Sophos UTM Other Advice

AH
Owner / Network Security Engineer at Texarkana IT

I rate Sophos UTM nine out of 10. I think Sophos UTM is pretty close to perfect.  I wish they weren't discontinuing the UTM line. They're forcing all of us partners to switch to XG. XG has a lot of AI integrated into it, so it's probably more secure, and there are more features. At the same time, it's a lot harder to work on, and I don't care for the UI. I like the way that the UTM is laid out.

You get out of it what you put into it. That's true of any security appliance, whether Sophos, Barracuda, WatchGuard, Juniper Systems, etc. If you want to secure your networks, this is a great device, but you have to put some time into it. You need to understand your customer's environment. I like to lock it down and create exemptions for things that they need. That way I don't have to waste my time cleaning up viruses, ransomware, and all these threats that happen all the time.

View full review »
MG
Asst General Manager(C&IT) at NMDC Ltd

In India Cyberoam, which has been taken over by Sophos, has a vast support network and loyal user base. Migration to Sophos was the logical path. Further, pricing for the upgrade was very competitive as Sophos wanted to retain existing customers.

View full review »
SherifFouad - PeerSpot reviewer
ICT Manager at a mining and metals company with 1,001-5,000 employees

I would rate this solution as eight out of ten.

View full review »
Buyer's Guide
Sophos UTM
March 2024
Learn what your peers think about Sophos UTM. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
768,578 professionals have used our research since 2012.
Fathi Kharfi - PeerSpot reviewer
Head Of Network & Technical Support at Tadhamon International Islamic Bank

I'd recommend the solution to others.

I would rate it nine out of ten.

View full review »
NAGESWARARAO KORUKONDA - PeerSpot reviewer
Senior Manager IT at KMV Group

We're a customer and end-user.

I'm not sure which version of the solution we're using. I do not have the version number on hand. 

Overall, I would rate the solution eight out of ten. I'd recommend the solution to others. 

View full review »
Mohammed_Sajid - PeerSpot reviewer
Information Technology Network Administrator at abl

I rate the solution an eight out of ten. 

View full review »
ML
Network and infrastructure manager at Sonysugar

Sophos UTM has improved our network's threat detection and response. It has been good so far because we don't have many attacks. We use the solution's web filtering feature for our organization's security. We use the firewall to protect our endpoint equipment and protect against any infiltration in our network. We also use the solution’s VPN feature.

Around one or two people are required for the solution’s maintenance. I would recommend the solution to other users because it has helped us. The solution's installation and deployment are seamless, and its protection is secure.

Overall, I rate the solution ten out of ten.

View full review »
JN
Technical Services Lead at Telenet Solutions

Sophos UTM is a good tool, especially for SMBs. Sophos UTM has a lot of features that enterprise-sized businesses ask for, but they don't really work very well. For SMBs, the product's features are very good. The setup phase of Sophos UTM can be carried out quickly. In Sophos UTM, it is easy to troubleshoot.

I rate the overall tool a seven out of ten.

View full review »
NA
Head of Operations at Intersect Technologies

I recommend Sophos UTM, Sophos Access Points, Sophos Endpoint, and Sophos Switches to other users. Overall, I rate this solution a ten out of ten.

View full review »
MM
Senior Network Engineer at a computer software company with 11-50 employees

Sophos UTM is a comprehensive product that does the job that it should. They have another product now, called the XG firewall, that covers everything that UTM does not. The best part about this is that you can run the XG firewall on the same hardware where UTM is installed. This means that if you're thinking that Sophos UTM is not good for you, you can always migrate to the XG firewall. That said, I have never had a problem setting up UTM and can't think of a problem that I couldn't solve with it.

Overall, UTM is good, but if you want something better that can handle more complex rules then you can use the XG firewall. My only complaint is that they limit the bandwidth, depending on the model.

The suitability of this product depends on the customer's needs. If they don't need really complicated firewall rules, yet want to protect the network and want really good web filtering, then I recommend using Meraki. If on the other hand, they have a really complicated setup and want better filtering, then Sophos is the better option.

