Sophos Central Reviews

The solution is used to create intelligent policies and users, and to manage bandwidth. You can also use it to deploy wireless access points. I use it to deploy the access points and also control them, linking it with my active directory for authentication purposes.

The most valuable feature is that it protects my IT infrastructure from attacks.

SSID authentication has to be improved. 

I have been using Sophos Central since 2021. 

It is a highly stable solution. I rate the stability a nine out of ten. 

The scalability is good. Ninety users are using the solution. I rate the scalability a nine out of ten. 

The initial setup is easy. 

It is an affordable solution. 

Overall, I would rate the solution an eight out of ten. 

We use the solution primarily as ransomware. It is a good ransomware. Most organizations tend to choose Sophos Intercept X, which is an endpoint security solution.

The tool improves security and saves time. It shortens the time taken for the management of nodes. It also shortens the time taken to respond to incidents.

Sophos Central is a management panel. We use Sophos Intercept X for endpoints and Intercept X Advanced for servers. If we need extended detection and response, we can take it with EDR. The solution provides good management capabilities. It enables us to manage the firewalls and endpoints. We can change the policies from Sophos Central, which reflects on the firewalls and endpoints.

The product does not have a dedicated MFA. It uses third-party authenticators. We will face challenges if we use a mobile phone because there might be issues with the local carrier. So, we have to use Google Authenticator or any other cloud-based authenticator to shorten the authentication time.

I have been using the solution for six years.

The tool is perfectly stable because it is cloud-based.

The tool is scalable.

The technical support is pretty good. The turnaround time is pretty perfect. It is nice.

Positive

I am a service provider. Different clients have different solutions. We propose solutions based on our customer’s environment. Our clients have used solutions like McAfee and Fortinet and have changed to Sophos.

The initial setup is not really difficult. However, the endpoints are challenging. It cannot be done centrally. We have to go to the individual machines or deploy through an AD. The solution is cloud-based. It takes less than five minutes to deploy the tool.

We create accounts and define the policies. Once the policies are defined, we deploy the individual endpoints. It depends on how many nodes we are working with. If we are working with 1000 nodes, it will take time.

The product is expensive compared to other products like Fortinet and Microsoft Defender.

Trend Micro is a competitor.

Overall, I rate the product a nine out of ten.

My customers choose to use Sophos Central for centralized management of their cybersecurity. A key scenario is combining Sophos Endpoint and Sophos Firewall, using features like Synchronized Security. This ensures that if an endpoint is compromised, the information is quickly shared with the firewall, allowing for automatic protection of both endpoints and the network. The convenience of managing these security aspects together is a major benefit for organizations.

I have noticed a significant improvement in how Sophos Central functions for our organization. With recent upgrades, the automatic synchronization of licenses in firewalls stands out. This eliminates the manual hassle of entering license renewal details, making the process seamless and worry-free for our customers.

One of the most valuable features of Sophos Central is its Synchronized Security.

One area I would like to see improvement in Sophos Central is the multi-factor authentication process. Currently, it involves multiple steps with email, phone, and Sophos Authenticator, which can be cumbersome. I faced issues when I lost my phone, making it challenging to log in. Finding a more user-friendly MFA solution would be great. Overall, apart from that, Sophos Central has made significant improvements in the past year and is now a competitive and reliable product.

I have been working with Sophos Central for a year.

We have not had any stability issues so far.

I find Sophos' technical support to be very good. I would rate it as an eight out of ten.

Positive

Besides Sophos, I have worked with Zoho, Check Point, Kaspersky, ESET, and CrowdStrike.

The initial setup process for Sophos Central is straightforward. You sign up at Central.Sophos.com, confirm via email, and provide the required information. It is a quick and simple process, typically taking about 10 to 15 minutes for the initial account creation. One person is sufficient for deployment, and it doesn't require a lot of time or resources. Maintaining Sophos Central is generally straightforward, requiring about 5% maintenance. This includes monitoring events and addressing issues flagged by Sophos Endpoint. The IT admin may need to manually intervene in cases where the endpoint detects a file it cannot remove independently. Overall, maintenance is minimal but involves occasional attention to ensure optimal security.

No, there are no additional fees for creating a Sophos Central account. It depends on the services needed. We can connect a limited number of firewalls to Sophos Central without extra charges. However, for managed endpoint centers with Cisco, there may be auto-query license fees in some scenarios.

My advice for new users would be that for those managing both endpoints and firewalls, especially in scenarios where comprehensive security is crucial, I strongly recommend Sophos Central. The use of Synchronized Security provides data visibility and protection, ensuring that malicious activities on endpoints are promptly detected and isolated by Sophos firewalls. This significantly reduces the burden on IT admins and enhances overall network security. Overall, I would rate Sophos Central as a seven out of ten.

