One primary use case for Sophos Cloud Optix is cloud visibility. I use it for compliance requirements and improving end user experience. The solution provides a unified dashboard for multi-cloud environments, allowing analysts to easily monitor assets.
External reviews
External reviews are not included in the AWS star rating for the product.
Unified cloud monitoring elevates asset visibility while AI-driven enhancements needed
What is our primary use case?
What is most valuable?
I find Cloud Optix to be a valuable solution since it provides a single, unified dashboard to monitor cloud assets, such as AWS and Azure. It includes features like vulnerability management, allowing for visibility into cloud infrastructure at a granular level, highlighting potential loopholes, and suggesting corrective actions. This makes it valuable within a managed service provider's ecosystem or SOC ecosystem.
What needs improvement?
Sophos should enhance its AI-driven detection features and anomaly detection. The solution focuses on cloud security posture management. Fortinet, having acquired Lacework, seems to be a step ahead in this regard, emphasizing the need for Sophos to compete with standalone market leaders. Furthermore, integrating automation features like SOAR could significantly improve its functionality.
What do I think about the stability of the solution?
I rate the stability of Cloud Optix as eight out of ten.
What do I think about the scalability of the solution?
I rate the scalability of Cloud Optix as nine out of ten.
How are customer service and support?
I find Sophos support to be great, especially from a firewall perspective. However, I faced some issues while integrating the product with Azure or M365 into Cloud Optix. I suggest Sophos enhance their integration support to allow seamless integration without manual intervention.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I migrated from Symantec to several other products, as I work on multiple solutions like Sophos, CrowdStrike, Cortex XDR, Cygnal, and Microsoft Defender for endpoint security. Being an MSSP provider requires me to manage various security solutions.
How was the initial setup?
I found the initial setup of Cloud Optix to be straightforward.
What's my experience with pricing, setup cost, and licensing?
I find the price of Sophos solutions to be competitive. It is neither the cheapest nor the most expensive option available. There are other solutions in the market that are less expensive.
Which other solutions did I evaluate?
Cloud Optix hasn't been marketed aggressively in India compared to other Sophos products. It mainly faces competition from cloud-native solutions within AWS and Azure, as well as Lacework, which is gaining traction in the market.
What other advice do I have?
I rate Sophos Cloud Optix seven out of ten overall.
I recommend it for any size of company, considering their current ecosystem and workload. It's particularly suited for those in a Sophos ecosystem, or working with AWS and M365. An improvement in anomaly detection and integration with SOAR-type automation would make it even more competitive.
A secure and stable endpoint scanner that needs to provide its users a better customer training
What is our primary use case?
Sophos Cloud Optix is the endpoint scanner for the workstations at my company, and they control the firewall and the servers. So it provides endpoint protection with Sophos Firewall Manager.
How has it helped my organization?
It prevents malware and antivirus, so if you have a file on your system that you suspect to be malicious, it quarantines it and locks it away.
What is most valuable?
The most valuable feature for me would be the solution's endpoint protection.
What needs improvement?
I guess that customer training is an area that needs improvement. What I've noticed is that we are not best trained for the software we might purchase, where you might discover later, "you could do that" after buying tools or software to do the same thing you could do with just one tool or software.
The major issue that I would notice and know is that we are not always as best possibly trained for the software that we may purchase. So, after a while and after some digging, you may find out that software or tools could actually do something else. Then, you may end up buying two pieces of software to do the same thing that one could do. It's not a problem with Sophos but an issue across other pieces of software, including Veeam, which I would say is a rudimentary backup that you just use as a backup for virtual machines. You have alternative backups where you would only be backing up versions of what may have been updated, accounting for faster and more precise backups.
In the future, I would like to see email integration to deal with phishing and spam.
For how long have I used the solution?
We have been using Sophos Cloud Optix for more than two years in our company. Also, I am not sure about the version of the solution I am using.
What do I think about the stability of the solution?
I would rate the solution's stability an eight out of ten.
What do I think about the scalability of the solution?
I rate the solution's scalability a six out of ten.
How are customer service and support?
I have never dealt with technical support.
How was the initial setup?
The setup was a little bit complex. I would say that its complexity was at an intermediate level because its users had to set up their rules in Sophos, while in comparison, Coros would just require you to click a few buttons to build your filters and catchphrases, and after that, you can go forward.
What was our ROI?
I have experienced a return on investment using the solution in our company. We had a fair return on our investment.
What's my experience with pricing, setup cost, and licensing?
Regarding the pricing for Sophos Cloud Optix, I would say that it was a very good price.
Which other solutions did I evaluate?
When I was looking around, I saw that Coro dealt with phishing and spam emails, and it really impressed me because that took a lot off of my plate.
For me to do it, I would have put rules that rerouted the emails to me, and then I would have to sit at my desk and release or check the emails coming through, whereas Coro moves it to a SysTrack folder, and you or any of the users can handle it as they go along.
What other advice do I have?
I would suggest those planning to buy the solution get some good training on the solution since doing so can help you possibly do more than what you are currently doing.
I rate the overall solution a seven and a half out of ten.