We just raised a $30M Series A: Read our story
2018-06-21T09:07:00Z

What needs improvement with Sophos XG?

95

Please share with the community what you think needs improvement with Sophos XG.

What are its weaknesses? What would you like to see changed in a future version?

ITCS user
Guest
8686 Answers

author avatar
User

The BGP engine is very limited.

2020-07-06T18:55:31Z
author avatar
User

There is no built-in option for let's encrypt certificate management for use with webadmin, user portal and WAF.

2020-07-06T18:55:15Z
author avatar
Top 5LeaderboardReal User

Its price should be improved. Its features are pretty okay, but the price is the area where we have to fight more. They should do something about the price structure.

2021-09-16T08:44:57Z
author avatar
Top 5LeaderboardReal User

Unfortunately, there are quite a few negatives with them. Their tech support is not great. The features on offer are lacking. Basically what they don't have is proper bandwidth management for multiple WAN ports and multiple WAN ports to multiple VPN WANs. Meaning, if I have it on both sides on both the main side and on the secondary side, two internet connections, I can't bond the two of them together into a single VPN and have bandwidth managed between the two of them. If I want to go ahead and make a VPN, right now, I have two internet connections on each side. I have to make a failover a group of four VPNs for it to go ahead and failover between them. You're getting into a lot of rules. It's a lot of extra rules, et cetera, that has to be done. They don't have simple pointing systems where you could go ahead and make rules saying, "Hey, here's the route". They're not fully route-based VPN rules yet. You literally have to take down all the routes all over the place in order to make updates. It's tedious. Basically, we had the problem where we moved certain ranges from one data center to another data center. It took us about an hour of downtime to do that. We had to go ahead and we had to reset VLANs and we had re-setup all the VPNs in all the different places we reconnected. We don't have two sites, we have 25 sites. It was a lot of work.

2021-09-14T14:33:42Z
author avatar
Top 5LeaderboardReal User

The solution is very slow in comparison with SonicWall and FortiGate. It should have faster performance. The installation could be faster and is longer than that of other solutions, lasting more than a month instead of five minutes.

2021-09-08T09:53:48Z
author avatar
Top 20Real User

Even though things work on the back end, we have encountered bugs in the solution. User interface and integration can stand improvement.

2021-08-12T15:09:32Z
author avatar
Top 20Real User

When upgrading the firewalls, the process could be easier. While we do have network control, we don't have network monitoring. If I have 200 nodes and I want to see what's happening, I don't have visibility, especially if people are working remotely. If we could control roaming users through the firewalls and make it so that it's more of a complete security solution, which we prefer, that would be ideal. If we have to install some clients on these machines, that's fine. The only concern is the DLP. We want to protect our data from being stolen. We'd also like to monitor activities from the perspective of productivity. We want to be able to track and calculate what users are doing on their machines.

2021-08-11T19:44:48Z
author avatar
Top 20Reseller

I'd like to see a more simplified functionality for our customers. We also had a negative experience with the sales team of Sophos, which offered a three-year renewal to our customer. We'd suggested one year, keeping the customer's cashflow in mind and Covid. The result was that it affected our credibility with the customer. These are some of the irritants in the sales policy.

2021-08-11T12:53:43Z
author avatar
Top 10Real User

The logging side of it could definitely be better. Some of the logging lacks, and the information that they provide you, especially in the spam filtering section, could be better.

2021-07-30T08:05:47Z
author avatar
Top 10Real User

I wish to see an antivirus feature added to the solution.

2021-07-20T15:23:50Z
author avatar
Top 5Real User

The box needs to be fixed Moreover,the bugs need fixing. I also think that SD-WAN features should be added. The intelligence feature should be improved and Sophos needs upgrading and updating.

2021-06-18T14:51:51Z
author avatar
Top 10Reseller

We are in the movie industry. We're a movie distribution company. Currently, we are affected badly by corona, since March of 2020. We are working from home, however, this solution is for on-premises tasks. The pricing can be high unless you choose a longer contract.