It is primarily used to centrally manage endpoint security solutions on end-user machines. This means organizations can use it to apply and enforce security policies and manage various security features like antivirus, anti-malware, data loss prevention, and other Sophos security components on the endpoint devices used by their employees or users.

The interface, especially when using the software center, is quite user-friendly and easy to navigate. Managing security policies within it is a seamless and straightforward process, offering a smooth experience.

There are situations where manual intervention is necessary, particularly when dealing with certain types of threats. While many security processes run smoothly, in cases of specific attacks that aren't automatically resolved, the need for manual intervention arises. Improving the response time of the customer support team would be beneficial.

I have been working with it for over eight years.

It is quite stable, with only potential issues that might arise when specific Windows updates or packages cause problems, in which case you may need to collaborate with the Sophos Central support team to address them. I would rate it nine out of ten.

It provides excellent scalability. Everything is centralized, and the scalability depends on your licensing. Customers don't have to invest in network infrastructure or data centers to expand their security solutions.

The support is decent but not exceptional, particularly when compared to the capabilities of the software itself. If I were to rate it, I would give it a seven out of ten.

Neutral

I've had experience with both on-premise solutions and Symantec. When it comes to the management aspect, Sophos Central stands out as the better option. However, as a product and considering the overall capabilities of the company, I must say that Symantec is also an excellent product.

The initial setup is quite straightforward.

You can easily set up a user account in Sophos Central, and based on the user's operating system, you can swiftly download the client. Installing it on the machine is a simple step, and it will automatically connect to the central dashboard, displaying all the necessary information. Deployment is hassle-free and user-friendly. Setting up the portal is usually a quick and straightforward task, but it can take longer when dealing with a large user base, like hundreds of thousands. Even with many users, the process is relatively smooth. Managing numerous users can be more challenging, but deploying directly from domain controllers is an option. The primary aim is to ensure the overall system's security. For a case involving around five hundred users, the setup may take approximately three to four days. Maintenance is relatively hassle-free, and overall, it's quite easy to manage.

When compared to the market, it's relatively more cost-effective. You only need to pay for the license, which includes everything. However, if you require managed services, such as MTR with a dedicated support team providing live sessions, there are additional licensing costs involved.

It ultimately comes down to the customer's preferences and budget. If a customer prefers to handle every alert, incident, and threat on their own, that's perfectly acceptable. However, if they require premium support, then they should opt for services like MTR. The choice depends on their specific needs and the resources they're willing to allocate. Overall, I would rate it nine out of ten.

I've been involved in installing and supporting Sophos Central for customers, particularly focusing on server security.

I have experience using Sophos Central for endpoint security management, particularly in two major companies: Dunkin' Brothers and Shop Up Limited. Dunkin' Brothers has approximately 500 support center users, while Shop Up Limited has around 700 users. On a scale of one to ten, I would rate my experience with Sophos Central as a six or seven at most, with six being the average.

We've observed significant improvements in threat detection and response capabilities since implementing Sophos Central, especially when compared to other endpoint solutions like Fortinet. This enhanced capability has made Sophos Central a highly sought-after solution in Bangladesh. Customers appreciate the effectiveness and efficiency of Sophos Central's threat response compared to other options in the market. One notable example is a client of ours who experienced attempted hacking. Sophos Central promptly detected and blocked the intrusion, alerting our client to the potential threat. Our client appreciated the proactive response and effective blocking of the hacker, highlighting the superior quality of support provided by Sophos Central.

Sophos Central's automated threat response played a crucial role in mitigating security risks, as exemplified in a recent case at Popular Pharmaceutical Limited. With nearly 300 users relying on endpoint security with threat response and managed detection, they detected suspicious activity indicating potential hacking attempts from external networks. Thanks to Sophos Central's automated response, the malicious traffic was promptly blocked, and the IT team was alerted to the suspicious behavior. Additionally, when a ransomware attack occurred on one system, Sophos Central's support center swiftly isolated the affected system, preventing the further spread of the attack.

Sophos Central's reporting and analytics capabilities greatly contribute to providing actionable insights to our customers. I genuinely appreciate the effectiveness of Sophos in generating comprehensive reports, which cover all aspects efficiently. I would rate this feature as an eight out of ten for its robustness and usability.

The interface of Sophos Central has significantly contributed to the ease of managing security policies and procedures. In my experience, I've found it to be highly efficient, especially when compared to other solutions like Fortinet. The features such as system heartbeat and automatic system updates are particularly commendable.

