Sophos XGS Reviews

This solution is like our gateway to the internet. We use it for access control. 

This solution is very simple to manage. It's user-friendly and quite easy to configure. It's easy to communicate with the Sophos support team.

I would like to see a history of the monthly bandwidth utilization, the bandwidth consumption for a period of time. Right now, I know they have something where you can see the live bandwidth utilization when you go to reports. However, there is not a history where you can go back and say, "I want to see what was consumed during the last month." You can't get that history. I know there are other third-party tools that do that, but if Sophos could have it integrated into its file device, that would be cool. 

I would like to see them reduce the price.

I have had experience with this tool for about three years now.

This is a stable product. 

This solution is scalable. There are currently 250 systems connected to this solution. 

My experience with the Sophos technical team has been fantastic. I was trying to set up a VPN tunnel through a SAP X server, so I was having some challenges, and our consultant tried and then he just decided to set up an appointment with the Sophos technical team. Within a short period of time, we were able to pinpoint where the problem was coming from and we got the problem solved. I would rate the technical support as a five out of five.

Positive

The initial setup is quite easy. It's not a challenge. On a scale of one to five, where one is difficult and five is easy, I would give it a four. 

It was done in-house but we consulted a third party that is more experienced with Sophos.

The price of this solution is quite high. Currently in my country, in Nigeria, we are facing a lot of problems with products. The value of the naira and the dollar keep heating up, and it's not good for us here Nigeria, so the Sophos price is not friendly. I think the price needs to be worked on so that it can at least be commercially available to us here in Nigeria. I would rate the pricing as a three out of five.

Sophos is always my preferred solution. I've worked with Sophos, Fortinet, and MikroTik in terms of configuring VPN access to the routers. I find it very, very easy to do it on Sophos, so I prefer to use it instead of the other two solutions. 

I would rate this solution as a nine out of ten.

We primarily use the solution as a firewall.

The most valuable features are the Sophos management or the central management, including the reporting and managing of multiple firewalls using Sophos Central.

The synchronized security, which also integrates with the Sophos endpoint, is great. That's one of a few of the main features which is beneficial with Sophos XGS.

The solution is stable.

The setup is simple.

There were certain lacking capabilities, for example, the searching of its settings et cetera, previously in Sophos XG. There have been some features that were not visible or unavailable compared to the one here on Sophos XGS. Right now, Sophos XGS is stable with its current firmware and hardware versions. It’s gotten better.

I can’t speak to which features could be added.

As long as they just maintain the stability of the firmware version, we will remain happy.

Support is great, however, it can always be improved.

I’ve been working with the solution for one year. We’ve used it since 2021.

We’ve found the product to be stable. There are no bugs or glitches. It doesn’t crash or freeze. It’s reliable and the performance is good.

In general, the solution is scalable.

Its features and configuration can expand. As long as the engineer or the implementer knows which policies are needed, the Sophos firewall integrator can also help with that. If he or she does not know any complicated solution, Sophos support is also there to help.

I’ve had interactions with Sophos support.

They are actually quite responsive with their cases, as long as the open cases is properly informed or properly included with the right information.

They could always improve support a little bit.

Positive

The initial setup is just a simple set of options. Sophos also provides a lot of data sheets and tutorials online. During the initial setup, there is a guide, which the user can just follow as long as he or she knows their internal network. It’s pretty straightforward.

The maintenance isn’t too intense. However, it is on a case-by-case basis and depends on the complexity of the environment and size.

I really don't have visibility with the pricing. However, the price depends on the size of the box, which indicates that the more users you have, the bigger the box, the higher the price you have to pay.

I haven't had the opportunity to work with other solutions. There are a lot, like Palo Alto, which, in terms of security, are much better than Sophos, as people say. However, Sophos can also work well. It just depends on the company's complexity or preference in the firewall.

I'm currently an agent and a Sophos engineer here in the Philippines. We’re partners.

While we work primarily with on-premises deployments, it is also available on the cloud.

I’d rate the solution eight out of ten.

We are using it as a unified threat management system.

We use it on a daily basis. There are about 600 people using this solution in our organization.

The solution is deployed on-prem.

The threat management system and VPN are most valuable.

Reporting could be improved. The structure could be better because most of the reports aren't detailed.

It's stable for now.

It's scalable.

Initial setup was easy. I would rate it 4 out of 5.

Setup was done in-house.

I would rate this solution 9 out of 10.

We use it to secure the enterprise endpoint devices, whether they are servers, laptops, or mobile phones.

Security synchronization is one of the best features because it integrates the firewall with the endpoint devices.

It would be nice to have features like the network access control (NAC) that Cisco has for Identity Services Engine.

In the next release, I would also like to see an increase in the performance of the processing units.

I've been using Sophos XGS for about four years now.

The technical support is good. They have a support portal where you can log in a case and have direct support from one of the experts.

They are responsive and follow up closely, so I would give them a ten out of ten.

Positive

The initial setup is very user-friendly because they have graphical user interface options and command line interface options. I would give the initial setup a rating of five out of five.

It has three modes of deployment. You can have it deployed as physical hardware, as a virtual machine, or as software in the cloud.

We implemented it through an in-house team.

The pricing for Sophos is much better compared to that of Fortinet and Check Point. On a scale from one to five with one being expensive and five being competitive, I would rate Sophos' pricing at four.

The pricing can be for the hardware appliance and the license, or it can be subscription-based. It can be around 3000 USD up to 25,000 USD per year depending on the model or series of the hardware you choose to buy.

Sophos XGS is suitable for enterprise customers and SMBs.

Overall, I would rate Sophos XGS at eight out of ten.

I mostly use Sophos XGS for URL and web filtering and application control.

