What is our primary use case?
The solution is primarily used to secure networks, just like PSF, but much better. Sophos XG has a UTM, which is much more security inclusive than a firewall, as it takes a look at the threat management landscape from a unified point of view. They have a firewall and they have an IPS inside the same box. They have a sandbox, they have a web filter, they have a web application firewall, they have a mail gateway, and they have a DMP. These are all inside one box. It's excellent at protecting networks from security threats as well.
What is most valuable?
The solution offers everything in one product.
It's excellent at protecting networks from malicious threats.
The solution is very easy to use and straightforward.
Once you get past the license activation, the installation is easy.
What needs improvement?
I would like to see the technical support improve. They have the worst technical support I have ever seen in my whole life.
The initial setup, specifically when activating the license, is a nightmare and is quite difficult.
For how long have I used the solution?
I've been using the solution for five years now. It's been a while.
What do I think about the scalability of the solution?
We're a distributor, however, the company is still quite new. At my last company, I had 150 clients on Sophos.
How are customer service and technical support?
Technical support is just awful. They are not helpful or responsive. We are not satisfied with the level of support on offer. They need to improve this aspect. They simply do not reply.
They have very bad response times. It's very strange. Before, when I was dealing with Cyberoam, before Cyberoam was acquired by Sophos, it was good. Now, it's Sophos XG, and, while Cyberoam support was amazing, Sophos support has just gone down the drain. I don't know why.
How was the initial setup?
The initial setup is a nightmare. The installation, getting the box to get up and running, is a hectic process, due to the fact that the box basically would not activate any feature unless the license is activated. And the license is only activated with the cloud. When you are doing that, it's just a sort of a nightmare. Now they have a new feature in which you can just create a license and you can activate the license on the appliance. However, generally speaking, it's one of those appliances that, if it's not registered on the portal online, won't even start. It can be a nightmare sometimes. That said, after the license is activated, it's just plain simple and easy.
What about the implementation team?
I previously was an implementor and would set up the solution for clients.
What's my experience with pricing, setup cost, and licensing?
You need to pay for the license. You need to pay for the hardware as well. The cost depends on the model of the hardware and on which license. They have different editions, and licenses you're going to go with. They have different modules, and the cost depends on which modules you'd like to activate for security features. Not everyone will buy Sophos to utilize all the features. Usually, it's just the firewall, and IPS, sandbox, and the web filter that people are looking for. Not many people have Sophos or VM servers on-prem to protect them.
What other advice do I have?
We use both cloud and on-premises deployment models.
Now, I am using the solution personally at home, however, before, where I was working, I used the solution for three years, specifically implementing Sophos XG for customers.
I'd rate the solution at an eight out of ten.
I'd recommend the solution to other users and companies. For small and medium businesses, Sophos is a good security vendor.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.