One of the significant advantages of Sophos is its affordability compared to other technologies like Check Point and Fortinet. This makes it a preferred choice for businesses, especially government and smaller operations.

The most popular features of Sophos Central are its heartbeat functionality, threat response and detection capabilities, and its rule management system. Notably, the rule management system is not limited to servers but extends to client systems as well. These three components are highly valued for their effectiveness. Additionally, the ability to manage rules through a drag-and-drop system adds further convenience to our administration tasks.

One feature that I find particularly valuable for maintaining our cybersecurity posture is the automatic update functionality. This feature ensures that our systems are consistently up to date with the latest security patches and enhancements. Additionally, the ability to push updates to every software center by default is highly convenient and efficient in ensuring that all endpoints are properly secured.

Although Sophos Central is well-established, there's a shortage of engineers available locally, which has hindered our ability to effectively support and implement solutions. I believe there's room for improvement, especially in terms of traffic monitoring. If Sophos Central could provide detailed traffic monitoring based on user counts, similar to what is available in Fortinet, it would enhance the overall value proposition for our customers. Sophos could potentially provide more detailed insights into user activity, such as the number of users currently logged into the system and those already under protection. Additionally, it would be beneficial to have visibility into network traffic, including guest networks, and identify any suspicious activities or attempts to access unauthorized resources. The main drawback lies in the weak after-sales support system.

I have been working with it for two years.

I find Sophos to be quite stable, especially considering its widespread usage in Bangladesh, with approximately 1.8 million devices currently relying on it. This stability is particularly beneficial for small businesses or offices seeking security solutions.

It provides good scalability capabilities.

The installation process in Sophos Central is significantly easier compared to other solutions. It's straightforward and hassle-free – we can simply download the necessary plugins from the Central warehouse and install them with ease.

The deployment time for Sophos Central varies depending on factors such as the number of users, desktops, or nodes being connected. For smaller deployments involving around ten or twenty users connecting to Sophos Central, the process typically takes a maximum of two to two and a half hours. During this time, the network may need to be disconnected temporarily. Once logged into Sophos, the license can be installed, and then the PCs will automatically receive installation prompts via email. Each computer usually requires around fifteen to twenty minutes to complete the installation of Sophos Central nodes. 

During our previous deployment, there were three of us, including myself, working as senior system engineers. Both of my colleagues had approximately two years of experience with Sophos. With such expertise within our team, deployment tasks were typically straightforward and didn't require much effort. However, when faced with customer requests for complex rules or configurations beyond our capabilities, we would engage with our local vendor and service partners for assistance.

The pricing of Sophos is quite reasonable and generally cheaper compared to competitors like Fortinet and Check Point. However, it's important to note that certain licenses may come with higher costs, which can be a drawback.

I believe incorporating Sophos Central into security infrastructure could further enhance the defenses. However, considering customers' perspectives and budget constraints, particularly for small and medium-sized organizations, it's essential to ensure cost-effectiveness. In Bangladesh, there's a growing preference for Sophos due to its suitability for various environments and budget scales. Therefore, I suggest focusing on improving sales and after-sales support to meet the increasing demand and effectively deploy Sophos solutions across Bangladesh. Overall, I would rate it six out of ten.

We use Sophos Central for Virtual Private Network (VPN), multi-factor authentication (MFA), blocking malicious traffic, and enforcing rules and policies for internal and external network communication between servers.

The product has valuable rules and policies and user-friendly dashboard features.

The product's firewall servers and dashboard need improvement. It isn't easy to read documents and upload data from CSV files using Python code. It is challenging to import user accounts from SAP as well. These particular areas need improvement.

We have been using Sophos Central since 2020.

I rate the product's stability a nine out of ten.

We have 50 organizations as our customers for Sophos Central. We encounter connectivity issues while integrating multiple products or threads. I rate its scalability an eight out of ten.

We are using NSGate, Check Point, and Palo Alto as well.

The initial setup is easy. It takes two years to complete. I rate the process a nine out of ten.

The product is inexpensive.

I rate Sophos Central a ten out of ten. It allows us to analyze endpoint data using efficient rules and policies.

While the platform offers a comprehensive suite of security features, its central role in our scenario revolves around safeguarding our extensive network of endpoints.

It is a cloud-based security solution with a flexible deployment that accommodates local servers and updates caches for minimized internet traffic. The user-friendly interface simplifies tasks like configuring exclusions and root cause analysis. The product goes beyond antivirus, offering granular control over peripheral devices, application management, data loss prevention, web filtering, and updates. It ensures a phased update rollout and provides Extended Detection and Response functionality, including a cloud-based data lake for threat hunting. Sophos Central also manages Sophos firewalls, aiming to be a comprehensive security solution with a single-pane-of-glass approach.

