Sophos Software and Solutions

We use Sophos XG for a central firewall, with some branches making a VPN, but that's the normal deployment. Some clients use it as a proxy, but most of my clients use it as a gateway. We use Sophos to configure policies, work filters, application filters, and the SSL VPN and IPSec VPNs.

Because of the pandemic, the VPN is the most valuable feature. In Bolivia, the clients normally asked for an appliance with a web protection license or network protection and web protection license. These are the most common features demanded by our customers.

Some clients are also using the wireless solution and using XG firewall as a wireless controller. For those clients, this feature is a very important.

I used to work with Fortinet, and sometimes I see that the SD-WAN feature could be better because it's much easier in Fortinet. That area could be improved in Sophos XG as it's too complicated right now.

For example, I remember a case where the routers had to be configured by commands. It's not hard, but you have to read and investigate how to do that. The XG firewall works fine, but you have to read, and it takes some time to do it.

Sophos XG could also improve the floating area. I have more features in Fortinet, more visibility of the networking table, and the networking area. But in Sophos, you have to enter the CLA and display it. It'll also help if they offered more toll booths for VPN like Fortinet.

I've been working with Sophos XG for around five years.

I have no issues with the stability. No reboots are needed, and there hasn't been a problem with that.

The new enterprise models are scalable, and we don't have problems. I think it's fine.

I like their technical support. With Cyberoam, I remember the technical support used to work closely with us. They used to configure some features for us and help us resolve problems, but not just by email. They used to work with us and show us how to do it. I think that was nice, but in Sophos, they give us instructions and help us, but by email.

The initial setup and configuration was very easy for us. I think it's easier than the other options in the marketplace. The deployment time is relative. For example, if you're deploying for a client who has another firewall and have to integrate it, it'll take around two or three days. But if it's a new environment, you can deploy the firewall within two hours.

Normally, my clients look at Fortinet. Both have similar features, and sometimes Sophos is more expensive, or FortiGate is more expensive. It depends. But normally, I have clients that migrate from Fortinet to Sophos. They are used to working with FortiGate without a problem, but the main difference in our case is the support. Because as a company, SUPERNOVATEL, has more experience with Sophos to help our clients immediately. That makes the difference.

On a scale from one to ten, I would give Sophos XG a nine.

We primarily use the solution as a comprehensive security device.

The VPN capabilities are quite good.

The solution is very good at web and application filtering.

It's quite a comprehensive security solution.

The performance the solution offers is excellent. Compared to the older solution, and especially on the cloud, it can reach very good performance. It depends on the licenses, of course. 

The graphical user interface is excellent. 

The intrusion protection module is very useful.

You can easily connect the solution to cloud management.

The stability has been excellent.

Technical support could be improved. They aren't as responsive as they could be.

It would be ideal if we could have a more populated and detailed knowledge base. Generally, the new features must be tested before applying them to the production side. I would like to see more case studies, more application notes, and so on.

We would like to see an improvement in mail management. When passing from FG Series to XG Series, some mail features have been lost. We would like to regain them.

We've used the solution for many years - before it was even Sophos. Sophos, some years ago, was Astaro AG. Sophos acquired Astaro AG. We have at least ten years of experience with the solution.

We've found the stability to be very good. It doesn't crash or freeze. There are no glitches. The performance and reliability are excellent. 

Occasionally, we do have to do a debug, however, that's typical of all firewall solutions.

The scalability of the solution is very good overall. If a company needs to expand it, it can do so.

We have about 200 people using the solution.

The reaction times of technical support are slow. They should be more responsive. We're not completely satisfied with the way they handle it.

In the past, I've had some experience with SonicWall, Fortinet, and with a Linux solution. However, compared to other solutions, we prefer Sophos.

It's better to be certified to install in a good manner. You need to understand what you are doing. Sophos offers the chance to certify at different levels. There are commercial levels and technical levels.

The time it takes to deploy depends on the complexity of the setup and environment. It can take a few hours or a few days. It can even take a week if the architecture is very advanced.

Generally, you need to be an engineer to handle maintenance. We have three people at our office that can handle implementation and setup as well as maintenance.

You need a license to use the solution. We offer the license as a box license, or we can offer a license like an MSP, as a service provider. We often acquire the licenses and we give them to our customers as an MSP.

We are an authorized partner for Sophos.

We're using the latest version of the solution.

I'd recommend the solution, especially over, for example, Cisco. 