Also, if you have your own web server or mail server on-site, then I recommend Sophos. If instead, you have a normal office network with mail stored in the cloud, then I recommend Meraki.

I would rate this solution a nine out of ten.

View full review »
AH
Head of IT

For the time being, it is enough for us. As I previously stated, some companies that use Sophos may be unfamiliar with the full range of Sophos protocol offerings.

Before you start implementing Sophos UTM  be aware of the protocols.

I would rate Sophos UTM an eight out of ten.

View full review »
RR
Head of Data Link at Telecom Egypt

I'd not recommend this solution. I'd rate it a four out of ten.

View full review »
NK
IT Manager at Cartlis

I am a Sophos customer.

I'm using UTM for home use only. It's only four 50 IPS.

I'd rate the solution at a ten out of ten. Overall, it's worked really really well. Everything from the updates to the signatures has been very helpful for our business. 

I would recommend this product to other users and other organizations. 

View full review »
sugoi - PeerSpot reviewer
Server analyst at EJCLME Inc.

I recommend you complete the solution's training because it is pretty good. Rely on the documentation and any tech training available.

I rate the solution a nine out of ten. 

View full review »
Rana Chaudhury - PeerSpot reviewer
Consultant at KARLE INFRA PRIVATE LIMITED

It is easy to install and transparent solution. I would recommend using the solution. I would rate it a ten out of ten. 

View full review »
Walid Fawzy - PeerSpot reviewer
Network and System Engineer at Al-Watania Poultry (Egypt)

I have experience with Sophos UTM and all its versions within my company.

My rating for Sophos UTM is eight out of ten. I'm not giving the solution a perfect score because of load balancing and social media scanning issues.

My company is a Sophos customer.

View full review »
YA
Network and Security Engineer at ONB

The maintenance of the solution is easy, the documentation is very rich in content, and the report information is good. 

I rate Sophos UTM an eight out of ten.

View full review »
AH
Owner / Network Security Engineer at Texarkana IT

I would rate Sophos UTM a strong eight. I'm not giving it a ten because they're putting all their efforts into the XG model, so the UTM model will probably be phased out before long. I love the security of the XG. It's better with artificial intelligence and all of this type of stuff, and you can manage it from the Sophos Central Cloud. But Astaro ASG, now Sophos UTM, was the first unified threat management system and everybody else was copycatted it. I think its web filtering's great. If there are any security vulnerabilities, it's the fault of the administrator configuring the product, not the solution itself. You can lock networks down tight with this if you know what you're doing.

View full review »
AP
Manager IT and Security at Health Street

If you're running a full Windows-based shop you're going to have a lot more options, so make sure you shop around. If you're running a Mac-based shop like we are, Sophos is definitely the way to go. Just make sure you can afford it.

Regarding how well Sophos integrates with other products, so far we haven't integrated it with anything. We have it on the servers and we have it scanning our Amazon accounts, but that's it. The integration with Amazon is cool. Maybe they could work on that because it seems like a newer feature. You can see what's available but not really do anything yet.

For the features, how well it works, and how easy it is to use, I would give Sophos a ten out of ten. Overall, I would give it a nine because it is very costly compared to all competitors.

View full review »
TG
It manager at MMA2

I rate Sophos UTM an eight out of ten.

View full review »
BS
IT Administrator at Vegol

I'm a user and a consultant.

I'd advise potential new users that they should let someone that knows how to do it set it up fast. You should work with someone that knows how to do it.

I'd rate it an eight out of ten. 

View full review »
Hassan Moussafir - PeerSpot reviewer
Information Security Senior Expert at Wafaassurance

We're a custoer and an end-user.

When Cyberoam was acquired by Sophos, we migrated to the new hardware and new solution in Sophos.

We've been very happy with its capabilities. We would rate the solution at a nine out of ten.

I'd recommend, if a company sincerely wants to try out Sophos, that they test everything before implementation. It will help them understand what the solution can do and how to implement it into their infrastructure. 

View full review »
WY
IT Engineer at Wise Communication

I recommend testing this product before purchase. It's a good solution and I rate it 10 out of 10. 

