Sophos XGS firewalls are the latest generation of next-generation firewalls from Sophos, designed to replace the XG series.
Possible improvements:
• SD-WAN functionality: Sophos XGS firewalls support SD-WAN features such as dynamic path selection, application prioritization, and WAN link balancinghttps://www.peerspot.com However, they could benefit from further improvement, particularly in terms of incorporating optimization techniques that are not typically found in traditional firewalls, such as WAN acceleration, caching, compression, and deduplicationhttps://news.sophos.com/en-us/2023/02/16/firewall-performance-for-the-campus-edge-with-the-new-xgs-7500-and-xgs-8500/. These techniques could enhance the performance and efficiency of SD-WAN connections, especially for bandwidth-intensive and latency-sensitive applications.
• Cloud integration: Sophos XGS firewalls can be deployed in hybrid cloud environments, and they support cloud-based management and reporting through the Sophos Central platformhttps://www.corporatearmor.com However, they could improve their integration with cloud services and platforms, such as AWS, Azure, Google Cloud, and Office 365. For example, they could offer more granular and consistent visibility and control over cloud applications and data, as well as more seamless and secure connectivity between on-premises and cloud networks.
• User interface and experience: Sophos XGS firewalls have a user-friendly and intuitive web-based interface, which allows for easy configuration and monitoring of the firewall settings and policies. However, they could improve their user interface and experience, by offering more customization and personalization options, such as dashboards, widgets, themes, and notifications. They could also provide more guidance and assistance to users, such as tutorials, tips, and feedback, to help them optimize their firewall performance and security.
IT Security Engineer at a security firm with 51-200 employees
Reseller
Top 10
2023-12-11T15:34:00Z
Dec 11, 2023
Sophos might discontinue the UTM features, as they've been promoting the newer XGS Series appliances. While the XGS offers great features like detailed logging and audit reports, it currently lacks essential functions in the UTM. For example, the XGS doesn't provide basic audit tracking for configuration changes, which is crucial for understanding who made modifications, what was changed, and when. Sophos claims they'll add this functionality later. Its absence significantly hinders the usability of the new firewall. Additionally, while XGS offers decent day-to-day management, there's room for improvement. Many users transitioning from UTM find the XGS interface less intuitive, causing a learning curve.
Information Technology Department at Sunflag Iron and Steel Co Ltd
Real User
Top 5
2023-09-05T07:35:49Z
Sep 5, 2023
The renewal process for this box is too frequent. We purchased it five years ago, and it's expiring in 2025. So, I feel they expire it too quickly. In future releases, this solution could have more graphical elements on the dashboard to make it easier to understand. While there are graphics and a good dashboard, there's always room for improvement.
Manager (Network Design) at Comstar - Information Systems Associates Ltd.
Real User
Top 5
2022-10-31T10:31:10Z
Oct 31, 2022
Some firewall names like Palo Alto and FortiGate are very famous for security. People find them very secure. While Sophos is fairly secure, they aren't known for their security, and it's not an obvious selling point. Unfortunately, on Gartner, Magic Quadrant, and Forrester, Sophos doesn't have a good presence. They need to get better at marketing their abilities and expanding what they can do. I would like to see them in third-party evaluation reports like Gartner, Magic Quadrant, or Forrester to make it easier for us to show our customers that Sophos is a leader in the market. It will be easier for us to sell them. Our market depends on what products are currently in Gartner and Forrester, and these platforms.
IT Infrastructure Architect at Clermont Auvergne Metropole
Real User
Top 20
2022-10-28T10:34:44Z
Oct 28, 2022
The solution could have a bit more functionality. We'd like to have a log viewer. We'd like to have visibility to see what traffic has crossed the firewall. They need more local support and different language options available for when they need help.
We've had issues with support. If they improved on the support part, that would be great. They should customers who are facing issues with their product reviews; they found bots in it. If they can do their proper research and use the user analysis and testing, that would greatly help the clients. The software release has been giving us problems. Other firewalls provide better reporting. We need admin and activity logs to be populated for the firewall.
