"Powerful Protection with Centralized Control"
What do you like best about the product?
The Administrator Perspective
I have managed sophos enviroments since 450 Days and the 2026 version of the Xstream Architecture is a massive leap forward. From an admin standpoint, the biggest "Qauality of life"
Synchronized Security: This is still the "Killer feature" having the firewall automatically isolate a compromised endpoint before it can move laterally is the only way a small IT team can sleep at night. It's saved us from manual containment at 2 AM more that once.
Xstream Fastpath: The way the hardware handles TLS1.3 inspection now is significantly better than the older 2023/24 models. We aren't seeing the performance "cliff" we used to hit when enabling deep packet inspection on high-traffic VLANs.
ZTNA integration: Moving away from traditional client-heavy VPNs to the built in ZTNA has simplified our remote workforce setup. It's much easier to explain "app-level access" to users than troubleshooting VPN "tunnels" that won't connect.
SD-WAN Orchestration: Our branch offices don't complain about VoIP jitter anymore. The point-and-click orchestration in sophos Central
for full mesh VPNs actually works as advertised. It manages the failover between our primary fiber and 5G backup without dropping active sessions.
Web Filtering: It's granular without being "pver-sesitive". We can allow specific SaaS tools like
Figma or GitHub while blocking the underlying data-exfilteration risks without breaking the sites CSS - a common issue with cheaper UTMs.
What do you dislike about the product?
On area where Sophos Firewall could improve is in its user interface and overall ease of configuration. While it offers a wide range of powerful features, navigating through settings can sometimes feel unintuitive, especially for new users or those without deep networking experience. Certain advanced configurations require multiple steps and aren't always clearly documented, which can slow down deployment or troubleshooting. Improving the UI design and simplifying workflows would make the product more accessible without compromising its robust capabilities
What problems is the product solving and how is that benefiting you?
Sophos Firewall addresses several critical security and network management challenges, and the impact is pretty tangible in day to day operations.
As its core, its solves the problem of fragmented security. Instead of juggling multiple tools for threat detection, web filtering, VPN access, and application control, everything is unified in one platform. That consolidation reduces complexity and makes it much easier to monitor and respond to issue quickly.
Another big problem it solves is visibility. You get clear insights into who is using network, which applications are active, and where potential risks are coming from. the level of transparency makes its easier to enforce policies and optimize performance.
It also simplifies secure remote access. With built-in VPN options
User-Friendly Firewall with Robust Security and Easy Setup
What do you like best about the product?
I use Sophos Firewall for network security, and I appreciate that it helps in reducing network traffic and protects against threats entering the network. I like that with Sophos Firewall, I can block applications and filter web content effectively. The console is user-friendly, which makes managing the system easier. I also have the ability to restrict users from accessing unnecessary websites and applications and can control the bandwidth as needed. Additionally, the initial setup was very easy.
What do you dislike about the product?
less no.of Ports are available. there are less SFP Ports are there compare to other vendors
What problems is the product solving and how is that benefiting you?
I use Sophos Firewall to reduce network traffic and protect against threats. It allows me to block applications, filter web content, and manage bandwidth, all through a user-friendly console.
Centralized Sophos Group Policies That Simplify Multi-Location Firewall Management
What do you like best about the product?
Sophos central group policies you can manage / implement rules and policies multiple locations firewall thru central Sophos.
What do you dislike about the product?
sometime support team will take time to connect while we need urgent support.
What problems is the product solving and how is that benefiting you?
it has multiple input internet /lode balancer which switch internet connectivity automatically on backup line when your main line is goes to down. no need to extra effort or to manual mange.
Strong Security and Easy Management with Automated Threat Response
What do you like best about the product?
Strong security features, ease of management, and consistent recognition in industry rankings, It is especially valued for deep packet inspection, synchronized security, and automated threat response, making it a leading choice for enterprises and mid-sized organizations
What do you dislike about the product?
policy configuration less granular compared to its competitors
What problems is the product solving and how is that benefiting you?
Sophos addresses Cyber attacks with deep packet inspection and advanced threat protection.Sophos integrates with its endpoint security through Synchronized Security, automatically isolating compromised devices.
Simple cloud console and advanced protection with good integration with other Sophos tools
What do you like best about the product?
The best part is that they combine a cloud-based central console that is easy to manage, good integration with the rest of the Sophos security ecosystem, and an advanced level of protection (deep inspection, AI, secure VPN) without demanding significant internal IT resources. All of this at a reasonable price and with equipment that is easy to manage for SMB environments.
What do you dislike about the product?
Perhaps the performance of the teams against the hardware, the lack of very advanced features where other competitors are more powerful, and a somewhat slow and clunky management interface.
What problems is the product solving and how is that benefiting you?
Simple security for SMB environments, integrating with other Sophos Cybersecurity solutions, allowing for an environment with XDR solutions that are easy to implement and manage.
Strong Admin Capabilities and Feature-Rich Sophos Firewall
What do you like best about the product?