View full review »
Saurabh Bhansali - PeerSpot reviewer
Head of IT at Venus Jewel

I rate Sophos UTM eight out of 10.

View full review »
JD
IT Manager at Manual Workers Union

We are on the latest version of the solution.

We are customers.

I would rate the solution at a nine out of ten. We are very happy with it. I would recommend it to others.

I'd advise new users that, if they are going to go with the cloud option, that issues related to maintenance is actually handled within the cloud. The rollout is pretty smooth.

View full review »
ZE
Pre-sales manager at National Information Technology Company

My recommendation is that businesses should go for the XG version, not the SG because the XG version of Sophos offers next-generation firewall support and has more improvements.

Sophos XG is the next generation firewall that is not available on the UTM version. The difference is in the features between the two and how you deploy them. 

Sophos XG version covers what is in the SG version plus additional bonuses: the dashboard, the heartbeat between the firewall and the input, etc. 

I advise first evaluate, know your network, know your needs, and plan for the upcoming two or three years before you purchase. 

Get in touch with the vendors because these days every vendor wants to sell. They are willing to help the customers and willing to show them what they will get. 

Make sure you evaluate properly many platforms. Don't just go with one vendor. Go with two or three vendors. Evaluate and then short-list and choose the best for you.

The rating has to have criteria: 

  • On performance, I would give Sophos UTM a 10 out of 10 rating. 
  • On price, it is a long discussion because you can get a discounted price if you are an integrator. 
  • As a user and a customer, I would give Sophos UTM a 9 out of 10 rating.
View full review »
AM
IT Head at Dee Development

I rate the solution eight out of 10. 

View full review »
it_user215397 - PeerSpot reviewer
CEO, Technologist with 51-200 employees

The product has a shallow and a deep end. Getting a small business/SoHo running up quickly and reliably is straight forward, but the deep end takes some technical skills, just like any solution. What I really like is that my Tier One guys can get a quick status update, have a look very quickly, and then resolve most basic issues. Tiers two and three are not as involved unless there is a major issue or complexity. Also, when buying the product, get the audit/chance tracking built in too!

View full review »
NO
CEO at Tomans Consulting

Sophos has an aggressive 360-degree security deployment. They are securing your mobile phone and data, both data security and also device security. They're on the cloud too, if you look at the company they really working hard on a 360 approach for security. The coverages they offer makes them robust. You can always start from somewhere, and then you scale up. You can start with their device management solution, or with their firewall, and then you begin to scale up with other features seamlessly. The flexibility they provide is also very good with Sophos, I can recommend Sophos confidently.

I rate Sophos UTM a nine out of ten.

View full review »
FS
Director of Cloud Technology at Avalere Health\Inovalon

If you haven't tried it, do so.

Amazon has their products (e.g., Amazon GuardDuty). However, when you are working in a multiple VPC environment along with digital enhancements and features, some of those enhancements and features are not always available with Amazon, but are with Sophos.

View full review »
GM
Owner at supernovatel

I would advise others that the Sophos Academy is really good. You can receive certifications from them. It is important to understand the requirements because some people who don't know much are afraid to use firewalls, and that's a problem. It's important to use firewalls and ask questions proactively about them.

I rate Sophos UTM an eight out of ten.

View full review »
ES
IT Manager at a consultancy with 51-200 employees

My company is a reseller of Sophos.

I haven't deployed one of their latest solutions yet. We just had a recent project for a basic firewall, and they were actually 210. That's the last project I had with Sophos.

We are in the process of taking up certification exams for Sophos.

I definitely recommend Sophos. It's one of our top products in the company.

I'd rate the solution at a nine out of ten.

View full review »
it_user701457 - PeerSpot reviewer
IT Infrastructure Architect at a retailer with 10,001+ employees

Sophos is a great security partner for any organization. Investing in their suite of products gives you a good cohesive strategy for security. Adding Fastvue Sophos Reporter allows you to get better visibility into how well your UTM is protecting your environment as well as adding the ability to add real time alerts. It really adds additional features to the product without increasing the cost much and a relatively short ROI is often realized.

