Used in production for 4 months
We are using the Auto-Scaling solution with the WAF feature to protect 3 of our customer's web applications as part of a "shared security tier" model, split over multiple peered VPCs, and so far the UTM has been great. It has done most of what has been asked of it with no failures. Even on the minimum recommended size of m4.large for the controller and c4.large for the workers, it has not needed to scale up once yet.
We also use it for support users dialling in to AWS via the SSL VPN, and it is intuitive and easy to support via the User Portal, even with 2FA turned on.
The only criticism is that Sophos Support have not been great at supporting the Auto-Scaling model in AWS, it is almost as if they have had little to no training on it and several times I have had to explain it to them in full before any sort of support is necessary. I did however have great support from the After-Sales team which more than made up for it.
So far we have not updated the firmware on the solution for fear of it falling over, the documentation on this (updating the CF template to get the latest Up2Date) is pretty basic and doesn't fill me with confidence.
Bottom line is: The UTM auto-scaling does its job and it does it well, however the Support (and we are paying for Premium support) leaves much to be desired.
The best firewall solution for any business small to large!
What do you like best about the product?
How through it is. It protects EVERY aspect of our data coming in and going out. The reporting and alerts are fantastic in assisting in tracking down issues within the network.
What do you dislike about the product?
Sometimes it can be a little overwhelming when setting up access to certain rules, ports, sites, etc. But Sophos support is spot on and always there to help.
What problems is the product solving and how is that benefiting you?
Keeps all of our data safe, keeps our users (rather they be guests or employees) safe, we don't have to worry about data breaches. Peace of mind.
Recommendations to others considering the product:
If you are worried about network security, look no further.
Greatest Firewall/UTM Product I Have Ever Used
What do you like best about the product?
Simplicity. Interface is superb and the ability to quickly configure advanced routing, static routes, DNS, DHCP relays using object-based configurations just makes the unit so easy to use. I don't have time to work through Cisco router CLI, this Sophos UTM does the job of a router and more with the time to configured about 1/3 of the time required for other vendors. The logs are extremely clear to read through and identify issues if reported by end users. And let me not forget that the Up2Date firmware process is so easy, when you have to do firmware updates on other appliance types you immediately miss the convenience.
What do you dislike about the product?
POP3 Scanning requires Accounts, although it does scan POP3 messages, it is unclear how to configure it properly from the beginning. A bit too much research required to get POP3 scanning running smoothly
What problems is the product solving and how is that benefiting you?
Improved Performance for End-Users across the board. Simplified Security policies by Network, User, User Group, Time-Based Policy, Granular Categorisation and recategorisation.
Recommendations to others considering the product:
If you want to be able to deploy and managed reliable and secure appliance, the Sophos UTM running UTM9.x is the right choice. The ability to centrally manage and monitor all appliances from a Sophos UTM manager with no addiitonal licensing is invaluable. The TotalProtect(FullGuard) license/subscription includes warranty for the hardware, and the High Availability is extremely effective and easy to support.
eaglefree
I'm new to this site im just looking and checking it out and see how it works........................................
.................................................I'm new in this but I hope to know better and to get to.know the program first........................
.
.
........