Sophos XGS' best features are simplicity and its built-in reporting tool.

Sophos XGS could be improved by adding a built-in hyper-converged solution.

I've been using Sophos XGS for three years.

Sophos XGS is very stable.

Sophos XGS is scalable.

Sophos XGS' technical support is very responsive.

Positive

The initial setup was quite simple, and the configuration took around an hour and a half.

Licensing for Sophos XGS is around $150 per unit, split into $100 for the hardware and $50 for the license. Sophos XGS is competitively priced.

I would rate Sophos XGS eight out of ten.

We are using Sophos XGS for basic purposes, such as the NAT rules it provides.

The most valuable features of Sophos XGS are the ease of use and powerful interface. 

In version 18 of Sophos XGS, the log details are not very good. However, in version 19 they are more detailed. The Fortinet FortiGate has better detail overall compared to Sophos XGS. They provide updates to the solution frequently, but they do not fix the problems that exist.

In the next release, the searching inside of Sophos XGS needs to improve. It is difficult to learn about the functionality and the modules. Additionally, there needs to be more automatic or less manual operations.

I have been using Sophos XGS for three years.

Sophos XGS is highly stable.

We have a small company therefore I am not sure about the scalability.

We have two people using this solution as administrators. The total number of users that are using the solution is approximately 200.

I have not used the support line directly from Sophos XGS, but I used the online knowledge site they have for support. They have good documentation.

The best support is provided by Cisco, Palo Alto, and Fortinet FortiGate because all the knowledge is available easily.

I rate support from Sophos XGS a four out of five.

Positive

The initial setup of Sophos XGS is not easy. 

The price of Sophos XGS is less than competitors worldwide. However, in Turkey the solution is expensive.

I have evaluated other solutions, such as Fortinet, Cisco, and Palo Alto, and the Sophos XGS has a more powerful interface. Fortinet FortiGate has too many options while Palo Alto is over more robust than Sophos XGS. However, if your company does not have a large number of users then Sophos XGS is best.

My advice to others is if you are going to purchase a firewall in Turkey, Sophos XGS is the best choice because of the dealers and support available. The second best in Turkey would be Fortinet FortiGate.

I rate Sophos XGS a seven out of ten.

We use XGS as a firewall, for web filtering, and network control. I'm an IT manager. 

The VPN is the best feature because I'm working a lot from home now. 

I think the earlier SG version was easier to configure and manage. The XG is a little different and somewhat more complicated. I'd like it to be easier to manage and configure.

I've been using this solution for three years. 

The solution is stable.

Right now we're having some issues but they're related to the environment and not the solution.

The customer support is not great, it takes them too long to respond. 

Neutral

The initial setup is very easy. 

I believe we pay for licensing every three years and I think it's around $1,800 which includes the hardware. It's a reasonable price. 

I recommend this solution and rate it eight out of 10. 

We normally use physical appliances for office and virtual appliances for datacenter.

XGS is similar to XG series but adds new Xstream Flow processors that are used to accelerate various functionalities that are normally done in x86 CPU.

Sophos will soon release SFOS v19 software which will utilize Xstream for even more functionalities like IPsec, SSLVPN, SDWAN and etc.

What I found most valuable in Sophos XGS is that it's very easy to manage.

Authentication with Azure AD needs improvement. It would be better if it could work directly without using local AD server. For comparison Fortinet FortiGate allows to use SAML authentication with Azure AD and does not require any local server. It is currently unknown to me, if or when it will be implemented on Sophos.

Local DHCP service also needs improvement. Windows DHCP service offers more functionality and is more flexible and easier to use. SFOS v18.5.3 added DHCP option functionality in the GUI - which previously worked only from CLI. 

I've been working with Sophos XGS since they came out. I cannot remember exactly the year and date, but it hasn't been so long, e.g. just one year.

It is very stable - have not had any issues.

The scalability of Sophos XGS is good. Normally we suggest the clients to use firewall as a service, since it gives more flexibility both for client and us, since usually we manage the client's firewall. There is a virtual version of the firewall which scales even more, since it can be upgraded to a license that offers more RAM and CPU cores. For us, it scales very well, e.g. I'm giving it the maximum score: ten out of ten.

If a client is looking for a new firewall, then we normally need to consider as much information as possible (user count, weight per user, LAN throughput, WAN throughput, functionalities and etc). If a client wants to pick a solution for larger environment, then we also ask recommendation from Sophos to get the most optimal solution.

Positive

The initial setup for Sophos XGS is very easy. From cloud it can be deployed even faster, since it allows to create configuration templates.

The ratio of price and functionality is good.

Licensing cost depends on particular model and required functionality:
- It is possible to use the firewall without any license, but then it will work only as port based firewall.
- Normally we suggest to use at least Standard License.
- Licensing cost for single appliance or active/passive HA cluster is the same - only 1 license.
- Active/Active cluster requires 2 licenses and performance gain is very small. It is better to use more powerful appliance. 

We are Sophos Gold partner and mainly like to use Sophos XGS firewalls.
If it a requirement by client, then we can also offer non-Sophos firewall solutions.

There are multiple models of Sophos XGS that we use, e.g. we use both desktop  and 1U sized models.

Sophos XGS can be fully cloud managed, and it's possible to deploy it directly from the cloud, that you installed the hardware, and maybe I have to use an ESB key, though I'm not sure. We haven't tried deploying it that way yet.

The only difference between Sophos XGS and Sophos XG is the software version that is supported on the hardware. The difference will be when the version 19 software comes up, as it will not work on Sophos XG.

I recommend Sophos XGS to others who are thinking of implementing it. I recommend for them to use it. Sophos firewall can be also used without additional firewall, but we strongly suggest using Standard license, which offers application filtering and IDS/IPS.