View full review »
WA
Management Board Member and Network Engineer at NewLogics

Overall, I would rate the solution an eight out of ten. 

It's a good firewall solution for small and medium businesses, but it's not the best choice for businesses with complex security requirements. 

I would recommend that businesses carefully consider their requirements before choosing Sophos UTM. If you need advanced application control, you should look for a different firewall solution.

View full review »
CA
System Analyst at Abbey Mortgage Bank

You are on the right track with Sophos UTM, but you should keep up with the trends as they become available.

I would rate Sophos UTM a nine out of ten.

View full review »
it_user72771 - PeerSpot reviewer
Info Sec Consultant at Size 41 Digital

We didn’t find any issues but I know there have been some in the last few years. I can’t comment about Sophos on AWS previously but they seem fine now. There were no problems for our client so all I can comment on is the experience they had. I think it’s taken a little while for Sophos to get experience in solving problems with their product in the AWS environment, but they do seem to go the extra mile.

This solution rates an eight out of ten, based on our experience. Support was good. You will always find problems with installations so it does hinge on support.

View full review »
it_user805347 - PeerSpot reviewer
Project Engineer

I can’t recommend this product more! 

Though, stay away from the wireless models, since you cannot put them in HA. They start to give you some weird issues once you start getting into multiple SSIDs and networks. The number one piece of advice is to read and follow the sizing guide, if you do not, you will undersize the firewall. 

Just to reiterate:

  • Configuration could not be made any easier.
  • The product is extremely intuitive.
  • It does not take much effort or thinking to understand how it works.

My company has rolled out devices as small as the SG 105 and as large as the SG 330. I personally have an SG 210 in my home. I have gone through all the training involved for configuration and implementation. I also use the product at home and have been extremely happy with Sophos UTM overall. 

View full review »
HP
Network Security Engineer at a tech services company with 1-10 employees

Even if I compare Sophos UTM with other solutions, I don't think any pros or cons stick out since our clients are okay with the solution, and there has been no complaint regarding Sophos UTM.

My advice to others planning to use the solution is that it is quite easy. You can simply refer to the solution's blog or YouTube videos and install the solution. It's also quite easy to configure it. So, if you purchase it by yourself, you can configure it and use it on your particular network.

I love working with Palo Alto. So, I would like to give it a ten out of ten. Also, Palo Alto has a different market. So, I would always give a nine out of ten for other solutions. Overall, I rate the solution a nine out of ten.

View full review »
AlaaMady - PeerSpot reviewer
System Administrator at a insurance company with 51-200 employees

I would only recommend this product to small businesses. I would rate this solution as a seven out of ten.

View full review »
GG
Technical Director at a security firm with 1-10 employees

There are two versions of the Sophos UTM. The old one is the SG, and the newer ones are the XG and XGS UTM, the next-generation firewalls.

Sophos UTM was a rebranded solution that was bought from the Astaro company. It was one of the first UTM and was a very stable solution. Everything was inside a small box, you could start to enable or disable some functions, such as TCP, HTTP proxy, or firewalling. It allowed you to manage everything you wanted in this Unified Threat Management solution. It was a very nice multi-functioning security tool. If you adapted to the way of working with the UTM you could do everything with it. 

It was a nice solution. Sophos still allows the use of the SG UTM. For example, if you want to buy an XG Firewall, which is their new next-generation firewall, you still can purchase the older SG UTM. Sophos is able to still deliver this solution.

I rate Sophos UTM a seven out of ten.

View full review »
Dana Bailes - PeerSpot reviewer
Network Administrator at a manufacturing company with 51-200 employees

We are a manufacturing company. We're not a technology company. We don't need to have the very latest state-of-the-art technology, however, we want to try to be close to it. For us, Sophos is perfect.

We also plan to use Sophos XG, however, we haven't implemented it yet. We're hoping it might be easier to configure and set up than UTM.

