Sophos Cloud Firewall (BYOL)
SophosReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
609 reviews
from
External reviews are not included in the AWS star rating for the product.
"Powerful Protection with Centralized Control"
What do you like best about the product?
The Administrator Perspective
I have managed sophos enviroments since 450 Days and the 2026 version of the Xstream Architecture is a massive leap forward. From an admin standpoint, the biggest "Qauality of life"
Synchronized Security: This is still the "Killer feature" having the firewall automatically isolate a compromised endpoint before it can move laterally is the only way a small IT team can sleep at night. It's saved us from manual containment at 2 AM more that once.
Xstream Fastpath: The way the hardware handles TLS1.3 inspection now is significantly better than the older 2023/24 models. We aren't seeing the performance "cliff" we used to hit when enabling deep packet inspection on high-traffic VLANs.
ZTNA integration: Moving away from traditional client-heavy VPNs to the built in ZTNA has simplified our remote workforce setup. It's much easier to explain "app-level access" to users than troubleshooting VPN "tunnels" that won't connect.
SD-WAN Orchestration: Our branch offices don't complain about VoIP jitter anymore. The point-and-click orchestration in sophos Central
for full mesh VPNs actually works as advertised. It manages the failover between our primary fiber and 5G backup without dropping active sessions.
Web Filtering: It's granular without being "pver-sesitive". We can allow specific SaaS tools like
Figma or GitHub while blocking the underlying data-exfilteration risks without breaking the sites CSS - a common issue with cheaper UTMs.
I have managed sophos enviroments since 450 Days and the 2026 version of the Xstream Architecture is a massive leap forward. From an admin standpoint, the biggest "Qauality of life"
Synchronized Security: This is still the "Killer feature" having the firewall automatically isolate a compromised endpoint before it can move laterally is the only way a small IT team can sleep at night. It's saved us from manual containment at 2 AM more that once.
Xstream Fastpath: The way the hardware handles TLS1.3 inspection now is significantly better than the older 2023/24 models. We aren't seeing the performance "cliff" we used to hit when enabling deep packet inspection on high-traffic VLANs.
ZTNA integration: Moving away from traditional client-heavy VPNs to the built in ZTNA has simplified our remote workforce setup. It's much easier to explain "app-level access" to users than troubleshooting VPN "tunnels" that won't connect.
SD-WAN Orchestration: Our branch offices don't complain about VoIP jitter anymore. The point-and-click orchestration in sophos Central
for full mesh VPNs actually works as advertised. It manages the failover between our primary fiber and 5G backup without dropping active sessions.
Web Filtering: It's granular without being "pver-sesitive". We can allow specific SaaS tools like
Figma or GitHub while blocking the underlying data-exfilteration risks without breaking the sites CSS - a common issue with cheaper UTMs.
What do you dislike about the product?
On area where Sophos Firewall could improve is in its user interface and overall ease of configuration. While it offers a wide range of powerful features, navigating through settings can sometimes feel unintuitive, especially for new users or those without deep networking experience. Certain advanced configurations require multiple steps and aren't always clearly documented, which can slow down deployment or troubleshooting. Improving the UI design and simplifying workflows would make the product more accessible without compromising its robust capabilities
What problems is the product solving and how is that benefiting you?
Sophos Firewall addresses several critical security and network management challenges, and the impact is pretty tangible in day to day operations.
As its core, its solves the problem of fragmented security. Instead of juggling multiple tools for threat detection, web filtering, VPN access, and application control, everything is unified in one platform. That consolidation reduces complexity and makes it much easier to monitor and respond to issue quickly.
Another big problem it solves is visibility. You get clear insights into who is using network, which applications are active, and where potential risks are coming from. the level of transparency makes its easier to enforce policies and optimize performance.
It also simplifies secure remote access. With built-in VPN options
As its core, its solves the problem of fragmented security. Instead of juggling multiple tools for threat detection, web filtering, VPN access, and application control, everything is unified in one platform. That consolidation reduces complexity and makes it much easier to monitor and respond to issue quickly.
Another big problem it solves is visibility. You get clear insights into who is using network, which applications are active, and where potential risks are coming from. the level of transparency makes its easier to enforce policies and optimize performance.
It also simplifies secure remote access. With built-in VPN options
User-Friendly Firewall with Robust Security and Easy Setup
What do you like best about the product?
I use Sophos Firewall for network security, and I appreciate that it helps in reducing network traffic and protects against threats entering the network. I like that with Sophos Firewall, I can block applications and filter web content effectively. The console is user-friendly, which makes managing the system easier. I also have the ability to restrict users from accessing unnecessary websites and applications and can control the bandwidth as needed. Additionally, the initial setup was very easy.
What do you dislike about the product?
less no.of Ports are available. there are less SFP Ports are there compare to other vendors
What problems is the product solving and how is that benefiting you?
I use Sophos Firewall to reduce network traffic and protect against threats. It allows me to block applications, filter web content, and manage bandwidth, all through a user-friendly console.
Centralized Sophos Group Policies That Simplify Multi-Location Firewall Management
What do you like best about the product?
