It is an easy product to have, excellent integration with other Sophos products' metrics. Overall Sophos include a lot of features that make XG firewalls, especially XGS firewalls, an excellent option for companies from small to mid-size.

Integration with Sophos products ecosystem. Easy to use and configure, Cloud management, SD-WAN, and VPN orchestration. Unlimited VPN options with no additional licenses needed.

By far logs and reporting must improve dramatically. The competency is better at this point.

I know having a firewall is important to protect a business from the outside. These work well and while you do need a subscription they don't turn into useless bricks if it expires.

Some of the features take some time to learn which should be expected.

Not good. Used it for a year, before that used Kerio Control, after many problems and failures went back to Kerio.

Support is good, also the warranty. Bought 2 XG 210 appliances for HA, had to replace them on warranty 3 times, it was done without issues. Antivirus and overall filtering is good.

Used it on versions 15 and 16, each update broke something, even minor ones. HA in paper sounds good but it was a risk, almost every time we updated it crashed and had to force a restart. Interface is slow and poorly designed. Its almost impossible to get a clear view of what traffic is passing in real time. Overly complex and limited at the same time.

I realize that it sounds overall negative, but I do actually expect to have a positive term (committed to a minimum of 3 years). Learning curves are inevitable. I really enjoy the flexibility, the power, and the ability to keep multiple firewalls in sync with each other. Security is complicated, and so far I feel like it will get the job done, and done well.

I feel pretty confident in its ability to keep the network secure. Ours is connected to the Sophos UTM and Endpoint Protection software, and I do really like how they are able to talk to each other. There is good amount of customizability, and since switching to Sophos from our previous vendor, I've enjoyed that ability to better differentiate the networks and even time-based access on a per network basis.

There's a few things I wish were different. The biggest gap is that it doesn't have any sort of mDNS reflector. Our previous router had that, and needing to configure a separate server for that purpose has been far more involved that I would like. If the router had the feature built-in, it would bring me much joy. The other big one is the logging. It's really designed more for a business environment where you "trust" your employees. So the logs aren't designed to help you figure out if someone is trying to break rules, but rather to find potentially compromised devices. Since I work at a boarding school, we really want to work with the families to correct bad behavior, not just set up some obstacles and walk away. And then, coming from Ubiquiti, I have found the interface cumbersome to understand. It's taken a fair amount of getting used to. While there are many features, I feel like I have to do a lot of clicking and hunting to get changes implemented, confirmed, and troubleshot.

We've gone from a single firewall to 11 across multiple locations. They have done right by us.That said, in 2022&2023 they raised their product pricing multiple times with 2023 being a much higher than inflation pricing. I think they need to reconsider this level of price increase considering they are not yet competing in the top tier of firewall manufacturers.We will most likely stay a customer of theirs but I don't see as many new customers because of this price hike. If there is any more price increases we will most likely start looking around.One last thing on pricing. I rated this review solely on our purchased amount for firewalls. If we had it to do over again at this new pricing, it would have been more like a 2.5-3 star rating.

The feature set of their firewall product line was a great value and I also use their free home product at home because I am that type of IT nerd.

Going into the product I knew it wasn't considered a top tier product. Over the last few years they have made really good improvements but they didn't do the best at providing free training on these changes.The VPN client is adequate but needs to be enhanced to what others are capable of for multifactor. Their token based option to me is just OK.