Having previously worked with the Astaro Security Gateway platform (now called Sophos UTM), I can attest that the configuration and dashboard for this older platform was easier to manage than that of both Sophos XG and XGS. If it were up to me, I would prefer to go back to the older SG dashboard. I am hoping that in future, the dashboard for Sophos XGS will be simpler and easier.
The solution could improve inspection processes and troubleshooting for VPNs because this area is very weak. Improvement in VNET protection is also needed.
There are issues with some designs being able to work on high availability. We design our architecture in three tiers on the network. There is the core tier, the distribution tier, and the access tier. We haven't succeeded in our attempts to configure this and haven't been able to find documentation on how to go about it. Sophos has a single sign-on, but it requires configuration to communicate with the firewall and that is lacking. The configuration on Sophos is well described, but the configuration on the Windows system is not well described in relation to the Sophos knowledge base. It took a lot of my own research to figure out what was wrong. I'm a cyber security guy so it's very difficult for me to implement the solution.
I recommend Sophos increase the user capacity of the firewall by 1.5 times. For example, say the firewall can accommodate 1,000 users now, then it should handle a load of 1,500 users.
I think the earlier SG version was easier to configure and manage. The XG is a little different and somewhat more complicated. I'd like it to be easier to manage and configure.
Presales Consultant Information Security Services at Team Computers
Consultant
Top 20
2022-04-30T19:36:00Z
Apr 30, 2022
Sophos XGS needs improvement with the threshold values. Other solutions have the capacity to handle more users. I would like to see virtualization security included in the next release.
In the new release 19, there should be the implementation of a cloud service that you can use to set up the IPSec tunnels, and the SD-WAN from the WAN dashboard, and then you can push that configuration out to every firewall that you have.
Authentication with Azure AD needs improvement. It would be better if it could work directly without using local AD server. For comparison Fortinet FortiGate allows to use SAML authentication with Azure AD and does not require any local server. It is currently unknown to me, if or when it will be implemented on Sophos. Local DHCP service also needs improvement. Windows DHCP service offers more functionality and is more flexible and easier to use. SFOS v18.5.3 added DHCP option functionality in the GUI - which previously worked only from CLI.
Sophos XGS is a comprehensive network security solution designed to protect organizations from advanced threats. It combines next-generation firewall capabilities with advanced threat protection, web filtering, and application control.
XGS has powerful deep learning technology and can detect and block even the most sophisticated malware and ransomware attacks. It also offers granular control over web access, allowing organizations to enforce policies and prevent access to malicious...
Sophos XGS firewalls are the latest generation of next-generation firewalls from Sophos, designed to replace the XG series.
Possible improvements:
• SD-WAN functionality: Sophos XGS firewalls support SD-WAN features such as dynamic path selection, application prioritization, and WAN link balancinghttps://www.peerspot.com However, they could benefit from further improvement, particularly in terms of incorporating optimization techniques that are not typically found in traditional firewalls, such as WAN acceleration, caching, compression, and deduplicationhttps://news.sophos.com/en-us/2023/02/16/firewall-performance-for-the-campus-edge-with-the-new-xgs-7500-and-xgs-8500/. These techniques could enhance the performance and efficiency of SD-WAN connections, especially for bandwidth-intensive and latency-sensitive applications.
• Cloud integration: Sophos XGS firewalls can be deployed in hybrid cloud environments, and they support cloud-based management and reporting through the Sophos Central platformhttps://www.corporatearmor.com However, they could improve their integration with cloud services and platforms, such as AWS, Azure, Google Cloud, and Office 365. For example, they could offer more granular and consistent visibility and control over cloud applications and data, as well as more seamless and secure connectivity between on-premises and cloud networks.
• User interface and experience: Sophos XGS firewalls have a user-friendly and intuitive web-based interface, which allows for easy configuration and monitoring of the firewall settings and policies. However, they could improve their user interface and experience, by offering more customization and personalization options, such as dashboards, widgets, themes, and notifications. They could also provide more guidance and assistance to users, such as tutorials, tips, and feedback, to help them optimize their firewall performance and security.
The solution is expensive.
The speed of report generation could be improved.