2021-06-05T10:27:33Z
author avatar
Top 10Real User

Their support is fairly good, and they come back to me. I've had an issue once or twice where I couldn't understand what the support person was saying because those calls were probably routed to India. They were a bit difficult to understand, but it is generally not an issue.

2021-06-02T13:39:04Z
author avatar
Top 5LeaderboardReal User

It is already secure but it could be better in terms of other breaches that may occur.

2021-05-31T16:16:35Z
author avatar
Top 5LeaderboardReal User

Technical support can be slow to respond, which is something that should be improved. In the future, I would like to see the addition of artificial intelligence for identifying and controlling traffic.

2021-05-13T17:36:06Z
author avatar
Top 5LeaderboardReal User

In feature releases of the solution, I would like there to be an increase in the detection capability. The detection is low compared to the other solution available in the market.

2021-04-20T11:14:57Z
author avatar
Top 10Consultant

They need to do more quality checks before they release firmware upgrades. Currently, a few Cyberoam firewall customers are facing some issues while upgrading the Cyberoam firmware to Sophos. After the new firmware is installed, they are seeing some performance issues, which require some bug fixes. The performance is fine after getting the required support. Customers who are already using Sophos hardware are quite satisfied with this solution. Their support should also be improved. We are facing difficulties getting support on time through email or phone.

2021-04-13T16:36:47Z
author avatar
Top 10Real User

The technical support they offer is difficult to access. There is no direct number to call and when you do get hold of them and have confirmation, it takes a while to get a response.

2021-04-01T20:05:11Z
author avatar
Top 5Real User

The manuals or guides we are given are too simple. When we are implementing the product, it is difficult for us as we don't have more detailed information. The technical support on offer is slow. When I have questions, they answer me very slowly. Sometimes within 24 hours, I have a response. However, it can be longer. In Mexico, Sophos doesn't have technical support locally. It's in Argentina or in other countries. It would be nice if support was available in the country.

2021-04-01T09:06:56Z
author avatar
Top 20Consultant

I would like to see in future releases a tool to scan for malicious packets and give the location of where they are coming from. Nowadays all over the world is suffering from ransomware threats. If they could map where those packets are coming from and make the packet monitoring more efficient it will be helpful to prevent more of these kinds of threats.

2021-03-30T20:23:03Z
author avatar
Top 20Real User

Its user interface is a little bit slow.

2021-03-30T06:17:11Z
author avatar
Top 5LeaderboardReal User

The GUI and support could be better. I think there are other products that we are going to deploy instead of Sophos. We have already upgraded a month ago because the interfaces and support for Sophos are really weak. But other products like Juniper, Cisco, or FortiGate are better than Sophos. It's also complicated, and the end-user or client does not understand it. The interfaces and the GUI design are not easy, and when you do something, unrelated things are in the same configuration site. There are different sites to visit to configure Sophos. This is even more than other products. Many features can be improved, especially the VPN and web filtering features.

2021-03-26T09:34:09Z
author avatar
Top 20Real User

Data traffic analysis could be better. I think Fortinet products like FortiAnalyzer are very effective in analyzing data traffic. I think it's better than Sophos. It could also be more stable.

2021-03-26T08:02:00Z
author avatar
Top 20Reseller

Recently, I've had a problem with updating firmware. Updates should be more stable . The last update I did was not successful and ended in a unusable device. Also the support case i opened for it could have been more effective. I don't use all of the features and therefore it would be difficult to evaluate if anything is missing.

2021-03-05T21:52:53Z
author avatar
Top 20Real User

I would like to explore network access control. I haven't seen that it is clearly deployed. It might be something that is already in place, or if it is available on another device. I would want the level of integration to have another device on your network that is also reliable.

2021-03-02T12:11:22Z
author avatar
Top 5Real User

It would be better if they made their own hardware like Palo Alto and Fortinet. They use their own ASICs and claim it is more secure. The SD-WAN can be improved. The traffic optimization somehow needs to be improved, or there is a scope for improvement in Sophos XG. It would be better if they moved towards the cloud side of things. Now a lot of things are moving on to the cloud.

