Sophos XG Reviews

The solution is primarily used as a firewall with all the "next Generation" functionality. We sell this solution to our clients.

I prefer the solution to other Firewalls as it is very intuitive to manage.  

The product offers a more complete set of security functionality at one price . It differentiates more in objects to protect like web server protection or email protection.

Troubleshooting is easy with XG Firewall because of clear arrangement of troubleshooting features in GUI.  I like the ease of use.

The Base License includes already VPN, network protection and web protection functionality and you have a wireless controller on top. The data stream analysis and security features are built-in; these are the main features we need these days.

The user interface is very good. It's already quite simple and easy to use.

Recently, I've had a problem with updating firmware. Updates should be more stable . The last update I did was not successful and ended in a unusable device. Also the support case i opened for it could have been more effective.

I don't use all of the features and therefore it would be difficult to evaluate if anything is missing.

I've been dealing with the solution for around 12 months or so. It's been about a year at this point.

From the update side, the last update didn't run successfully and this is not good for us as the customer needs this device to access the internet. If this device is failing and it has no connection to the internet  it is a great problem for the customer.

It may be possible to implement a second device in a fail-over cluster and this would avoid such a problem as then if one device fails in the updating process, the other device could be take over, and so it would be not such a great problem. That said, in this scenario, you have to sell two devices. That would be the best way to ensure stability, however.

The scalability of the solution is limited according to sizing. You buy one device with specific performance parameters, which should be equivalent to the customer's needs, and this device is not able to customize to a higher level. If you need to grow, you must buy another device with higher parameters.

In our case, the customers we work with have small setups. They aren't large organizations. Sophos told us about a sizing guide in the future.

We are a reseller and  our first and only support case was not very effective. It should not be used as a guideline.

We also resell Cisco products.

The initial setup is not overly complex.  The process is straightforward. A company shouldn't run into problems but need a understanding of the device and the functions.

The deployment process depends on the requirements. A good planning is beneficial.

The pricing is good due to the fact that you get so much functionality from one overall solution. The base license covers all features you need to protect against threats from internet. Setting up the device basically is intuitive and there are a lot of help from internet community.

We are a reseller of both Cisco and Sophos.

We're using the latest version of the solution for our clients.

I'd rate the solution at an nine out of ten. We've  been satisfied with the product, however, there is still more they could do in testing updates.

Sophos XG is used as a network firewall.

In the Sophos XG, the SD-WAN has all the rules done separately, such as net policy routing. In the previous version, they were all in a single rule and everything was done that way. The way it is now is difficult for us because we are not used to this newer version. The firewall rules should be easier to configure and create. Everything should be done with a single click.

In the next version, the solution would be more user-friendly overall.

I have been using Sophos XG for approximately two years.

The stability of Sophos XG is good, it has good performance.

Sophos XG has good scalability.

We have approximately 50 people that use the solution in my company.

We use this solution on a daily basis.

We have contacted the support from Sophos XG but we do not require the support often.

We previously used Sophos Cyberoam and we switched to Sophos XG because it was the end of life for the Sophos Cyberoam and the bandwidth was poor.

The initial installation of Sophos XG was not difficult.

We used an integrator to do the implementation of Sophos XG.

We only require one person for the implementation and maintenance of the solution.

The solution is very good and we have received a return on investment.

The price of Sophos XG is reasonable. 

I would recommend this solution to others.

I rate Sophos XG a six out of ten.

The most valuable features are its nice interfaces and configuration. The endpoint is also very good.

Areas for improvement would be the access points and the on-premise version, which is very bad.

I've been using this solution for two years.

The technical support is very, very bad.

Sophos is about three or four years behind FortiGate. I would score this solution nine out of ten.

I am using Sophos XG for network security.

The most valuable features are the reporting, dashboards, and graphical user interface. It gives a good overall picture of what is happening over the network.

There have been some issues when upgrading. For some reason, parts of the configuration become unconfigured, I then have to reconfigure it. I should not need to keep reconfiguring it after upgrades.

I have been using this solution for approximately four years.

The solution is stable.

The solution is scalable.

There needs to be more tutorials and documentation. I have not done a lot of configuration because I need more training.

We were previously using Cyberoam.

The initial setup was not difficult to complete. I have not been trained as a Sophos administrator and it would have been easier if I had training. 

I recommend this solution to others.

I rate Sophos XG a nine out of ten.

We use the Sophos XG firewall as part of our security solution.

