One significant issue we have encountered is related to reporting. The reports should be more comprehensive and easier to organize. This is especially crucial for someone in my role as a CTO because I often need to review high-level information or present reports to auditors and the executive team. Currently, generating these reports involves a fair amount of manual work, such as extracting data from different sources, taking screenshots, and then compiling everything.

They should improve XDR and threat protection capabilities for zero-day attacks.

Endpoint protection is very slow. When we copy something, it takes too much time. Sometimes the email gateway is down, and the emails return to the sender. These are the two problems we face frequently.

The solution should release a feature similar to Zscaler, which would route all the traffic through my firewall when we connect to VPN. The product should provide zero trust.

The product's stability needs improvement.

There is room for improvement in performance and upgrades.

It is a bit expensive. It could be cheaper. There are many competitive products in the market, like Kaspersky,  McAfee Antivirus, and more. 

One aspect I'm examining is the MDR network detection with Sophos Firewall, which works well. I understand it can also integrate with other firewalls, but it's optimal with Sophos products, given the slight drawbacks when using non-Sophos solutions.

They should include better tools in the solution. Also, its pricing and stability need improvement.

In the future, I would like to see a better integration between the endpoint and firewall, just like how web proxy is available inside the antivirus and the endpoint protection. There is also security or protection for the gateway and the border gateway in Sophos that we need to configure separately. In general, the gateway, firewall, and endpoint Sophos offers are not optimized, which I feel can function better together.

With the level of AI in the hands of cybercriminals today, they have had a lot of success, and they continue to improve on their success. Hence, the only way forward is for any security solution to continue increasing the amount of data they have access to. Threat intelligence is one area any security company needs to expand because the better the data we have, the more precise a difference they can make regarding security. Threat intelligence is an area for improvement for MDR. Sophos MDR also needs to add more automation functions.

Sophos MDR lacks integration with MDM solutions.

Sophos should provide a demo of MDR so that potential customers can utilize it through a free trial for POC.

Sophos MDR's support and basic training of their devices could be improved. The solution's curriculum does not give clear information about its certifications.

The product's pricing could be less expensive.

Sophos MDR’s pricing is the biggest factor that needs improvement per customers and technical professionals. There could be a package or bundled subscription similar to Trend Micro. It will allow us to customize the package according to specific requirements.

Multitenancy features of Sophos Managed Threat Response should be improved. You cannot use the solution for multiple clients.

I don't have really anything to offer as far as improvements. With every customer I can, I deploy Intercept X. It works. It protects the workstation. It protects the server. The client doesn't take a big hit in terms of performance on a workstation or server. The deployment is simple.

The solution is expensive for customers. Its pricing could be better.

It could be more secure.

One of the limitations that we have found is with communications and the languages in different countries. In Vietnam, we are okay and it is not a big problem because we have a vendor, who is a Sophos partner.