Sophos MDR Reviews

We use Sophos MTR for three of our customers, and we're proposing it for a fourth. We sell Sophos Intercept X Advanced with EDR and MTR Advanced. All of this is managed through Sophos Central and just integrated into the endpoint for both workstations and servers, so we see alerts, problems, and cases opened. 

Sophos MTR will stop the threat as it is happening. Intercept X, which is a part of it, has the ability to roll back, so the attack is undone. And then the advanced edition of MTR lets me handle the threat by talking on the phone. I don't have to deal with it. I don't have to just go through emails back and forth. We don't have to pay extra for Rapid Response services. If something is happening, they're right on top of it. And there are all the automatic features of the firewall that are interconnected with the endpoints. The firewall has the ability to isolate a compromised workstation and stop it from communicating anywhere on the network. It's called Synchronized Security and we implemented that everywhere we can. The firewall management and the endpoint management are all in the Sophos Central

I don't have really anything to offer as far as improvements. With every customer I can, I deploy Intercept X. It works. It protects the workstation. It protects the server. The client doesn't take a big hit in terms of performance on a workstation or server. The deployment is simple.

I've been using Sophos MTR since it first became a product, so two or three years now.

It's cloud-based, it's a monitoring solution. Nothing MTR does affect the workstation. It's the antivirus scanning agent that is called Sophos Central Intercept X. That's what's on the workstation. Once in a great while, an update fails, but by and large, it's rock solid. We've had no problems with it compared to some of the other products that we're trying to get customers to move away from as renewals fall off. Again, I won't mention the product, but I've got a customer with 900 plus workstations, and I can say for quite a bit of money, she'll just consider changing. But so far she hasn't been able to find the bandwidth to change.

As far as we know, it has unlimited scalability.

The MTR tech support has been phenomenal.

The setup is literally nothing as long as you're using Intercept X on the endpoint as well as the Intercept access to Sophos Central Intercept X that is installed and running on each of your workstations servers and workstations. And those are managed from within the Sophos Central Cloud. If you don't have that, then there would be a lot of setup. But if you're already a Sophos Central customer, engaging with MTR is basically just accepting the contract. It's really nothing more than that.

It competes very well with other similar products. One of the Sophos products I put in for a customer was two and a half times less expensive than the competing product. 

I would rate Sophos MTR as a 10 out of 10 based on my experience with customers.

The solution's licensing plans are very flexible. Also, it has good performance.

The solution is expensive for customers. Its pricing could be better.

We have been using the solution for the last six months.

The solution is stable.

The solution is easy to scale. We have an enterprise client base.

The solution's technical support is excellent.

Positive

We used Rapid7 earlier. In comparison, Sophos has a flexible licensing and assurance part. It has good references from all over the world in terms of deployment.

The solution's deployment takes one or two months to complete.

A team from Sophos itself does the solution's implementation.

The solution has subscription-based pricing plans.

I rate the solution an eight out of ten. If you want to outsource security operations, you can look for Sophos MDR.

It is stable and scalable. It has good technical support.

It could be more secure.

I've been using this solution for one year. It's a cloud-based solution.

It is very stable.

It is a scalable solution.

Sophos has good technical support.

I have recommended this solution and would rate it at five on a scale from one to ten.

The most valuable feature is threat hunting.

One of the big advantages is that we can collaborate with Sophos' support, and they will show us the problems. 

One of the limitations that we have found is with communications and the languages in different countries. In Vietnam, we are okay and it is not a big problem because we have a vendor, who is a Sophos partner.

My company has been using Sophos Managed Threat Response for more than two years. It was installed before I joined the company.

We have more than 1,000 users.

The technical support is quite good, although sometimes the response time is quite long. Then again, maybe I'm a difficult customer.

Prior to this, we used Sophos EDR but after that, we upgraded to the Managed Threat Response. It has additional benefits that we were interested in.

Overall, Sophos is working well in our organization and we plan to continue using it. It is a good product and I recommend it because it is centralized and in my opinion, it is one of the best security products available on the market. It has both antivirus and firewall support. 

I would rate this solution an eight out of ten.