What is our primary use case?
UTM is a full content management. Content blocking, URL blocking, etc. We also use it to manage video and streaming media for the subscriber. So it's for internet usage, basically.
How has it helped my organization?
Before, I was using TMG, and it was very difficult, back in 2010. A lot of things, like HTTP filtering and HTTPS filtering, were a problem for me at the time. If someone asked me to block YouTube for example, I was able to do so in TMG but when it came to HTTPS, I was having some problems. So this is one issue we have resolved.
The second issue, before the firewall, was we only published our required port on the internet.
Third, email filtering. Before, because we were using Go Daddy services, just normal services for email, we had everything coming in. Now, we also filter emails.
What is most valuable?
For me, the most important thing is content management and, obviously, the firewall because we have some servers.
We have different levels of users. Some users, we are just giving them email access. For some users, working sites only. For some users, we are giving them intermediate access so they can access, on the government side, some knowledge bases. For some users, we are giving full access.
So there are two major features for me. One is content management and the second thing is servers, publishing.
What needs improvement?
They have some issues with email filtering. Sometimes, I have found emails that have passed through the firewall, so I contacted Cyberoam. They said, "Okay, we are going to update the signature in the next update you, you will not get it like this again."
For how long have I used the solution?
Three to five years.
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
Yes, it can handle growth.
How are customer service and technical support?
I have called them many times. On a scale of one to five, I would rate them four.
I rate them four because lot of times they don't resolve issues. They are just saying, "Okay send the signature, we will update it." Most of the time they are not giving me the solutions. After three or four conversations, they come to understand it is not available and they say they will update it.
Which solution did I use previously and why did I switch?
We were using TMG, previously. As I mentioned, we were not able to filter email. The second thing was content management. Sometimes we have to block HTTPS. We have to inspect a URL with HTTPS. In TMG, it was problematic because we needed the certificate and other things.
Also, at the time I was publishing servers' URLs. We have some internal services for our users. TMG was handling it, but it was an old tool in 2010. There were no updates.
I chose Cyberoam, because, at the time we had a problem with the budget. I had a minimal budget and it fit my budget.
How was the initial setup?
If someone knows how firewalls work, they can easily manage it. I don't think it's complex.
Which other solutions did I evaluate?
I checked Fortinet but it was a little expensive at that time for me. We also looked at Cisco but it was expensive. So at that time the two products we compared, because they were easily available in our area, were Fortinet and Cyberoam. And Cyberoam was cheaper at that time.
What other advice do I have?
For a small business, it's okay. It's easy to set up and it's also cheap.
I rate it eight out of 10. I'm not giving a 10 because many times, I have problems with the email filtering. Emails pass through without any filtering affecting them. When I get back to them and tell them this is the issue, they check everything and say it is not in their database signature and they have to update it. But you know, by that time, my user has already opened it.
I don't know why they are not updating. Every time, it seems they are waiting for me to inform them that this is the signature issue or this is the signature that came in through that filter.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
From experience with Email Security Gateway, three key players in that area : Proofpoint , Mimecast and Fortinet ( FortiMail ). Not saying other vendors are bad but not strong as the three vendors listed above.