Sophos Cyberoam UTM Reviews

I use the solution as a firewall to protect my network and the two main computers for our website.

The main features I have found best are the load balancer and ease of use.

In my experience the solution can be easier to configure with more documentation, we need more training.

I have been using the solution for a short time.

The solution is stable.

The solution is scalable. We had approximately 500 users using the solution.

I was using Kerio Control before this solution and I liked some of the features but we only used it for a short time.

The solution was easy to install, it was straightforward. It took approximately three hours to configure it. We have one security and network administrators for the maintenance of the solution.

We have used consultants in the past for the implementation.

There is a license for this solution and it is priced competitively. We paid approximately $2,000 for the license.

We stopped using the solution because we needed more training and the documentation needed improvements.

I would recommend this solution to others.

I rate Sophos Cyberoam UTM a seven out of ten.

On-premises

It's easy to manage and handle. BW management and BW quota with limitation policy is easily deployed.

Flat network was there and internet surfing was high. To minimise the risk and BW allocation, Cyberoam is used and it is very productive.

The dashboard could be improved.

Since 2013

We've had no issues with deployment.

We've had no issues with stability.

We've had no issues with scalability.

Customer Service:

8 out of 10

Technical Support:

9

Yes

The setup was not complex.

We implemented it in-house.

The ROI is satisfactory.

We evaluated Dell Sonic.

My primary use case of this product is as threat protection services and it works well. 

This solution has improved my organization because it provides different angles. 

The most valuable feature of this product is the threat protection.

The reporting should be improved as well as the backup. 

Three to five years.

The stability of the product is good. 

The scalability of this product needs improvement.

I have not used tech support. 

I was not involved with the setup of the product.

Helps us to aggregate/manage bandwidth from two ISPs, as a fail-safe.

Bandwidth Management and aggregation. It is valuable for combining two ISPs. Switching to a secondary/redundant ISP is thus seamless, in the event that the primary ISP goes down. 

The Bandwidth Management is also valuable for limiting heavy downloaders that may impact negatively on the experience of other users.

Needs a mail alert/notification when the device loses any of its connections, during ISP redundancy implementation.

One to three years.

No stability issues.

No scalability issues.

No previous solution.

My network engineers were able to find their way around it in a short time.

It’s value for the money.

Check Point, Fortinet.

I give it an eight out of 10. It’s functionally competitive with higher priced alternative brands.

The product has helped control bandwidth utilization, as well as enhanced connectivity and security to remote locations.

1. URL filtering
2. Content Filtering
3. Remote Access/Site-to-Site VPN features
4. Traffic Shaping/QoS
5. Packet Capture

These features have helped control internet utilization and compliance in the organization.

• Web Filtering using wildcards
• Clarity on the firewall rules
• Granular reporting features

No stability issues.

No scalability issues.

Tech support is good.

Yes, I used other solutions previously. This product provides more technical options to solve critical issues.

The initial setup was straightforward, without any issues.

Contact partners for more information about pricing and licensing.

I evaluated Checkpoint, FortiGate and Cisco Firepower.

The product is stable, and after migrating to the SFOS it is much better.

Secure SSL VPN out of the box appliance. It just works; good web and spam filtering.

All in one UTM appliance.

Smaller CR15 units don’t have a hard disc or built in IView software. These units could do with that feature.

Very early CR15 unit prone to freeze.

No, as long as you specify the user capacity you should be OK.

When Cyberoam owned the product it was excellent. Now Sophos owns it and it's not as good.

We used to use Fortinet UTM, but Cyberoam is much better in terms of virus scanning, web filtering and spam filtering.

Very easy to set up.

Licensing is very good value for the money.

No, we didn’t evaluate other products apart from Fortinet.

Training is essential.

Outstanding and must have product for efficient and effective network security. Cyberoam is the only identity-based UTM solution. It offers a well-coordinated protection through tightly integrated security solutions over a single interface.Most UTMs only offer IP-address based security. Cyberoam is the only UTM solution that offers user identity-based security, protecting enterprises from unpredictable, insider threats.Functioning with Layer 8 technology, Cyberoam gives complete visibility into “Who is doing What” in the network and allows policies to be created at the user level based on work profiles. Considering Active High Availability, load balancing, failover mechanism, bandwidth management capabilities and other features, it is worth buying.

Policy configuration and implementation is a bit lengthy process. Nothing else of any significance that we found but yes, it is a bit pricey.

After implementing Cyberoam UTM in our data-center. We tested it by initiating various kind of DDOS attacks. Cyberoam identified every attack, notified us about it and prevented the network from any kind of damage and disturbance. It controls bandwidth to a great extent by use of policy for single user to groups. Easy deployment, good hardware specification, classy reporting tools, no user count restrictions etc. A features-packed and powerful UTM appliance at the higher end of the price spectrum, but worth it.

• Web filtering
• Application filtering
• IPS
• QoS

I used to work for a Cyberoam distributor. In one of my projects, I deployed it in a university with 1500 users (students), all of whom had different QoS and web category policies, different authentication policies. I then had to connect the university’s branches, in different cities, with a Site to Site VPN using AD authentication available for just the account. This was to restrict access only to the accounting application server of the other branch. It was quite complicated to do, but it was very successful.

In another project for a bank, I secured a banking application server and attached a database using two Cyberoam devices on the edge, with a Juniper device in the middle. This was for securing three different segments - internal users, internal developers and external visitors. The final topology was so secure that, even for some testing purposes, we were not able to break in to change the configuration and access the system as a third party.

Not very often, but there are some minor bugs in the products. I think their quality control can improve.

I’ve used it since 2008, so seven years so far.It is a complex product so I’d rate the performance and number of features as 10/10, and 7/10 for the consistency and programing.

Generally speaking, the Cyberoam development is quite simple, easy and straight forward. Overall it depends on the network complexity.

Compared to a Cisco router, Cyberoam UTMs need to be restarted more often. From my point of view, this is acceptable, since many aspects of the product functions in layer seven, while a Cisco router just routes!

Since all the products models from the smallest to the strongest have the same features and capabilities, I can say that the product is extremely scalable. However, if you need to upgrade the whole device to a stronger model, I would say scalability is 8/10, which considering the differences between the number of ports in different models (I could even give 9/10, but let’s stay with 8/10!).

Customer Service:

It really depends on the retailer, representative and local distributor. Nothing much to say.

Technical Support:

One of the most considerable advantages of Cyberoam over the competitors is the after sales support. The 24/7 support assists the customers, even from minor to very major issues, and they chase up the issue until the final resolution by email and phone. They are really trustworthy.

In a different continent, a different company, and as a customer (not a distributor) I still used the same brand, Cyberoam! It’s cheap, flexible, easy to configure and easy to manage.

I’ve been using the product for ages and I have deployed it in hundreds of networks and complexities. However, using the configuration wizard, the initial configuration is extremely easy and straightforward (depending on the network complexity of course).

I have always installed it myself.

It's hard to estimate, as it depends on the complexity, and scale of the network.It takes anywhere from one day to less than a week in normal situations.

I have evaluated Juniper, WatchGuard and a couple of minor brands. So far, I can still raise the flag of Cyberoam.

Since the features on the model are the same, and it is just the hardware that gets improved for higher models, I usually advise a model one and a half times bigger than the number of the network users. For instance a 1000 user network can be easily served by a 1500NG. However based on my experience, since not all the users are active simultaneously, even 1 to 1 is sufficient. Considering the capability of HA, expansion is simple if needed.