Really good product

• By Liang
• on 07/06/2018

I'm really not sure why this product is getting so much negative reviews. Here's my 2 cents:
1. This is probably the only device that can give you VPN + MFA (a Sophos mobile app soft token) right out of the box. Other big name network security devices usually require you to integrate with another service like Okta or add another server like a RADIUS server.
2. Has multiple Site to Site VPN and Remote Access VPN protocols builtin.
3. Can directly dump its log to CloudWatch logs, other network devices require you to add another syslog server to do the same thing
4. Has great IPS, IDS, Firewall functionalities, it is actually difficult to outgrow this device's capability.
5. Sophos charges $.1/hr for t2.small. You have to pay multiple of that price to get equivalent features from large vendors. And you would have to pay $$$$ to hire a competent network engineer to duplicate Sophos features on a vanilla linux box.
6. I've called Sophos Technical Support @ 1 888 767 4679 for difficult problems, such as configuring Sophos in a complicated VPC setup, ask them to explain vague documentations, work some obscure features, etc. Their support has been patient, staying on the phone for hours to diagnose the problems. And the support is getting a lot more AWS knowledgable over the past 2 years I've been using Sophos. So good job Sophos!
I've deployed and have seen deployed 10s of Sophos in a variety of projects for different tasks, remote access VPN, site to site VPN, NAT-T, WAF, packet inspection, firewalls etc. This little device has been solid.