Sophos XG

[Mr_Jiminy]

Has anyone got hands on experience of Sophos XG in the workplace?

 

I'm still reading bad reports about this, even after several update rollouts.

 

I've been using Meraki MX appliances, however after lacklustre support of late, I'm keen to move to move to something else and figure NGFW is the route to take.

[Wave9_Lee]

PM'd cheers, Lee

[localzuk]

Well, I've just bought 5 of them. So I'll let you know in a month when I've been using them for a bit...

[itwasntme]

Have been using Sophos XG as a virtual appliance for approx 6 months after migrating from Cyberoam (which would seem to still be the foundation for Sophos XG).

 

No complaints with the performance or reliability of the platform, both have been solid. Updates/upgrades have been painless too.

 

The dashboard has at least until recently (not checked since recent MR3 update) been somewhat unreliable, reporting for example 3 at risk users, only to click on it and see 5?!

 

Personally, I strongly dislike their way of laying out 'Policies' which actually include all of the ACLs in place. If you have many "zones" i.e. LAN, WAN, DMZ, StaffBYOD, StudentBYOD, Guest etc, along with many different filtering tiers i.e. Guest, Student, Sixth Form, Staff, Admin/minimal filtering (safeguarding/social media/whatever) then the number of "Policies" can become pretty difficult to keep track of.

 

Users on domain joined windows computers have a relatively painless experience using STAS (Sophos Transparent Authentication Suite), similarly, RDS users have a pretty easy time with the TC version of the former.

Much less happy with the user experience for Mac users and, at least when coupled up with meraki APs, really dissatisfied with their idea of a solution for single signon with BYOD devices (Radius SSO).

[Gaz]

I tried it out at home and I didn't like it. As itwasntme said, the layout of the policies is really bad. The interface as nice as it looks isn't too user friendly. I've gone back to the Sophos UTM which in my opinion is easier to use.

 

I'm considering an MX appliance for work, support aside are the devices good enough for education use? @Mr_Jiminy