The level of protection offered by this antivirus product is highly commendable. One notable aspect is its innovative approach to file scanning, utilizing intelligent HTTPS mechanisms for real-time insights into files. This next-gen antivirus product stands out by eschewing reliance solely on static properties or files, a departure from traditional antivirus models that relied heavily on signatures. The product ensures constant communication with Sophos labs, providing the latest intelligence about files through a feature called "Live Protection." This real-time connection, coupled with the integration of artificial intelligence, specifically deep learning, enhances its effectiveness. Moreover, the ability to export this information into a CSV file, detailing all the relevant files, processes, and other executable-related information, adds a layer of sophistication.

I've encountered minor challenges in grouping endpoints for policy applications. It currently lacks synchronization with centralized identity management platforms, but users can request features, and integration is reportedly in progress. Additionally, Sophos Central can be resource-intensive, demanding servers with a minimum of eight gigabytes of RAM, which may pose considerations for larger organizations dealing with legacy applications tied to specific OS and hardware configurations.

I have been working with it for four years now.

It is generally stable, with very rare issues. In my four years of directly managing it, I can't recall a significant instance where we were unable to access the console or modify settings. If there were any such occurrences, they were likely brief, and Sophos provides a dedicated Sophos Central status page for users to check the infrastructure's status. However, I must be honest about recent experiences—we've encountered some bugs, particularly with threat alerts, such as unknown threats, and we've communicated these issues directly to Sophos. While these bugs are typically version-specific and resolved with upgrades, there has been an uptick in such issues recently, which has been reported to the development team.

It is highly scalable, allowing easy expansion as needed. Creating different service states and consoles is straightforward, and establishing the relationship between a console and its assigned endpoints is simple. The ease of deployment ensures endpoints are efficiently placed in the correct groups, crucial for applying the right policies promptly.

When seeking technical support for Sophos Central, initial interactions typically involve level-one engineers, and may sometimes take time to reach the right experts. There are instances where I proactively provide comprehensive details, yet initial responses request information already shared. Despite such minor issues, specifying the priority of the problem helps streamline the process. If you can connect with the right people promptly, support is generally good. To refine the rating, considering level-one engineers, I would rate the support experience at around seven out of ten.

Deployment in our environment is streamlined through a single source using a compact file. This file is shared with our deployment team for execution. The deployment team requires either internet access, access to the Sophos portal, or an in-house setup for update caching, also known as message relay in certain network configurations. In cases where the network is restricted and lacks internet access, the deployment team utilizes message relay, functioning as a proxy between the endpoints and the Sophos cloud. This deployment approach is flexible, accommodating both on-premises and cloud components. Essentially, we initiate the installation with a small local installer file, and the subsequent files are retrieved either from an update cache or directly from the internet, making it a seamless process for our large-scale deployments. The process is adaptable and caters to various business functions through dedicated consoles. Using a scripted "blank installation" method, deployment is tailored to specific service states, ensuring endpoints align with the correct policies. Policy management during deployment is efficient, allowing for seamless assignment to relevant groups. The maintenance is straightforward due to its cloud-based nature, minimizing on-premises infrastructure needs. Periodic checks and verifications within the console simplify the process, making it hassle-free, especially when no specific network architectures require on-premises components.

Meticulous planning is essential before onboarding devices onto Sophos Central, involving careful grouping and allocation to dedicated consoles or sub-states. Migration from another product requires precise policy migration, facilitated by Sophos's CRT. Mass deployment is streamlined, especially if the old product's central protection is disabled. Sophos Central extends beyond antivirus, offering cloud security and XDR functionalities, seamlessly integrating with SOC teams for effective EDR and XDR. The platform, known for scalability and user-friendliness, supports advanced features like threat hunting and live response. Continuously evolving, it consistently introduces new features through ongoing development. Overall, I would rare it eight out of ten.

It is very useful to deploy policies centrally and monitor the status of our appliances, especially given that we are the main branches. With Sophos Central, you can centrally manage and deploy security policies and updates, saving time and eliminating the need for the technical team to travel to each branch individually.

The product needs to improve monitoring since it gives false positives. It needs also to improve pricing. 

I have been using the product for four years. 

Sophos Central is stable. 

Sophos Central is scalable. My company has 300-400 users. 

We contact our partner for support. 

Sophos Central's deployment is easy and takes one month to complete. 

Our three in-house resources and one partner resource managed the deployment. 

Pricing is on a device basis. 

I rate the solution an eight out of ten.