Sophos central group policies you can manage / implement rules and policies multiple locations firewall thru central Sophos.
What do you dislike about the product?
sometime support team will take time to connect while we need urgent support.
What problems is the product solving and how is that benefiting you?
it has multiple input internet /lode balancer which switch internet connectivity automatically on backup line when your main line is goes to down. no need to extra effort or to manual mange.
Strong Security and Easy Management with Automated Threat Response
What do you like best about the product?
Strong security features, ease of management, and consistent recognition in industry rankings, It is especially valued for deep packet inspection, synchronized security, and automated threat response, making it a leading choice for enterprises and mid-sized organizations
What do you dislike about the product?
policy configuration less granular compared to its competitors
What problems is the product solving and how is that benefiting you?
Sophos addresses Cyber attacks with deep packet inspection and advanced threat protection.Sophos integrates with its endpoint security through Synchronized Security, automatically isolating compromised devices.
Simple cloud console and advanced protection with good integration with other Sophos tools
What do you like best about the product?
The best part is that they combine a cloud-based central console that is easy to manage, good integration with the rest of the Sophos security ecosystem, and an advanced level of protection (deep inspection, AI, secure VPN) without demanding significant internal IT resources. All of this at a reasonable price and with equipment that is easy to manage for SMB environments.
What do you dislike about the product?
Perhaps the performance of the teams against the hardware, the lack of very advanced features where other competitors are more powerful, and a somewhat slow and clunky management interface.
What problems is the product solving and how is that benefiting you?
Simple security for SMB environments, integrating with other Sophos Cybersecurity solutions, allowing for an environment with XDR solutions that are easy to implement and manage.
Strong Admin Capabilities and Feature-Rich Sophos Firewall
What do you like best about the product?
Sophos firewall offers strong administrative capability, with easy implementation and plenty of useful features. It includes options such as ISP load balancing, a DHCP server, web filtering, and application filtering, among others.
What do you dislike about the product?
The licensing costs for some services should be included and built in.
What problems is the product solving and how is that benefiting you?
We use Sophos Firewalls in HA mode for a range of services, including inter-school connectivity via IPsec, web filtering, application filtering, and daily reports. We also rely on them for notifications and other related functions.
Robust UTM with Free SSL VPN and MFA Authentication
What do you like best about the product?
It offers UTM features, along with a free SSL VPN and MFA authentication.
What do you dislike about the product?
HA failover is not working properly. It is impacting production because the failover is failing.
What problems is the product solving and how is that benefiting you?
SSL VPN with MFA, plus flawless UTM features. We use this firewall as our core firewall, and all of our internal servers sit behind it.
Cloud-Managed, But Lacking Modern Network Management Improvements
What do you like best about the product?
Sophos Firewalls has two major advantages: it’s a cloud-managed firewall, and it provides good customer-facing reports.
What do you dislike about the product?
Sophos firewalls haven’t changed much in terms of functionality in years. The configuration may come with a newer UI, but underneath it still feels like the same basic firewall.
What’s been most frustrating for me is that there still isn’t a straightforward way to manage VoIP—an extremely common part of any modern network—without having to drop into the CLI backend and disable VoIP inspection. It ends up being an all-or-nothing setting: either it’s on or it’s off.
I’ve run into a similar limitation with DHCP options. Yes, the feature exists and it has been added, but it’s still very basic and doesn’t really support more modern management approaches for other devices, like Unifi APs.
What’s been most frustrating for me is that there still isn’t a straightforward way to manage VoIP—an extremely common part of any modern network—without having to drop into the CLI backend and disable VoIP inspection. It ends up being an all-or-nothing setting: either it’s on or it’s off.
I’ve run into a similar limitation with DHCP options. Yes, the feature exists and it has been added, but it’s still very basic and doesn’t really support more modern management approaches for other devices, like Unifi APs.
What problems is the product solving and how is that benefiting you?
We initially deployed Sophos Firewall because we needed a way to manage firewalls in remote geographic locations where we couldn’t dispatch a technician. It also provided customer reports that met our clients’ requirements, which was an important part of why we chose it.
Sophos Firewall in Education
What do you like best about the product?
Integrates with Sophos antivirus to provide a unified management console.
What do you dislike about the product?
Logs are only really viewable using a 3rd party tool
What problems is the product solving and how is that benefiting you?
We currently run two Sophos firewalls in an active/passive high-availability configuration. This setup automatically fails over between the two units if our internet service provider experiences an outage.
Synchronized Security and Centralized Cloud Management That Meets All Our Needs
What do you like best about the product?
1. Synchronized Security
2. Deep Packet Inspection
3 Advanced Web And application Control
4 Centralized Cloud Management
2. Deep Packet Inspection
3 Advanced Web And application Control
4 Centralized Cloud Management
What do you dislike about the product?
Nothing as much , all good form me and full fill our requirement
What problems is the product solving and how is that benefiting you?
1. Protecting against Cyber Threats
2. Controlling User Internet Usage
3. Securing remote Access
2. Controlling User Internet Usage
3. Securing remote Access
showing 1 - 10