2021-03-02T10:43:40Z
author avatar
Top 10Reseller

The integration could be a bit better. They need to allow their solution to integrate with other products and not just other Sophos solutions. Sophos has a feature that in my opinion is very limited. They don't have enough VPNs on their models. They have the XG 750, which is a sizeable appliance. On those models, they used to have not enough VPNs. They always were short on that area. Pricing used to be very bad, however, they've adjusted their strategy recently. The product needs to improve its marketing in Mexico. It's not a well-recognized product in our country. The solution's technical support is very bad. There is an overall lack of documentation in relation to features and capabilities. We need these to help explain aspects of the solution to our clients.

2021-03-02T07:07:25Z
author avatar
Top 10Real User

Technical support could be improved. They aren't as responsive as they could be. It would be ideal if we could have a more populated and detailed knowledge base. Generally, the new features must be tested before applying them to the production side. I would like to see more case studies, more application notes, and so on. We would like to see an improvement in mail management. When passing from FG Series to XG Series, some mail features have been lost. We would like to regain them.

2021-02-22T18:03:13Z
author avatar
Top 20Real User

I don't see any drawbacks to this solution at the moment. I know of other products that have more features and are more advanced stages, but ultimately, an organization's choice of software depends on its budget. If you have a small amount of money and you want to secure your network, Sophos XG can provide you with network security. Sophos ZG is a mid-range solution. There are solutions that are above it in terms of features on the market, but they cost more money. They could work on their technical support to make it more productive for the end customer. Some of my friends and colleagues have had unfavorable experiences with the tech support taking too long to close their ticket. However, I opened two cases this week and both have been resolved.

2021-02-19T13:50:00Z
author avatar
Top 20LeaderboardReseller

They can improve all indicators, all KPIs, all the scores, the consoles, and the monitors. These are all areas that need improvement. These areas need to be more clear for the customers. You have to have good experience working with Sophos to know how to get to the forums and to get to the information that you want from the beginning. It is complicated to get the reports if you are not experienced with Sophos. For example, if you want to get a report on what the firewall is doing, you have to be a very experienced engineer.

2021-02-18T15:28:18Z
author avatar
Top 20Real User

Their updates can be faster and more regular. Right now, it's updated monthly. When I need to update the firmware, I want it done within weeks, not months. There are also some changes in version 18, like rules, that aren't needed.

2021-02-16T16:59:56Z
author avatar
Top 10Real User

They made some changes to the firmware update sometime last year, which moved some of the policies from where they were before. Some of the policies, such as NAS policies, were separated, which made it a bit hard for people to trace the policies they had configured.

2021-02-14T18:07:05Z
author avatar
Top 20Real User

The solution could be improved if it offered more documentation or at least provided more information about the products themselves. If there was a virtual assistant of some kind that would help clients familiarize themselves with everything, that would be very helpful. It would be helpful to get some insights into new features so that we are able to relay information to clients effectively.

2021-02-04T14:04:29Z
author avatar
Top 5Real User

They can simplify its interface so that it is mostly drag-and-drop. There was an SQL injection attack on some Sophos devices. They just need to harden their devices a little bit so that they can't be hacked very easily.

2021-02-04T08:18:41Z
author avatar
Top 5Real User

There are issues with electricity with this solution.

2021-01-30T17:11:03Z
author avatar
Top 10Real User

I used to work with Fortinet, and sometimes I see that the SD-WAN feature could be better because it's much easier in Fortinet. That area could be improved in Sophos XG as it's too complicated right now. For example, I remember a case where the routers had to be configured by commands. It's not hard, but you have to read and investigate how to do that. The XG firewall works fine, but you have to read, and it takes some time to do it. Sophos XG could also improve the floating area. I have more features in Fortinet, more visibility of the networking table, and the networking area. But in Sophos, you have to enter the CLA and display it. It'll also help if they offered more toll booths for VPN like Fortinet.

2021-01-29T01:33:33Z
author avatar
Top 5Real User

When you utilize the processors, the device hangs. Many firewalls hang because of the high volume of loads. If we are using the HP policy and the user policy at the same time, the firewall gets hung and it means that we cannot get clear reports. We have mitigated the firewall with Palo Alto because Palo Alto is working on multiple environments. I would like to see the performance improved.