The first area that needs to be improved is customer support.

If I'm implementing a connection on the DMZ or WAN, I should be able to dive deep into the implementation, specifying what needs to be implemented or not. For example, I should be able to configure specific details for the DMZ, and not have to follow the templates that they provide.

We have had problems with the stability that affected business operations.

We have been using Sophos XG for three years.

The issue of stability is the reason that I'm trying to move away from using Sophos as our firewall. There were times where Sophos randomly cut some users off of the internet, which adversely affected business operations. It is important because our business relies on throughput and service, like the uptime of e-commerce servers.

Scalability depends on the specifications during the time of order, prior to first implementing the firewall. With respect to my organization, scalability has been okay. It comes down to the amount of money that is spent.

We have 1,200 users in the company.

Customer support needs to be improved. The time they take to resolve issues is too long.

The initial setup was straightforward. It took us less than 30 minutes. Normally, it depends on the size of your organization, so for mine, the installation was less than 15 minutes. By 30 minutes I was finished even with the setup and configuration.

For our company, the price was reasonable.

We are now thinking about incorporating the Fortinet next-generation firewall.

My advice for anybody who is considering Sophos is that a business with a lot of throughput and data traffic should look for another firewall.

I would rate this solution a six out of ten.

For the primary use cases, we use SSL VPN access for rolling remote access. We use web filtering and we use the intrusion prevention that comes with network protection.

The user interface is very user-friendly and very helpful. 

The VPN access for users is also a great thing, especially nowadays when working from home. 

Categorization or uncategorized websites is an area that needs improvement.  

Having a web portal where you could make requests for the categorization of non-categorized items, would be beneficial.

The DLP rules don't cover countries such as Serbia. You cannot make custom rules. That could be added so that we could detect content that is not supposed to leave the company via email, and so that the rules could be customized by the clients.

We only have predefined rules and most of them are not for Serbia or countries from the Region.

We have been using Sophos from the time they acquired Astaro, before that it was UTM, then they released the XG firewall.

We are using the latest version.

It's a stable solution. We have not experienced any issues.

It's a scalable product. In the office, we have four users in our organization.

Our experience with technical support has been positive.

We have support from the local distributor. We have rarely had the need to contact technical support but when we have, we have had quick responses from them.

The initial setup is very straightforward and the implementation takes a relatively short amount of time. The fine-tuning takes a little bit more time but in general, it can be deployed and implemented quickly. 

Also, the upgrades, backups, and recovery are very easy.

We are Sophos partners, we sell them and implement them ourselves.

We only need one engineer to deploy and maintain this solution. If you have a bigger deployment then you need two engineers.

Licensing fees are on a yearly basis.

I can recommend this solution to others who are interested in using it.

I would rate this solution a nine out of ten.

We use this product to protect all of the connections to our sites and for web filtering.

The most valuable feature is web filtering.

The behavior with the zones was a little bit tricky to understand and the beginning of the project.

Sophos XG is difficult to manage and it is difficult to understand when you first begin.

The reaction time of the GUI is terrible when compared to other manufacturers. 

We have been using Sophos XG for about a year and a half.

This is a stable product, although the web GUI is slow. We plan to use it for another couple of years.

This is a small site, and we have 15 users.

The initial setup for Sophos XG was not straightforward. We already had experience with Sophos UTM, but they are completely different systems. The deployment took us one week to complete.

We deployed this solution in-house.

I now have a proof of concept with a FortiGate firewall and we are trying some test cases on it.

For now, this is not a product that I can recommend.

I would rate this solution a six out of ten.

We use this solution for connecting site-to-site and client-to-site VPN for two protocols, IPsec and SSL VPN. We use encrypted tunnels to achieve fully secure connectivity between sites and clients.

It gives me a very good, stable connection in all tunnels.

Of course, it improves my organization to achieve fully secure connectivity between sites and clients.

It has a good web filtering database and a good application control database in addition to intrusion prevention. Together, these give me confidence in our security.

All of the features in this solution are good. The most valuable is the IPsec VPN tunneling and SSL VPN tunneling, both site-to-site and client-to-site.

The log viewer is extremely helpful for analyzing all incoming and outgoing traffic.

I would like to have remote access to clients using a static IP for a certain period of time. This would allow me to log in to any client, remotely, with a known and fixed IP address.

This is the first solution that we implemented.

It's a suitable price and license.

We did not evaluate other options before choosing this solution.