Our antivirus, actually, was the antivirus that was managed by the UTM. Now they've since retired that capability, and they've gone to endpoint security software being managed in the cloud. Sophos Central can manage all of the Sophos security products, including all the firewalls, the endpoint security. Basically, you end up with one web interface for all of your security stuff. That's actually going to be a big feature, especially moving forward with XG, due to the fact that, if XG detects anything fishy going on, you can shut down individual client networks, and not allow any traffic to go through.

 Our Exchange ActiveSync is actually behind a Cisco firewall. We have a Cisco ASA also.

We use the latest version of the solution.

I'd rate the solution at an eight out of ten. We've largely been satisfied with the product.

As a company, you're looking to get the best solution out there. Once you have something in place, and it's worked well for you, and it hasn't cost you any excess money, you don't need to have too much contact with anyone. I rarely contact Sophos. That's a good indication of how good the product is working for us. If I was looking for something new, or if when maintenance comes up, and we've had hardware that's been in operation for a while, maybe we just need something new. Then you look and see if there's something out there that works better for you. That's basically it. We're not looking for anything new. We've actually been very happy with Sophos. I liked the way that there's a lot of good stuff there.

View full review »
DE
System Administrator

I rate Sophos UTM eight out of 10. 

View full review »
HS
IT Technician at Wm tech

This is a good solution and they should try it.

I rate Sophos UTM a ten out of ten.

View full review »
FS
Account Executive at a tech services company with 11-50 employees

We are using a variety of different versions of the solution right now. 

It's really, really cool to look into Sophos. I highly recommend it. From an infrastructure, stability, and security perspective in terms of configuring in a granular way, Sophos does it all. It's a really good product and something to look into. 

It's also a lot cheaper than Meraki. It does way more than Meraki. Dollar to dollar, Sophos will likely beat Meraki. For example, with Meraki, you're going to be paying two or three times more for nothing spectacular, nothing different. You just get a portal. It's okay. With Sophos, you do have to know what you're doing, however, any network admin should be able to figure it out. It's not like an ancient hieroglyphic language. It's quite straightforward.

I'd rate it nine out of ten. 

View full review »
FR
Occupational safety technician at Concremat

I'd rate the solution a seven out of ten. It's been okay.

We are a partner of the product.

View full review »
SI
General manager at DotCom, Lda.

I rate Sophos UTM 10 out of 10. It's the most reliable solution in the firewall market. Considering the price and quality of the product, Sophos UTM is the best solution.

View full review »
DI
CEO at NG

Sophos UTM is a good product for security purposes and maybe if Sophos provided another company option to implement their products then I would say that Sophos UTM is great.

On a scale of one to ten with 10 being the best, I would give this solution a nine out of 10. 

View full review »
MA
Data Department Manager at BTC Networks

Give us 10 minutes of your time, and we will show you the differences. When I do presentations, I give potential clients demo access to the solution(s) I am presenting.

View full review »
SR
Architecture and DevOps at hc1.com

It is definitely worth looking at. It is a pretty good product.

It is integrated with our LDAP solution, and that integration is okay. Any LDAP integration can be hit or miss. It doesn't matter what it is, because it's LDAP. Since we use LDAP as a service, it's a little different, but it does work well.

We use it for the AWS version.

View full review »
it_user701427 - PeerSpot reviewer
Snr Dev Ops Engineer at a tech services company

Great product which works without issues or downtime.

View full review »
RobertMaalouf - PeerSpot reviewer
Network and Security Specialist at Tetracom S.A.L

I rate Sophos UTM 10 out of 10. If you're considering Sophos UTM, I would say go for it. 

View full review »
PN
Director with 11-50 employees

We are customers and end-users. We came into the pandemic situation needing a VPN and the one offered by the Sophos behaves quite well. From the point of view of our users, it has been a positive experience.

I don't quite know by heart the version of the solution, however, it's quite recent. It's not the newest one. I saw that the brand new one which came out this year and we don't have that.

I'd rate the solution at an eight out of ten.

View full review »
JK
Technical Manager at Digital World

We recommend this solution. We complete between 20 and 30 installations per month.