2021-01-28T12:06:00Z
author avatar
Top 5LeaderboardReal User

The MTR feature has to be enhanced. There are some bugs on the ADL which need enhancing.

2021-01-23T16:34:47Z
author avatar
Top 5LeaderboardReseller

I have not used their SD-WAN product or the SD-WAN feature, so I don't know how scalable the SD-WAN is. But, I hope just that the SD-WAN is up to par with FortiGate. The integration is an area that can improve a bit. One of the other solutions that I have used that is highly interoperable is Fortinet. It's easy to integrate with other products. Sophos can definitely improve with the interoperability between solutions.

2021-01-23T07:44:51Z
author avatar
Top 20Real User

They can lower its price. It is very expensive. We are looking for a less expensive solution depending on our budget. They can also improve it in terms of firewall protection.

2021-01-23T06:34:19Z
author avatar
Top 5Real User

What I don't like about Sophos is that applying policies can sometimes take longer, and there can even be a bit of a network interruption. With FortiGate, it's just one click and then you go, but with Sophos, sometimes the wheel keeps spinning for several seconds. The SD-WAN capability is not as good as it is in FortiGate, and is something that should be improved.

2021-01-14T15:56:27Z
author avatar
Top 20Real User

Software updates always come with issues. For example, I just upgraded to the next version, 80.5, and it came with VPN issues. It started dropping my VPN users. So, I had to roll back to before the software update. I think that the main area for improvement is the quality assurance of the updates. The management console is a little bit rigid. Scalability can be improved. I think that it performs a little bit slow when it comes to connectivity, and having the speed increased would be better.

2021-01-14T13:48:05Z
author avatar
Top 20Real User

I would like to have more artificial intelligence in the web monitoring service that comes with it. It should alert us when particular events happen. It has already got some of that. I know that it is more of a service, and Sophos is already looking at it. It is called SIEM.

2021-01-11T15:19:21Z
author avatar
Top 5LeaderboardReal User

An area of improvement would be the reporting as diagnostic graphs take a long time to load and refresh. If there could be an option to show only select graphs, it may speed up the graphics. Most of the time we don't use the disk usage, memory or CPU graphs. The main graph we watch is the bandwidth usage. Additionally, their previous update contained many bugs. They need to ensure that, before releasing a new version, there are not so many bugs.

2021-01-08T10:24:00Z
author avatar
Top 20Real User

The first area that needs to be improved is customer support. If I'm implementing a connection on the DMZ or WAN, I should be able to dive deep into the implementation, specifying what needs to be implemented or not. For example, I should be able to configure specific details for the DMZ, and not have to follow the templates that they provide. We have had problems with the stability that affected business operations.

2021-01-04T15:20:53Z
author avatar
Top 20MSP

It's a problem that we are not able to investigate incidents, there is no tracking. Security is also lacking in this product.

2021-01-04T11:51:39Z
author avatar
Top 5LeaderboardReseller

Categorization or uncategorized websites is an area that needs improvement. Having a web portal where you could make requests for the categorization of non-categorized items, would be beneficial. The DLP rules don't cover countries such as Serbia. You cannot make custom rules. That could be added so that we could detect content that is not supposed to leave the company via email, and so that the rules could be customized by the clients. We only have predefined rules and most of them are not for Serbia or countries from the Region.

2020-12-30T15:56:35Z
author avatar
Top 20Real User

In the Firewall, the Intrusion Prevention System can be improved. Now because COVID has come to stay, people tend to work from home, and cybersecurity has been on the high side. It can improve more on the security aspect of this so that it can combat any major threat or common bug. I am not saying that the security has become compromised, as it is usually active, but they can improve on it. Local and technical support can be improved. When firmware updates are complete, there were issues with connectivity and VPN users. Recently, I stopped updating the firmware because I didn't want to obstruct the connectivity of the staff working remotely at different locations. I have stopped doing any updates until the issue can be addressed.

2020-12-28T13:28:55Z
author avatar
Top 20Real User

I need to do a bit more research on the product. I can't think of any features that are missing. The solution is tied to the US dollar. You need to pay whatever the equivalent is in your own currency, and, if the exchange is bad, it can really add to the cost.