I'd rate the solution ten out often. It's really worked well for us.

The primary use case of this solution is to protect the perimeter, the edge of the network, as well as providing anti-virus protection. There are also RED devices that can be deployed and connect to Sophos and they go back to VPN connectivity. We've mainly worked with schools which is different to working with companies because they have particular guidelines to follow. I'm an engineer/revenue development manager and we partner with Sophos. 

In terms of hardware, I think Sophos is definitely the easiest to work with. It's very intuitive and easy to learn how to use. The reporting feature is great and they have great customer support. 

In terms of improvement, I think the UI could be faster. Sometimes the system freezes and there's a lag. It seems there were some issues with the firmware but it's not a big problem. The user interface could also be improved. It would be great if they could include a little bit more bandwidth management. If they would integrate FatPipe into their product, it would be closer to what Fortinet does.

I've been using this solution for 12 years. 

This is a very stable solution.

Sophos has different size appliances, so they're scalable regardless of whether you have 10,000 workstation nodes to any device down to the 1/10, which will provide up to 100 nodes. It's very scalable. I have implemented this mainly in K through 12 educational institutions and some other types of accounting businesses as well as in a wide variety of organizations and companies. In terms of physical maintenance it's a matter of once every six months blowing out the fans. The rest is done for you with Up2Date, which carries out all the firmware upgrades, and rolls it back if there's a problem. Once in a while, an update will get stuck and you'll have to manually push the update. 

Dealing with Sophos technical support is a very easy process, from the regional business directors all the way up to the president. They have very good people and their customer support is amazing. That's one of the big things I love about Sophos. Their customer support and the group of people that run that company are amazing people, great people. I've never seen the support on any other platform that I've seen with Sophos.

The initial setup was very straightforward. They give you an 800 number to call. The licensing portal has improved greatly over the years. So Sophos now has a new license platform which makes things a lot easier than previously and you can now buy individual licensing. 

I haven't evaluated other options but I know that Fortinet does much more in terms of protection and uses AI. They do a lot more now they have another platform that sits in the cloud and provides clients with AI, whereas Sophos only recently implemented AI. Fortinet has a much better reporting function, but Sophos has stepped up and is now providing the customer with the information they need to feel secure in the product. 

My advice would be to download the VMware and get to know the interface because running one of these devices is probably not as difficult as you'd think. If you have an onsite level one user, YouTube has online training and Sophos support will help you through it. It's a very easy device for a level one engineer to manage. My advice is to download the free VMware for 30 days and then either buy the platform or install the VMware product.

I rate this solution a 10 out of 10. 

We primarily use the solution for a firewall. We use it as a security device.

The product is very easy to use. We enjoy the ability for it to fit into our high-level security framework. 

It gives us some separation from being on Microsoft tasks. We've got multiple levels of security. We're government contractors. It's great that it's been a separate product that gives us the ability to do the security to a high level without having to resort to needing a big team.

The solution is stable. I've had very few problems with it.

We have found the solution to be scalable. 

We're always looking for the best products and the best pricing. Pricing is always a concern for us.

When they do updates, they could handle them a little bit better. We've only had one problem, however, I do prefer when updates come out a bit quicker. We do the patching and updates and different things, however, in terms of the patch and timing and the criticality of it, it could always be better.

We've been using the solution for five or more years at this point. We've used it for a while. 

The product is reliable and stable. There are no bugs or glitches. It doesn't crash or freeze. 

The product has proven to be scalable. If a company needs to expand it, it can do so.

We have 430 end-users on the product.

We're mostly happy with the technical support. It's better than Microsoft. Any issues we have may simply come down to the SLA. 

The initial setup is pretty straightforward, and, over the last six years, it's gotten simpler, especially when it comes to cloud products.  A company shouldn't have any issues with the process. 

The deployment was very quick. It does not take long. 

My team is quite small internally. I have five to seven IT staff.  I have many service providers that I outsource a lot of the day-to-day management of the infrastructure to.

Sophos assisted us with training at the outset, which we really appreciated. 

We pay annually for the licensing for the overall on-prem solution, however, we also have some Sophos access points at permanent IT sites and different things. I have different Sophos products I may pay a monthly fee for.

We're just customers and end-users.

While this deployment is on-premises, for the cloud, we use Sophos Central.

I'd rate the solution at an eight out of ten. We're pretty pleased with its protection capabilities.