I would rate Sophos UTM a nine out of ten.

View full review »
it_user163662 - PeerSpot reviewer
Founder at a tech services company with 51-200 employees

Easy to use, Easy to access, good for compliance. It is a very good product as compared to others available on AWS.

View full review »
Osama Tobji - PeerSpot reviewer
Chief Information Technology Officer at AcenTek

I rate Sophos UTM seven out of 10.

View full review »
RR
Owner at Perspectiva company

I rate this solution eight out of 10. 

View full review »
JS
CEO & Co-Founder at Advisor Consulting Group

They have supported our business venture since 2010, and will do for many years. We have studied closely the different product portfolio, and each one of them, are carefully developed.

View full review »
JX
CIO at Quartesian, LLC

I would recommend to take a look a product, as it is a good product apart from the improvements that I mentioned. We are very happy with the product so far.

It is used as a standalone. We don't integrate it with other systems.

We are using the AWS version of this product.

View full review »
Wisnu Nursahid - PeerSpot reviewer
General Manager of Technical Division at VTI

I would advise starting with the basic firewall before adding other features. I would give Sophos UTM a rating of seven out of ten.

View full review »
AR
Digital Transformation and Technological Innovation Manager at a educational organization with 501-1,000 employees

We're just customers. We don't have a business relationship with Sophos.

I can't remember the exact version of the solution I am currently using, however, I believe it to be around version 9.

It's a good product, and I would recommend it, however, I would advise other potential users to instead maybe consider Sophos XG.

Overall, I would rate the solution at an eight out of ten.

View full review »
IS
CTO at a tech services company with 11-50 employees

We highly recommend this solution for SMBs for its reasonable pricing and wide range of network services.

View full review »
it_user697017 - PeerSpot reviewer
Head of IT at a construction company with 201-500 employees

I love all Sophos products, but the combination of Sophos XG, Sophos RED, and Sophos advanced endpoint protection with intercept X is something that all IT professionals and security officers will love and want to have.

View full review »
BB
Consultant at a tech services company with 51-200 employees

If you are a IT Consultant shop, become a partner and do the training.

If you are the IT of a company, you can either get a IT Service company to set the unit up for you or if you are confident with firewalls you can purchase premium support to get assistance for troubleshooting purposes.

View full review »
Faruk Ahmed - PeerSpot reviewer
Support Engineer at Ensure Support Services Limited

I would rate Sophos UTM eight out of ten.

View full review »
RT
Software Sales Manager at a tech services company with 51-200 employees

We are a partner for all these products. We market these products to the end customers or the end users. We are both selling and implementing these products. We're partners with Sophos. There's a distributor in Pakistan called Softech Microsystems, and we have a silver-level partnership with them.

We've been working with Sophos since 2019.

In the financial market, however, Kaspersky is being used more than Sophos because of its credibility, integration, and extra features offered by Kaspersky. We always try to recommend Sophos as it's what we want, but sometimes, because we also carry a Kaspersky partnership, when a customer demands for Kaspersky, we have to let the customer test it and we have to give them a quote for Kaspersky. We also carry another product, e.g. McAfee, aside from Kaspersky and Sophos. Sophos UTM is a product I want to go further. I try to pitch Sophos UTM rather than Kaspersky or McAfee.

I'm giving this solution a nine out of ten.

Whenever we go for the public tenders, because there's no price flexibility, most of the time I find other products win. Although we have completed our POCs and all that, convincing customers to go with our product, but when it goes to the tenders: in the tenders they mention specification rather than mentioning a particular product, so we'll have to qualify. We qualify technically, but when it comes to the commercial opening or the financial opening, we fail.

View full review »
BK
System Administrator Server and Networks at a manufacturing company with 201-500 employees

I would recommend UTM over XG because it's easier to manage.

On a scale from one to ten, I would give XG a rating of 6. Conversely, I would give UTM a rating of nine.

View full review »
DW
Solutions Architect at National Renewable Energy Laboratory

Going forward, we need to look at the provisioning pieces and the resource utilization.

The AWS version is easier to provision than the on-premise version.