2020-12-28T09:30:14Z
author avatar
Top 5Real User

The number of ports, especially on the entry-level appliances, should be increased. The price of adding ports should be reduced to make it more competitive. The vendor needs to create materials to show the differences between Sophos products and those from other vendors. Network management needs to be included in the package. As it is now, it only supports ten multiple users, which is something that should be increased.

2020-12-27T09:06:03Z
author avatar
Top 5Real User

I think Sophos XG can improve some annex features. Like in DHCP, we can't make IP reservations in the range. We must reserve out of the range, which is not good. It will not be the same as the DHCP function in a Windows Server. We can't make an IP reservation in the range of the DHCP in the Sophos. Better in the next release? I hope... Sophos can also improve the debugging of the WAF function and provide a better resolution in the log, in the attached WEB log. The initial error doesn't appear. You must tail the console log to find the source pattern, cause of the error.

2020-12-17T14:34:26Z
author avatar
Top 5LeaderboardReal User

The security of the solution could be improved by making it more intuitive and it should have a background reputation service for classification of websites for content filtering. It's a service which defines the type of websites enabling me to do my content filtering in a much more effective and efficient way. They really need to include some kind of a client app for mobiles so that firewalls and all the metrics can be accessed directly on the phone; some kind of administrative application on the phone, maybe on an iOS or Android.

2020-12-17T08:42:20Z
author avatar
Top 5LeaderboardReal User

With the proliferation of fiber connectivity becoming available at our homes, consumers should not have to go and buy another module for fiber to ethernet converters or another device to get the fiber options. I understand all UTM models should have direct SFP ports available so that FFTH is directly terminated to UTM for better management and uptime.

2020-12-11T16:08:00Z
author avatar
Top 20Real User

The UI needs improvement because it can be a little weird at times.

2020-12-11T03:00:57Z
author avatar
Top 5LeaderboardReal User

In terms of improvement, one of the features we are having a hard time getting a hang of is MAC addressing, like when we assign IP addresses to a specific MAC address. That is something that can be improved. For the next release, I think, it should have better feature integration.

2020-12-07T16:56:00Z
author avatar
Top 5LeaderboardMSP

Some features are not available on the graphical interface. So you need to return to the command line to solve some issues that are faced by the customer. I used it for enterprise networks, I decided that it is not very good for enterprise networks. There is some issue with its hardware. I have faced two problems and that were resolved by Sophos earlier. They changed the appliance. In other products, I have not seen such problems in the hardware. So I think that the hardware is not heavy duty. You can say it's not heavy duty like other vendors. The performance is not as it says on the datasheet. They should improve the hardware. If they can do that, it would be a very good product.

2020-12-04T09:09:00Z
author avatar
Top 20Real User

It is a very basic and entry-level firewall. It doesn't give very granular control over the traffic. It should have more granular control over the traffic. This feature should be there similar to Palo Alto and Cisco. It should have such advanced features.

2020-12-03T19:10:27Z
author avatar
Top 20Real User

Sophos needs improvements made to the console, such as host entry or defining rules directly from it.

2020-12-03T14:44:19Z
author avatar
Top 5Real User

We are having challenges with social media because ever since this issue of COVID-19 came into existence, the idea of using online discussions has become relevant. Before this, they were not made the priority because they were not considered to be important. Now, we've discovered that we need to use a lot of these online applications. We are having challenges when using Zoom with Sophos XG deployed. Our wireless network is not stable through the connection. More work needs to be done there, since the FW is doubling up as a wireless controller. I would like to see improvements made to the display and visibility. I'm also using Sophos XG firewall as our wireless controller, but as it is now, I can't see my access points on the firewall. My wish is to see the Wireless network and reports also on this firewall cum- controller.

2020-11-19T16:44:25Z
author avatar
Top 5LeaderboardReal User

We feel that the GUI can be improved a bit because it has a lot of information and looks a bit outdated. Nowadays, you hear a lot about next-generation firewalls, so some additional features can be added from an EI perspective. Products like FortiGate, for example, have a lot of features apart from the basic firewall. We would like to see integration with existing IPAM and IDAM products. In the future, I would like to see new kinds of automations, as well as the inclusion of artificial intelligence-related features. A lot of other firewalls already have these now.

