We use Sophos Email for various solutions, setting it up for different customer environments as part of our strategy.
L1 System Engineer at a tech services company with 11-50 employees
Offers good log features but challenges with compatibility, management, and reporting
Pros and Cons
- "The best thing about it is the logs."
- "There have been some issues with compatibility and effectiveness, particularly when integrating it with our firewall. The main challenge has been email protection, especially due to compatibility issues and difficulties with log access and email relay configuration."
What is our primary use case?
What is most valuable?
The best thing about it is the logs.
What needs improvement?
There have been some issues with compatibility and effectiveness, particularly when integrating it with our firewall. The main challenge has been email protection, especially due to compatibility issues and difficulties with log access and email relay configuration.
I would like to see more detailed logs in the future releases. The firewall logs don't show the in-depth logs, so we can only see the software in detail, not the logs themselves. This is a problem we've been facing in customer environments for some time.
Emails go to spam even though there's no legitimate reason for them to be there. There's no summary of the necessary issues, either.
If an email goes to spam, the system will drop it. There should be a certificate email on the query, but support comes and goes, and they might see learning and run the Linux command or show the unrigorous answers.
But if there is some read-only show on the reporting or clear reporting, it would be good for the customers.
For how long have I used the solution?
We use Sophos Email Protection. We've deployed it in various scenarios, either on-premises or using Sophos Cloud Email Protection.
Buyer's Guide
Sophos Email
November 2024
Learn what your peers think about Sophos Email. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
824,067 professionals have used our research since 2012.
What do I think about the scalability of the solution?
Considering our experience with firewall integration, I'd rate it a five out of ten. I haven't used the cloud solution extensively to comment on that aspect.
The rating reflects the challenges we've faced. These different appliances have more limitations, like reporting limitations. They don't have good reporting, and it's not a good solution.
If there's another issue, we have to go to the CLI and change something to embroider the other issue, which is spam.
If we go and prepare the spam, it gets stuck, and there's no option to understand it on the GUI. There is an option to go to the CLI and run the script. There's a predefined script. There are a lot of things.
How was the initial setup?
The initial configuration isn't difficult, but managing permissions there are some issues. We've encountered issues where some emails are incorrectly flagged or missed, which complicates management.
We're using the on-premises version of Sophos Email Protection. We haven't utilized cloud email protection. Our focus has been primarily on integrating it with the firewall.
What's my experience with pricing, setup cost, and licensing?
There are different price tiers for different customer sizes. I sell the bundle, which includes all the licenses, web protection, and other features.
Which other solutions did I evaluate?
The customers who are using email servers are not using anything else. Most of our new users moved to a better solution, like Fortinet email or other solutions, but they didn't want to move. For the new users, it's combined and deployed by themselves.
What other advice do I have?
It's best to take the POC from the so-called official, test it thoroughly, and then make a decision. If it's compatible with the environment and works well, then keep the POC successfully.
Overall, I would rate the solution a five out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer:
Security Engineer at Mavisco Resources Sdn Bhd
The solution performs inbound and outbound filtering and filters out spam emails, but it quarantines legit emails, and the support is quite slow
Pros and Cons
- "Sophos Email provides both inbound and outbound filtering."
- "A lot of legit emails get quarantined."
What is our primary use case?
It is an anti-spam solution. It filters out spam emails. It performs inbound and outbound filtering.
What is most valuable?
The price is okay. The on-premise email security solution of Cisco can perform only outbound filtering. Sophos Email provides both inbound and outbound filtering. I also like that the solution is deployed on the cloud.
What needs improvement?
The scanning and filtering must be more detailed. A lot of legit emails get quarantined. The filtering features must be improved.
For how long have I used the solution?
I have been using the solution for a couple of months.
What do I think about the stability of the solution?
I rate the tool’s stability a seven out of ten. The tool quarantines legit emails.
What do I think about the scalability of the solution?
The tool supports a lot of endpoints. It's more on a network level. I rate the scalability a ten out of ten. Two of our customers are using the product.
How are customer service and support?
Compared to McAfee, Sophos' technical support is quite slow. The technical support could be faster.
How would you rate customer service and support?
Neutral
How was the initial setup?
The setup is not that complex. We can fine-tune policies and filtering features. If the product is stable, we need one or two infrastructure engineers to deploy and maintain it. If there’s a software bug, we need a developer.