Sophos firewall offers strong administrative capability, with easy implementation and plenty of useful features. It includes options such as ISP load balancing, a DHCP server, web filtering, and application filtering, among others.
What do you dislike about the product?
The licensing costs for some services should be included and built in.
What problems is the product solving and how is that benefiting you?
We use Sophos Firewalls in HA mode for a range of services, including inter-school connectivity via IPsec, web filtering, application filtering, and daily reports. We also rely on them for notifications and other related functions.
Robust UTM with Free SSL VPN and MFA Authentication
What do you like best about the product?
It offers UTM features, along with a free SSL VPN and MFA authentication.
What do you dislike about the product?
HA failover is not working properly. It is impacting production because the failover is failing.
What problems is the product solving and how is that benefiting you?
SSL VPN with MFA, plus flawless UTM features. We use this firewall as our core firewall, and all of our internal servers sit behind it.
Cloud-Managed, But Lacking Modern Network Management Improvements
What do you like best about the product?
Sophos Firewalls has two major advantages: it’s a cloud-managed firewall, and it provides good customer-facing reports.
What do you dislike about the product?
Sophos firewalls haven’t changed much in terms of functionality in years. The configuration may come with a newer UI, but underneath it still feels like the same basic firewall.
What’s been most frustrating for me is that there still isn’t a straightforward way to manage VoIP—an extremely common part of any modern network—without having to drop into the CLI backend and disable VoIP inspection. It ends up being an all-or-nothing setting: either it’s on or it’s off.
I’ve run into a similar limitation with DHCP options. Yes, the feature exists and it has been added, but it’s still very basic and doesn’t really support more modern management approaches for other devices, like Unifi APs.
What problems is the product solving and how is that benefiting you?
We initially deployed Sophos Firewall because we needed a way to manage firewalls in remote geographic locations where we couldn’t dispatch a technician. It also provided customer reports that met our clients’ requirements, which was an important part of why we chose it.
Centralized security management has simplified remote access and protected multiple branches
What is our primary use case?
My main use case for Sophos Firewall is security purposes. I use Sophos Firewall to block unwanted URLs, unwanted categories, and for data loss prevention in my day-to-day work.
In addition to blocking unwanted URLs, we also use the VPN for remote access VPN and site-to-site VPN, blocking suspicious sites, and some unwanted categories such as pornography.
What is most valuable?
Sophos Firewall stands out to me because it is mainly easy to use, and its dashboard is very straightforward. The SD-WAN feature of Sophos Firewall is very good; via SD-WAN, we can route a particular user and access a particular site with a specific ISP.
The SD-WAN feature helps my organization by providing connectivity to my remote sites, as we have multiple branches, and we connect all my branches via SD-WAN VPN.
Sophos Firewall IPS and antivirus are very good, and we use that.
Sophos Firewall has positively impacted my organization by increasing security, reducing my time, and allowing us to manage multiple firewalls via Smart Console or Sophos Central, where we can push the policy centralized from all the firewalls.
Centralized policies have made management easier for me, and the error rate is relatively small.
What needs improvement?
I believe Sophos Firewall can be improved, especially inconsistency across the deployment, and some GUI can be slow.
In addition to UI speed, we need improvements in end-to-end deployment such as clear packet flow diagrams.
For how long have I used the solution?
I have been using Sophos Firewall for 1.8 years.
What do I think about the stability of the solution?
Sophos Firewall is stable in our network.
What do I think about the scalability of the solution?
Sophos Firewall scalability is good, with a wide hardware range suitable for SMBs to large user environments, cloud, and centralized management.
How are customer service and support?
Customer support is really good; we always get resolutions on time.
Which solution did I use previously and why did I switch?
Recently, we used Checkpoint as a different solution.
What was our ROI?
I have seen a return on investment; it has saved money, reduced staffing needs, and saved time. It is easy to use, and I can manage all my sites via Sophos Central.
What's my experience with pricing, setup cost, and licensing?
The pricing of Sophos Firewall is easy to manage.
Which other solutions did I evaluate?
Before choosing Sophos Firewall, we evaluated options such as Fortinet and Palo Alto.
What other advice do I have?
My advice for others looking into using Sophos Firewall is to start simply from day one. With user concurrent sessions, we can achieve good security, which is very good in Sophos Firewall, and endpoint protection support is really good.
My additional thoughts are that Sophos Firewall policies are best suited for SMB and mid-sized networks, simple to moderately complex architectures, and high complexity multi-data center or automation-heavy environments, both delivering strong security.
Sophos Firewall in Education
What do you like best about the product?
Integrates with Sophos antivirus to provide a unified management console.
What do you dislike about the product?
Logs are only really viewable using a 3rd party tool
What problems is the product solving and how is that benefiting you?
We currently run two Sophos firewalls in an active/passive high-availability configuration. This setup automatically fails over between the two units if our internet service provider experiences an outage.