2020-11-19T14:37:39Z
author avatar
Top 10Real User

In regards to email as an example, if you experience any malware, it is contained in the container but doesn't give you any information about the email, or what is contained in the email. You only have the option to reject it or to release it. I need to open the email to see what it contains and the value of it before I know whether to access it or not. Stability needs improvements.

2020-11-10T19:53:33Z
author avatar
Top 10Real User

Training on the devices is an area that needs improvement. Their training mechanisms are not perfect, and this is where you lose a good appreciation of the product. The documentation for implementation is not good. For example, when you look up the details on a firewall rule to validate it, the details are not there. If you click on the help file, they say a zone is an area where you can define specific logical network areas. This is where they stop, with nothing more. If you want to go further into the concept of it, which you know there is, you have nothing. Then you have to revert to the internet and go onto newsgroups to try to see if anybody has had your type of experience. Then you find someone, they explain it to you then say, "Oh, it only makes sense". So, then when you want to implement this, it's much easier at that time. So, that's the best-case scenario that I can explain. There is an area that is very specific to our setup, where working tools you cannot easily establish a VPN between two internal networks. When you want to establish a VPN with different wizards, they assume that you're always going through your internet link. If you want to create, with the zero-trust concept, which is where you don't trust anybody or any device, you want to make sure that everything on your network is segmented and everything is relative, depending on its flexibility, behind its firewall or a firewall segment. At some points, you might want to establish VPNs between certain network segments. Since you cannot establish VPN tunnels from the Sophos interfaces, plus if you are doing something that's going through the internet, then you lose flexibility. Currently, let's say we have a factory V-LAN and you don't want anybody within the factory V-LAN to be able to connect to another unless it is to a specific V-LAN, and you want to use VPN technology, you can't do it because you can't establish the connection again between two internal interfaces.

2020-11-08T06:56:35Z
author avatar
Top 5Reseller

When you are using it as a controller for the wireless access points, it doesn't perform well. It is not suitable for the public cloud. It is more suitable for enterprise data. It is not really the equipment for cloud data centers. I am looking for a data center firewall.

2020-11-04T09:35:58Z
author avatar
Top 5Real User

The behavior with the zones was a little bit tricky to understand and the beginning of the project. Sophos XG is difficult to manage and it is difficult to understand when you first begin. The reaction time of the GUI is terrible when compared to other manufacturers.

2020-11-03T17:15:03Z
author avatar
Top 5Real User

The VPN is in need of improvement. For us, it is hard to set up and it not working properly.

2020-10-26T18:15:47Z
author avatar
Top 5LeaderboardReal User

The solution really needs some additional features like network access control. If they could incorporate some user profiling and present the analytics of the login user usage patterns, or a typical proper management dashboard to take a decision on the firewall rules, that would be useful. Basically, MI's and the dashboard could be more user friendly. The information is there but the dashboards are not in a graphical format. In short, I'd like to see network access control, user profiling and analytics dashboards. It would make the solution a more competitive product on the market.

2020-07-19T08:15:43Z
author avatar
Top 5Real User

The two main areas where this product needs improvement are routing and reporting. The security can be improved, as well.

2020-07-14T08:15:52Z
author avatar
Top 10Real User

The uploading and downloading of reports should be included. We are looking for a firewall to block the uploads from the user, not the downloads. I would like to see this feature updated. In the next release, I would like the uploading and downloading reports to be included.

2020-07-05T09:38:01Z
author avatar
Top 5LeaderboardReal User

The interface could be improved by simplifying it and making it much smarter. I would also like to see an improvement in the diagnostic system graphs. They could be modified to provide individual graphs. The present page has all graphs in a single page and it slows things down and takes more time to refresh and load. Additional features they could consider including in any update would be symbols and tools. They could also include URL groups and all Office updates, the regular things that people do on a daily basis.