What was our ROI?
We see an ROI when the solution works perfectly.
What's my experience with pricing, setup cost, and licensing?
We have to pay licensing fees yearly or once every two or three years. The product is cheaper compared to other solutions.
What other advice do I have?
If someone's solution is straightforward and they don't have too many proxies, I will advise them to choose Sophos Email. However, I would not advise choosing Sophos if their network or infrastructure is quite complex. They will need some fine-tuning. We will need a principal developer if there is a bug in the software. Overall, I rate the tool seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Buyer's Guide
Sophos Email
November 2024
Learn what your peers think about Sophos Email. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
824,067 professionals have used our research since 2012.
PreSales Maanger at Microgenesis Business Systems
Has a good technical support team, but they could provide efficient scalability for email-based applications
Pros and Cons
- "The platform is scalable when installed on server-based systems."
- "The product could include all the essential features and capabilities, similar to the on-premise, server-based version."
What is our primary use case?
We use the product as an antivirus to block phishing emails by implementing mail routing policies.
What needs improvement?
The product could include all the essential features and capabilities, similar to the on-premise, server-based version.
For how long have I used the solution?
We have been using Sophos Email for more than ten years.
What do I think about the scalability of the solution?
The platform is scalable when installed on server-based systems like Linux. However, it offers limited scalability for email-based applications. It is suitable for small and medium businesses.
I rate the scalability a five out of ten.
How are customer service and support?
The technical support team is capable of resolving issues.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We are using FortiMail as well. It is more capable of supporting enterprise deployment than Sophos Email.
How was the initial setup?
The initial setup process is complicated compared to PureMessage.
What other advice do I have?
I rate Sophos Email a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Information Technology Security Engineer at Direct Choice
Helps to double-check whether an email is spam or not
Pros and Cons
- "I cannot guarantee any email by its name. It can be spam. Sophos Email helps to double-check whether an email is spam or not. It has a dashboard which gives an overview of the alerts."
What is our primary use case?
We use the product to protect our emails, especially for sensitive information from customers. Some spam messages are clever, and we want to ensure we can identify spam.
What is most valuable?
I cannot guarantee any email by its name. It can be spam. Sophos Email helps to double-check whether an email is spam or not. It has a dashboard which gives an overview of the alerts.
For how long have I used the solution?
I have been using the product for over two years.
How are customer service and support?
I haven't contacted the support team yet.
Which solution did I use previously and why did I switch?
We used McAfee before. It took long to connect with the Outlook application.
How was the initial setup?
The tool's deployment was easy and took five hours to complete. You need to connect it from Azure.
What was our ROI?
The tool is worth its money.
What's my experience with pricing, setup cost, and licensing?
The tool's pricing is medium.
What other advice do I have?
I rate Sophos Email a ten out of ten.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer:
System Integrator IT Manager at Tecnimex S.r.l.
Easily integrates into our cloud platform and simplifies backend management
Pros and Cons
- "I find the comprehensive features of Sophos Email most valuable."
- "I would like to see improvements in the initial setup process, ensuring better compatibility with diverse customer infrastructures."
What is our primary use case?
I use Sophos Email as part of our corporate cybersecurity solution to protect our servers, both on-premises and in the cloud, including Microsoft 365 servers.
What is most valuable?
I find the comprehensive features of Sophos Email most valuable. The system easily integrates into our cloud platform and simplifies backend management.
What needs improvement?
I would like to see improvements in the initial setup process, ensuring better compatibility with diverse customer infrastructures. Additionally, in the next release, it would be valuable to have enhanced features for seamless interaction with customer infrastructure, making the setup more user-friendly and efficient.
For how long have I used the solution?
I have been working with Sophos Email for two years.
What do I think about the stability of the solution?
The stability of the solution is good. I would rate it as a ten out of ten.
What do I think about the scalability of the solution?
I would rate the scalability as a nine out of ten. We have around five customers currently using Sophos Email, with a total user count exceeding 100.
How are customer service and support?
