Item: Sophos SG Firewall Appliances
Rating: 7
Author: Verified User

Use Cases and Deployment Scope

We cater to multiple customers in MSSP segment and many of our customers have Sophos SG and XG Firewall installed. It is an excellent product with next-gen capabilities that include IPS, VPN among others. The operation is quite straight-forward and there are no major hiccups, per se. I would rate this on par with other major players in the Next Generation Firewall segment as it is a strong contender.

Pros and Cons

Excellent Network Firewall
Good IPS detection
Good VPN capabilities
Inbuilt AV detection capabilities

I have had major issues integrating this with SIEM solution as the device is not CEF compliant
Vendor support has been not on par with other major NGFW vendors like Palo Alto
Documentation and troubleshooting content on forums is lacking

Return on Investment

Positive ROI due to the competitiveness of the product.
Positive impact as the device is fully functional and easy to operate.
Negative impact when it comes to log integration as it does not support industry logging standards.

Alternatives Considered

Palo Alto Networks Next-Generation Firewalls - PA Series and Cisco ASA 5500-X with FirePOWER Services

It certainly stacks up well as it is very competitive in the pricing segment while having all the features that an ideal NGFW should possess. Basic functionalities like Network Firewall, Proxy and VPN work flawlessly while advanced features like IPS perform reasonably well. The detection content is very relevant and performs well.

Key Insights

Do you think Sophos SG Firewall Appliances delivers good value for the price?

Yes

Are you happy with Sophos SG Firewall Appliances's feature set?

Yes

Did Sophos SG Firewall Appliances live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Sophos SG Firewall Appliances go as expected?

I wasn't involved with the implementation phase

Would you buy Sophos SG Firewall Appliances again?

Yes

Other Software Used

Palo Alto Networks Virtualized Next-Generation Firewalls - VM Series, Cisco Firepower 4100 Series, Arcsight Enterprise Security Manager

Likelihood to Recommend

It is a great fit for small to medium enterprises who are low on budget. The pricing is very competitive when compared with other major players like Palo Alto and the features match any NGFW Firewall in the market. However, in my opinion when it comes to massive performance requirements, I would say the Sophos SG Firewall Appliances lacks the sheer power that other devices in the market have.

Review for Sophos SG Firewall Appliances

Overall Satisfaction with Sophos SG Firewall Appliances