View full review »
MP
DevOps at a computer software company with 11-50 employees

Do your homework. Compare products. Use what you need depending on your needs.

We are only using the AWS version of the product.

View full review »
it_user695352 - PeerSpot reviewer
Business Owner at a tech services company with 1-10 employees

Create a checklist with your requirements, test the solution, and if it passes everything, implement it.

View full review »
EA
President at a tech vendor with 1-10 employees

The solution has email firewall built in with all sorts of functionality, it is an absolutely excellent firewall, the logging is really good, you get great information about what's going on. It does things like GeoIP tracking and you can make decisions based on where people are coming from. It's just really a complete firewall. I would say if you're just starting right now, get the XG. Not that the UPM isn't outstanding, but it's disappearing. You might as well learn the XG. The product still works really well, although it's getting a bit long in the tooth. The sooner that they come out with the XG that can do everything that the UTM does, the faster the rest of the world will make the jump.

I would rate this solution an eight out of 10. 

View full review »
it_user297396 - PeerSpot reviewer
Senior Expert for Microsoft infrastructure at a computer software company with 51-200 employees

I have some technical advice, but generally, always prepare steps to implement Sophos UTM and test your implementation before using it in production environment.

The Zeroeth Rule:

Start with a hostname that is an FQDN resolvable in public DNS to your public IP. If you didn't do that, start over with a factory reset; it will save you hours of frustration.

  1. Whenever something seems strange, always check the Intrusion Prevention, Application Control and Firewall logs
  2. In general, a packet arriving at an interface is handled only by one of the following, in order, DNATs first, then VPNs and proxies and, finally, manual routes and manual Firewall rules, which are considered only if the automatic Routes and rules coming before hadn't already handled the traffic
  3. Never create a Host/Network definition bound to a specific interface. Always leave all definitions with 'Interface
  4. When creating DNATs for traffic arriving from the internet, in "Going to:" always use the "(Address)" object created by WebAdmin when the interface or the Additional Address was defined. Using a regular Host object will cause the DNAT to fail as the packets won't qualify for the traffic selector.
  5. In NAT rules, it is a good habit to leave a field blank when not making a change. In the case of a service with a single destination port, this makes no difference. In the case of a service with multiple ports, or a Group, repeating the service makes the NAT rule ineffective.
  6. There are only four reasons to sync users from AD to the ASG/UTM:
    • The user should be able to log on to a Remote Access VPN that uses certificates to authenticate the user
    • Email Protection is enabled and the user should receive Quarantine Reports and be able to manage personal black/whitelists and/or use Email Encryption/Signing
    • You want to do Reporting by Department for Web Protection (and I consider it a bug to require this when doing AD-SSO)
    • You want to use the Authentication Agent to populate "username (User Network)" objects
    • There's no other reason to sync users to WebAdmin - certainly not with AD-SSO
View full review »
it_user243894 - PeerSpot reviewer
Systems Engineer at Base-2 ICT Services Ltd

Nothing is perfect, but with Sophos those are really small – sometimes it is incorrect firmware upgrade paths, or rare log in problems (device forgetting admin password). All those though can be fixed, there is plenty information in the Internet and support is usually awesome. Also, you need to plan the solution and costs involved, while having in mind potential growth of users/connections; e.g. creating virtual appliances and allocating resources (RAM, CPU, NICs) minding potential workload.

View full review »
it_user233997 - PeerSpot reviewer
IT/Telecom Specialist at Prewest

If you want an easy to manage, and powerful firewall then take look at Sophos UTM.

View full review »
MA
Senior Network Engineer at Dejpaad

For sharing and mail security, the solution is very good. I'd recommend it to other users. 

I'd rate the solution seven out of ten. If they offered a better user interface, I would rate them higher. 

View full review »
it_user693984 - PeerSpot reviewer
Consultant at a manufacturing company with 1,001-5,000 employees

Takes awhile to build a comprehensive rule set because of the relatively slow Web GUI.

If you build, backup, restore and reconfig between the boxes.