Sophos offers technical support, and while it is generally responsive, the speed can vary as it involves opening a ticket and waiting for assistance. Sophos provides a dedicated response team for faster support, but this service may come with an additional cost depending on the customer's plan. Overall, I would rate the support as a nine out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
Although the setup can be a bit challenging, it is crucial to conduct thorough testing due to the complex environment. I recommend thorough training before use to maximize its effectiveness. The deployment of Sophos Gmail typically takes around a couple of hours, depending on the complexity of the customer's infrastructure. The process involves investigating the customer environment, testing for interoperability, and setting up on the Cloud Platform or on-premises. It is relatively straightforward for a single server, but for cloud environments, careful evaluation of the products involved is necessary. After setup, additional time is spent testing and verifying the system to ensure a smooth operation.
What about the implementation team?
What's my experience with pricing, setup cost, and licensing?
Clients can opt for yearly or monthly payment plans. Recently, Sophos introduced some interesting solutions, especially for those acting as MSPs or resellers with a flexible model. While Sophos provides options through its cloud marketplace, it is often better to rely on another reseller for technical support.
What other advice do I have?
I would recommend Sophos Email. My advice for those starting to use it is to prepare for training and not hesitate to engage with it. The initial phase might seem challenging, but training is key for a smooth transition. Don't be afraid of the learning process; embrace it for better consolidation with the platform. Overall, I would rate Sophos Email as a ten out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Data Center Engineer at a retailer with 5,001-10,000 employees
Good pricing, offers an easy setup, and quite stable
Pros and Cons
- "The deployment is very easy. It's quite straightforward."
- "The solution's technical support is slow and unresponsive. You need to book time in order to get support."
What is most valuable?
The solution is very good at covering all of my organization's needs.
I've found the security to be quite good on the product.
The deployment is very easy. It's quite straightforward.
The pricing is great. It's quite fair and not too expensive.
Overall, the product has some great features.
What needs improvement?
The solution seems to be very good at iterating on past editions and continues to improve itself. I don't know if it's truly lacking everything.
It would be great if it was a bit better at protecting from the endpoints.
The solution's technical support is slow and unresponsive. You need to book time in order to get support.
For how long have I used the solution?
I've been using the solution for about four years now.
What do I think about the stability of the solution?
The solution is quite stable. We've found it to be very reliable for our organization. There aren't issues with bugs or glitches. I've never experienced it crashing or freezing. It's been good.
What do I think about the scalability of the solution?
The solution is scalable. Your organization can easily expand it if you need it to.
Currently, we have around 100 users on the solution. That would be the maximum number of users.
How are customer service and technical support?
While Fortinet has great technical support and is quite responsive and fast, I've found that Sophos requires its users to book time for support.
Symantec was also quite helpful - more so than Sophos, which still seems to be iroing out details in terms of handling customer queries. They need to be much more responsive.
Which solution did I use previously and why did I switch?
In the past, I've used Symantec products including Symantec Gateway and Symantec Endpoint Protection. When Symantec bought Barracuda, the pricing became much different. The solution seemed to offer the same features but with much higher pricing. Our company decided to go in a different direction and chose Sophos.
I still like Symantec. I used it for five years and I'm quite familiar with the product.
How was the initial setup?
The initial setup is quite straightforward. It's not complex.
The deployment is easy to handle. How long it takes depends on which product you want to use. It's different according to your endpoint, email service, mobile, etc. That said, it's still an easy deployment process.
Our users are able to easily maintain it themselves.
What's my experience with pricing, setup cost, and licensing?
The pricing, in general, if very fair. It's definitely a positive aspect of the solution.
Which other solutions did I evaluate?
I've looked into Fortinet's server and some related products, however, I likely won't continue looking into them. I'd rather consider Symantec.
What other advice do I have?
We're just customers. We don't have any business relationship with the company.
I'm still working with this solution and testing its capabilities. There's still so much to learn about its offerings.
On a scale from one to ten, I would rate it at an eight. If they had better deployments for email security, I might rate them higher.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Security Engineer at a security firm with 51-200 employees
Makes day to day email management easy with self-management portal
Pros and Cons
- "The tool's most valuable feature is the anti-spam detection filter. Its threat email intelligence features help to identify email data."
- "Sophos Email could better detect fake emails, especially when the domain names are similar. It needs to improve spotting spoofed domains, like when one letter differs in a domain name. It also needs to incorporate AI detection. Barracuda detects suspicious emails better. However, malware scanning is better in Sophos Email."
What is most valuable?
The tool's most valuable feature is the anti-spam detection filter. Its threat email intelligence features help to identify email data.
What needs improvement?