2020-07-05T09:37:53Z
author avatar
Top 10Reseller

It would be helpful if they had a set of standard templates because it would assist in the beginning, when you are just getting started. They do have a template, but I mean specifically for different use cases. For example, an existing template for setting up a web page would suggest what kind of security we need to have in place. They do have help menus and videos, but additional templates would be useful.

2020-06-25T10:49:20Z
author avatar
Top 10MSP

The main area that needs improvement is the documentation. Sophos needs to be a little better at communicating with partners about changes, issues, patches, and so forth. The weakest point is the technical support because they are difficult to get into contact with.

2020-06-15T07:34:13Z
author avatar
Top 10Real User

The cloud support needs to be improved. As it is, they only have support for Microsoft Azure. They should expand it to include providers like Amazon and Alibaba.

2020-06-14T08:03:12Z
author avatar
Top 20Real User

Their technical support needs improvement. I've been on hold with them for hours waiting for their support.

2020-04-16T08:44:00Z
author avatar
Top 20Real User

It would be great if the user can have a portal to check on activities related to their account.

2019-12-18T00:43:00Z
author avatar
Top 5LeaderboardReseller

Network security is in need of improvement.

2019-09-15T13:50:00Z
author avatar
Real User

There needs to be a way that we can distinguish between educational institutions on Youtube and other Youtube videos. You can do this on Fortinet. Basically, they can block all other Youtube videos besides those that are from educational institutions. With Sophos, you either allow for all Youtube videos or none at all. They need to allow for more specification on different websites. They only have one single location for training videos. They must offer them elsewhere as well. When the site goes down, everything stops, and you can't access the videos when you need them, so they need to diversify that. It's limiting.

2019-09-02T06:55:00Z
author avatar
Real User

They should expand their DDoS feature. It's basic. They need to enhance it. Technical support needs to be improved. The solution needs a mobile application for the administrator. Today, as an administrator, you cannot manage the solution from your tablet or from your mobile. You can only go through a web console. Other vendors have mobile apps. Some vendors also have the ability to manage and check the chart report and change some settings from a mobile application. This would be an excellent add-on for administrators who are traveling. It could help a lot.

2019-08-29T09:32:00Z
author avatar
Real User

Although I enjoy the reporting elements of the solution, it can still be improved. I still can't drill down. There is some information that I would really, really like to see, but I still can't access it. On reports, they sometimes give a summary, but it lists different users as unknown. There are times that I really want to know which user or which IP is causing a problem.

2019-08-28T09:52:00Z
author avatar
Real User

It's easy to use, but it's harder to configure when you want detailed settings. They need to make it easier to access advanced features.

2019-08-25T05:17:00Z
author avatar
Real User

The UTM itself needs improvement. When you're navigating it seems like it takes forever to load anything. The hardware is okay. It's just the software that could be more responsive.

2019-08-25T05:17:00Z
author avatar
Real User

Sometimes we experience difficulties with our server and that is usually due to a bug. Somehow bugs seem to find their way through Sophos' security. The issue is usually resolved when we contact technical support. In the next version, I would like to see an improvement in this. The developers should test everything after any update to ensure that bugs don't come though with the update.

2019-08-25T05:17:00Z
author avatar
Top 5Reseller

The initial set up process can be a little tricky, especially when you are registering with Sophos and you have a poor internet connection. Setup is not necessarily complex, but it's not trouble-free. You do have connectivity issues at the initial setup with registering the device on the Sophos platform to access the advanced features. It doesn't always go through the first time around. That may be an issue with the quality of our connection. I'm not sure exactly what it is. The single sign-on client I get maybe a 60% success rate on. There are times when it will use single sign-on for verification of users to access Internet resources. It still doesn't always catch the user. The user gets sent to the web login. Even though the single sign-on is helping, it doesn't always work. I would like to see a better single sign-on performance. I'd like to see a more streamlined way of managing your licensing as well.

2019-08-22T05:49:00Z
author avatar
Top 20Real User

I would like to have remote access to clients using a static IP for a certain period of time. This would allow me to log in to any client, remotely, with a known and fixed IP address.