Sophos might discontinue the UTM features, as they've been promoting the newer XGS Series appliances. While the XGS offers great features like detailed logging and audit reports, it currently lacks essential functions in the UTM. For example, the XGS doesn't provide basic audit tracking for configuration changes, which is crucial for understanding who made modifications, what was changed, and when. Sophos claims they'll add this functionality later. Its absence significantly hinders the usability of the new firewall. Additionally, while XGS offers decent day-to-day management, there's room for improvement. Many users transitioning from UTM find the XGS interface less intuitive, causing a learning curve.
The renewal process for this box is too frequent. We purchased it five years ago, and it's expiring in 2025. So, I feel they expire it too quickly. In future releases, this solution could have more graphical elements on the dashboard to make it easier to understand. While there are graphics and a good dashboard, there's always room for improvement.
The solution's pricing and stability could be better.
Some firewall names like Palo Alto and FortiGate are very famous for security. People find them very secure. While Sophos is fairly secure, they aren't known for their security, and it's not an obvious selling point. Unfortunately, on Gartner, Magic Quadrant, and Forrester, Sophos doesn't have a good presence. They need to get better at marketing their abilities and expanding what they can do. I would like to see them in third-party evaluation reports like Gartner, Magic Quadrant, or Forrester to make it easier for us to show our customers that Sophos is a leader in the market. It will be easier for us to sell them. Our market depends on what products are currently in Gartner and Forrester, and these platforms.
The solution could have a bit more functionality. We'd like to have a log viewer. We'd like to have visibility to see what traffic has crossed the firewall. They need more local support and different language options available for when they need help.
We've had issues with support. If they improved on the support part, that would be great. They should customers who are facing issues with their product reviews; they found bots in it. If they can do their proper research and use the user analysis and testing, that would greatly help the clients. The software release has been giving us problems. Other firewalls provide better reporting. We need admin and activity logs to be populated for the firewall.
Having previously worked with the Astaro Security Gateway platform (now called Sophos UTM), I can attest that the configuration and dashboard for this older platform was easier to manage than that of both Sophos XG and XGS. If it were up to me, I would prefer to go back to the older SG dashboard. I am hoping that in future, the dashboard for Sophos XGS will be simpler and easier.
The reporting could always be improved upon. They need intelligent reporting, not just your simple, standard reports.
The price of Sophos XGS could improve, it is high.
The solution could improve inspection processes and troubleshooting for VPNs because this area is very weak. Improvement in VNET protection is also needed.
There are issues with some designs being able to work on high availability. We design our architecture in three tiers on the network. There is the core tier, the distribution tier, and the access tier. We haven't succeeded in our attempts to configure this and haven't been able to find documentation on how to go about it. Sophos has a single sign-on, but it requires configuration to communicate with the firewall and that is lacking. The configuration on Sophos is well described, but the configuration on the Windows system is not well described in relation to the Sophos knowledge base. It took a lot of my own research to figure out what was wrong. I'm a cyber security guy so it's very difficult for me to implement the solution.
Sophos XGS could be improved by adding a built-in hyper-converged solution.
There are some bugs relating to the product that allow VPN users to bypass the firewall.
I recommend Sophos increase the user capacity of the firewall by 1.5 times. For example, say the firewall can accommodate 1,000 users now, then it should handle a load of 1,500 users.
I think the earlier SG version was easier to configure and manage. The XG is a little different and somewhat more complicated. I'd like it to be easier to manage and configure.
Sophos XGS needs improvement with the threshold values. Other solutions have the capacity to handle more users. I would like to see virtualization security included in the next release.
Reporting could be improved. The structure could be better because most of the reports aren't detailed.
In the new release 19, there should be the implementation of a cloud service that you can use to set up the IPSec tunnels, and the SD-WAN from the WAN dashboard, and then you can push that configuration out to every firewall that you have.
Authentication with Azure AD needs improvement. It would be better if it could work directly without using local AD server. For comparison Fortinet FortiGate allows to use SAML authentication with Azure AD and does not require any local server. It is currently unknown to me, if or when it will be implemented on Sophos. Local DHCP service also needs improvement. Windows DHCP service offers more functionality and is more flexible and easier to use. SFOS v18.5.3 added DHCP option functionality in the GUI - which previously worked only from CLI.
Sophos XGS could improve by having better integration with Active Directory.