View full review »
it_user413994 - PeerSpot reviewer
Quality Officer at a tech services company with 10,001+ employees

Start simple and step-by-step, and start using the product fully.

View full review »
VM
Assistant Manager IT Zircon Technology at Zircon Techonolgy

I would rate this solution a nine out of ten. 

We are satisfied with Sophos UTM and will continue implementing it for the foreseeable future. 

View full review »
MS
Senior IT Specialist at Shabana Group

Overall, this product is very good and I recommend it for other users.

I would rate this solution a seven out of ten.

View full review »
ML
IT SM & Security Consultant at a tech services company with 1,001-5,000 employees

We do not use this on AWS.

Before implementing the SG appliance, completely prepare the rules for your network; know what and where you want to implement.

View full review »
AP
Global Network Security Admin at a consumer goods company with 201-500 employees

The product works. It helps you identify threats within the environment.

We were able to integrate it with different devices and the installation is straightforward.

We are using the cloud-based version, but it is through Sophos directly. We are not using AWS. A lot of this stuff is also on-premise.

View full review »
TI
Senior Network Security Engineer at a tech services company with 51-200 employees

I would rate Sophos UTM as seven out of ten.

View full review »
JM
Cyber Security Officer at Grupo Vision

It's a good solution, I would say to go for it. 

I would rate Sophos UTM a nine out of ten.

View full review »
ML
It Forum Gruppen A/S

We don't use Sophos UTM on AWS.

I would recommend Sophos UTM. But also look at its successor, Sophos XG Firewall, as we do not know how many years Sophos UTM will "live." (Note that it will be free to migrate from UTM to XG).

View full review »
it_user472113 - PeerSpot reviewer
Systemadministrator at MCON Group GmbH

If you'd like to look into a system which is very robust and hardcore, then select Sophos UTM.

View full review »
it_user230352 - PeerSpot reviewer
Support Engineer at a tech services company with 51-200 employees

It is great solution for customers who have small, branch offices. I would advise you get Sophos for distributed locations (with RED and APs).

View full review »
EB
Senior IT Consultant at a tech services company with 51-200 employees

At first I did not like Sophos UTM but after second setup and config I liked it a lot and now recommend it to all my customers. It has great security features, and together with Sophos Endpoint Protection it works perfectly.

View full review »
GC
Science Technician at a government with 201-500 employees

I will continue to use and recommend the solution.

I rate Sophos UTM a seven out of ten. 

View full review »
MN
IT Security Specialist at a tech services company with 11-50 employees

When considering a new solution, I always make sure that there is good technical support. Also, the pricing is an important aspect.

View full review »
Mohammad Mojtaba Sohrabi - PeerSpot reviewer
Manager at New Outlook Group

Sophos is good for small and mid-sized organizations. Big companies need solutions with layered security.

Overall, on a scale from one to ten, I would give Sophos a rating of eight.

View full review »
ME
Senior System Engineer at a real estate/law firm with 51-200 employees

I would recommend Sophos, it is easy besides for the five-factor authentication. It is good for my needs. 

I would rate it a seven out of ten. 

View full review »
AC
IT Director at a manufacturing company with 201-500 employees

This is a good product but there is always room for improvement.

I would rate this solution an eight out of ten.

View full review »
it_user241089 - PeerSpot reviewer
IT Security & Audit Manager at a tech services company with 51-200 employees

It's a nice product that is full of interesting options.

View full review »
it_user801675 - PeerSpot reviewer
Network Administrator at a government with 11-50 employees

I use it in a self-hosted implementation.

View full review »
JC
Security Architect at a financial services firm with 501-1,000 employees

Consider the product, as it seems to be one of the top four.

We use the both the AWS and on-premise versions. They are both good and about the same.

View full review »
HR
Presales & Implementation Engineer at a tech services company with 11-50 employees

I would rate Sophos UTM a ten out of ten. 

View full review »
Buyer's Guide
Sophos UTM
March 2024
Learn what your peers think about Sophos UTM. Get advice and tips from experienced pros sharing their opinions. Updated: March 2024.
768,578 professionals have used our research since 2012.