm with 201-500 employees
Transparent solution that is easy to use
Pros and Cons
- "Sophos integrates seamlessly, and we don't even feel it is running in the background."
- "The virus updates will always depend on new viruses that are discovered. Maybe they can send a notification or a reminder for update time."
What is our primary use case?
It is used to protect the servers. It is a very transparent solution.
What is most valuable?
Sophos integrates seamlessly and we don't even feel it is running in the background.
What needs improvement?
I found just one instance of a virus on somebody's email, and Sophos cut it off immediately. Then the admin said, "Oh, this is a virus. That's a new one." They found out that I hadn't updated some virus information.
The virus updates will always depend on new viruses that are discovered. Maybe they can send a notification or a reminder for update time.
For how long have I used the solution?
We have been using Sophos UTM for two years.
What do I think about the stability of the solution?
It is absolutely stable.
What do I think about the scalability of the solution?
We have over 200 users in my company. We are planning on increasing the usage. We never faced any issue with scalability.
How are customer service and support?
We have local support and go through our company's tech support.
How was the initial setup?
The initial setup is straightforward. It was implemented within five minutes.
What about the implementation team?
The central admin team deployed the solution. There were around three to four members of the team.
What other advice do I have?
It is easy to install and transparent solution. I would recommend using the solution. I would rate it a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Sophos UTM Report and get advice and tips from experienced pros
sharing their opinions.
Updated: December 2025
Product Categories
Unified Threat Management (UTM)Popular Comparisons
Fortinet FortiGate
WatchGuard Firebox
Cisco Meraki MX
Check Point Quantum Force (NGFW)
Juniper SRX Series Firewall
KerioControl
Check Point CloudGuard Network Security
Untangle NG Firewall
Stormshield Network Security
Zyxel Unified Security Gateway
Huawei NGFW
Juniper vSRX
Sophos Cyberoam UTM
LANCOM R&S Unified Firewalls
Seqrite UTM
Buyer's Guide
Download our free Sophos UTM Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which would you recommend to your boss, Fortinet FortiGate or Sophos UTM?
- What Is The Biggest Difference Between Sophos UTM and Sophos XG?
- What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
- What Is The Biggest Difference Between Sophos and pfSense?
- Who provides a better antivirus solution: Bitdefender or Sophos?
- What are the biggest differences between Meraki and Sophos? Which one is good for security and SD-WAN?
- What is the biggest difference between Fortinet FortiGate and Sophos UTM?
- When evaluating Unified Threat Management (UTM), what aspect do you think is the most important to look for?
- What UTM solution do you recommend?
- Why is a UTM solution important?

