Sophos Email could better detect fake emails, especially when the domain names are similar. It needs to improve spotting spoofed domains, like when one letter differs in a domain name. It also needs to incorporate AI detection. Barracuda detects suspicious emails better. However, malware scanning is better in Sophos Email.
The solution could offer the option to integrate third-party RBL. This would allow users like Omer to use their own RBLS.
For how long have I used the solution?
I have been using the product for one to two years.
What do I think about the stability of the solution?
The product is stable.
What do I think about the scalability of the solution?
Sophos Email is scalable, but it depends on the licensing.
How are customer service and support?
The tool takes a lot of time to implement the requested new features.
How would you rate customer service and support?
Neutral
How was the initial setup?
The tool's deployment and integration into existing infrastructure is easy and can be completed in a few hours.
What's my experience with pricing, setup cost, and licensing?
I rate the product's pricing a seven out of ten.
What other advice do I have?
Sometimes, email protection products can't guarantee 100% security, whether from Microsoft, Sophos, Barracuda, or others. They typically claim up to 95% or 92% effectiveness. However, spam emails can get through, mainly if attackers use new IP addresses. It takes time for spam filters to recognize and block these new threats. The product is recommended primarily for small and medium businesses.
Previously, the domain anomaly detection feature was limited to detecting anomalies within our domain, such as xoz.com. However, it couldn't detect anomalies in external domains. This limitation resulted in emails from third-party domains potentially slipping through without detection. Other vendors offer better domain anomaly detection, including for third-party domains. Microsoft, for instance, allows users to customize their domain anomaly detection lists.
Day-to-day email management is easy thanks to the tool's user self-management portal. If an email gets blocked for a user, they can release it themselves without contacting IT every time. The tool automatically detects flagged emails, such as those with large attachments, and quarantines them for review. Users can then manage their quarantined emails with minimal training, reducing the burden on IT staff.
I rate the overall product a six out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Has a good user interface, but its DLP features need enhancement
Pros and Cons
- "It has enhanced our approach to tackling malware and spam. It is a reliable product with a good user interface."
- "Sophos Email could improve DLP features."
What is most valuable?
The product provides valuable performance.
What needs improvement?
Sophos Email could improve DLP features.
What do I think about the stability of the solution?
The platform is stable. However, they could provide more updates to streamline the product. I rate the stability as seven out of ten.
What do I think about the scalability of the solution?
We have 50 Sophos Email users in our organization. It has good scalability.
How are customer service and support?
The technical support team could be faster, more knowledgeable, and more customer-friendly.
Which solution did I use previously and why did I switch?
We are using multiple products as system integrators.
How was the initial setup?
The deployment steps involve simply downloading and executing the links, as it's a cloud-based solution. It requires one engineer to handle the maintenance.
What's my experience with pricing, setup cost, and licensing?
The platform is inexpensive. It offers a cost-effective licensing model. We purchase its yearly license.
What other advice do I have?
We utilize Sophos Email Gateway to protect against phishing in our company. Following the standard recommendation provided by Sophos, we established connectivity between Sophos Email Gateway and Microsoft 365.
It has enhanced our approach to tackling malware and spam. It is a reliable product with a good user interface.
The integration capabilities still need improvement, as some functionalities are not operating properly. Specifically, attention needs to be given to AD integration capabilities, which are crucial for various operations.
I rate it a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Last updated: Apr 4, 2024
Flag as inappropriateBuyer's Guide
Download our free Sophos Email Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Popular Comparisons
Microsoft Defender for Office 365
Darktrace
Proofpoint Email Protection
Cisco Secure Email
Microsoft Exchange Online Protection (EOP)
Cloudflare One
Fortinet FortiMail
Trend Micro Email Security
Avanan
TitanHQ SpamTitan
IRONSCALES
Perception Point Advanced Email Security
Barracuda Email Protection
Kaspersky Security for Mail Server
Hornetsecurity 365 Total Protection
Buyer's Guide
Download our free Sophos Email Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- When evaluating Messaging Security, what aspect do you think is the most important to look for?
- Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?
- What is the best email encryption software for small enterprises using Office 365?
- What security measures should businesses prioritize to support secure remote work?
- When evaluating Email Security tools, what aspects do you think are the most important to look for?
- Which is the best email security gateway?
- Why are Email Security tools important for companies?
- Why is Email Security important for companies?