2019-08-01T08:02:00Z
author avatar
Real User

There was a big issue with the Cyberoam and with the SG units as well, i.e. the previous Sophos UTM model. With Sophos XG, you get the chance to block what sites operate on SSL or that operate with HTTPS, without the need of extracting and distributing a certificate. On older Cyberoam and Sophos SG old versions, if you wanted to block something like YouTube or Facebook or any other websites that operate with HTTPS, you had to extract the certificate. Then you had to export that certificate. Then you had to re-import that certificate in all the user browsers. The only problem was if you needed to use an active directory where those certificates would be automatically thrown into the user browsers once they logged in to the domain. For a scenario like mine where you don't have a group policy, it is a disaster and ends up with you setting the rules to block certain websites with HTTPS on the firewall, even while they are not being blocked so that the user will still have access to them. This problem is now 100% sorted out with Sophos XG. Now you can actually block whatever you want, whether it's using HTTPS or HTTP keys from the firewall without the need for extracting certificates. That's a major improvement. That problem with the HTTPS settings was a huge issue. I know other people must be enjoying that it's sorted out now. It was a serious and major issue for Sophos. The only issue that Sophos XG now needs to improve is the product's reporting capabilities.

2019-05-23T06:10:00Z
author avatar
Consultant

We are having a lot of issues with conflicts and user sessions, and Sophos has suggested that we change the device to the XG 400. Aside from these issues with scalability, the email security features are good, but there are not many options. We would like to know why an email is being blocked, and how we can allow delivery. It does not keep emails in the queue for delivery. It can only log whether it is delivered or not delivered. If I need more details then I have to log in using SSH to get that information. When an email comes in from the outside it is detected. When we check the log it only tells us that it is not delivered. We would like to create an exception, but there are not many options available for this. For example, a domain space is not allowed. Only the user name can be used to do that. We need a domain-based exception for email. Next, the XG 210 is easy to configure, but when we are looking for more details then we can only get this information through SSH. It is quite difficult. If we can get all of those details then it would help us to understand, so this needs to be improved. There are a lot of options and it gets confusing sometimes. If they can give limited options, with more information, then it would be good for the large sites.

2019-04-18T09:59:00Z
author avatar
Real User

The major problem that I am facing, and I know that others are facing as well, is with the HTTPS classic, in general, or any classic that works on Secure Socket Layers. Let's say I set up a rule to block users from accessing YouTube or Facebook. The rule will only block the HTTP traffic, which is non-secure traffic. But most websites right now, most of the reputable web services providers, for extra security for their own web servers and for the user's security, provide a connection over Secure Socket Layer. The problem comes when you are trying to block, or allow, similar traffic that uses HTTPS. You have to create a certificate and import it into the users' web browsers, whatever they are using. Now, this is not a problem when you're dealing with users stationed and fixed in a specific site or location. They are using desktops, they will never take the desktops and go home with them, nor will they ever take the desktops and travel to another country, or another site with it. The problem occurs when you're dealing with roaming users who use laptops and have to move between different sites that have different types of policies applied to them. You have to import all sorts of certificates from each site into their browser. Doing so will most probably conflict with something else that is totally irrelevant and cause a problem. A way around this is if you are using authentication with Active Directory. But most of the time, especially if you're operating in a remote site with a very slow internet connection, if it's available in the first place, authentication with Active Directory is impossible. So it needs an easier way to apply HTTPS filters, without importing certificates into users' browsers and without the need for using an Active Directory. There must be a way around it. There are workarounds. But with applied workarounds, it will work out once, it won't work out properly 10 other times. That is my only request. Also, since Sophos took over Cyberoam, the online technical library and support library have become super messy. To get a piece of information is becoming a nightmare. They need to reorganize the online technical support and technical library. The easiest way to overcome this is to look at how the Cyberoam online technical library was structured and to build the Sophos technical library the same way. It is messy, totally unorganized, time-wasting. Instead of getting what you want in five minutes it takes half an hour.

2018-06-21T09:07:00Z
Learn what your peers think about Sophos XG. Get advice and tips from experienced pros sharing their opinions. Updated: September 2021.
541,108 professionals have used our research since 2012.