The Standout feature for me is Synchronized Security / security Heartbeat functionality across our endpoints and firewalls . Having Intercept X talking directly to the Sophos XGS firewall in real -time has saved out team multiple times . if users laptop pick something suspicious or triggers an alert, the firewall immediately isolates that host from the rest of the VLAN without requiring us to jump in manually out of hours .

from a management standpoint :

Centralized Policy Deployment : Pushing global polices or overriding settings for specific user groups (like developers vs general staff) is straightforward once you understand policy inheritance.

Live Discover(XDR): Being able to execute quick sql queries across our entire fleet to look for specific IOCs or missing KB updates saves us from running separate PowerShell scripts via RMM.

BitLocker Recovery: Helpdesk agents can grab BitLocker recovery keys in under 10 seconds straight from the users object page, which trimmed down our lock out ticket times significantly .

Threat Graphs : The root cause analysis visualization (Showing process parentage , modified files , and network connections) makes post-incident write-ups fast and easy to explain to non technical managers . Review collected by and hosted on G2.com.

While the core detection and cloud UI work well overall, there are definitely areas where it feels unpolished :

Local Resource Usage : On older machines or developer workstations, the deep learning files scanning and memory protection can lead to noticeable CPU/disk usage spikes.

Developers compiling local code or running Docker containers frequently hit false positives or slowdowns until we set up granular folder exclusions .

Support Turnaround : Opening a ticket directly through the portal of technical glitch or false positive reviews can feel like a black hole. Standard tier support takes too long to escalate beyond initial "have you restart the agent" scripts.

Deep Navigation & Reporting Constraints : Basic dashboard are great, but custom scheduled reporting feels clunky . Finding specific nested setting like Tamper Protection overrides or specific web control sb categories often takes 3 to 4 clicks deeper than it should. Review collected by and hosted on G2.com.

Unified Management (Single Pane of glass) Managing endpoint protection server defense email filtering and firewall policies from one central console significantly cuts down on context switching pushing global policies setting up exclusions and pushing agent updates across device groups is straightforward once the tenant structure is established.

Intercept X & Crypto guard feature are top tier in instances halts the process and automatically rolls back targeted files from local shadow copies before damage occurs.

Synchronized security (Security Heartbeat) If you run Sophos Firewall alongside Sophos Central endpoint the security Heartbeat Features is an operational game changer If a device drops to a Red Helt status due to a threat the firewall automatically restricts its lateral network access until remediated. Review collected by and hosted on G2.com.

Minor Resource Impact on older Hardware

On legacy or budget-tier client machines (especially those with spinning HDDs) background deep scans can cause occasional CPU spikes modern machines with standard SSDs and 16 GB RAM run the agent without any noticeable lag.

Reporting Customization limits

The built-in Executive summaries and compliance reporting dashboards requires upgrading complex Highly customized reporting Dashboards requires upgrading to full XDR or Exporting logs to an external SIEM. Review collected by and hosted on G2.com.

Th biggest selling point for our team is heaving the firewall (XGS series)and our endpoint protection living in the exact same dashboard. The "Synchronized Security" Feature specifically the security heartbeat is incredibly useful If an endpoint gets infected or starts showing suspicious behavior, it automatically drops its heartbeat, and the Sophos firewall Isolates it from the rest of the VLAN instantly without me having to LOG in manually after hours to kill the switch port.

From an Admin perspective managing global policies is straightforward. If i need to create a peripheral control policy to block rogue USB drives or add a global threat exclusion for a quirky legacy line-of-business app I can push it out to the entire tenant in a few clicks. tamper protection is also robust: they know IT can't easily kill the service or tamper with the registry to disable it. Review collected by and hosted on G2.com.

My main complaint is the resource footprint of the endpoint agent on our older endpoint if you have users running older laptops or developer machines doing heavy compiles, they will absolutely notice a slowdown during a full scheduled scan when or when Sophos is processing deep learning malware analysis on localized files. CPU spikes are a common helpdesk ticket item for us on those specific machines. Review collected by and hosted on G2.com.

In my experience, using Sophos has been a very good decision. It has allowed me to have everything centralized in Sophos Central, which makes it much easier for me to control and manage security.

Additionally, I greatly value its product integrations, because everything works together and improves incident response. The performance is quite stable and does not significantly affect the devices. As for the price, I consider it competitive for everything it offers. I have also had good experiences with technical support, which usually responds efficiently. And something that adds a lot is the use of artificial intelligence to detect threats more quickly and accurately.

in addition to its interactive and efficient UI. Review collected by and hosted on G2.com.

they could improve the sections on reporting and the generation of more up-to-date reports. Review collected by and hosted on G2.com.

The portal is easy to use, and each module is explained with clear, specific details. Integration with the endpoints is straightforward and accessible whenever needed.

Sophos installed on each endpoint receives updates at regular intervals, and the same status is visible in the admin console as well. Overall, the performance has been consistently reliable and never disappoints.

The pricing has gone down, which is a positive change, and it now meets all the expectations we had.

The vendor NetNxt, which we collaborate with for Sophos, has been helpful and responsive, and they answer whenever we need support.

I haven’t used the AI feature in the console yet, so I don’t have much to say about it.

The protection it gives for the endpoints is magnificent along with the tune able policies as per our needs. Review collected by and hosted on G2.com.

Few time there is a lag between the policy which are pushed to the endpoints and have to wait a long time to get it reflected.

IF this could be Improved that would be a great help. Review collected by and hosted on G2.com.

What I like most about Sophos Central is its unified management platform, which gives me full visibility and control across all security layers from a single console. It streamlines day-to-day operations by bringing firewall, endpoint, MDR, and email protection together in one place. The real-time alerts, synchronized security, and detailed reporting also make a noticeable difference in incident response and threat detection. On top of that, the cloud-based management makes it easy to deploy, manage policies, and troubleshoot remotely, which saves time and improves overall efficiency. Review collected by and hosted on G2.com.

Some advanced configurations require switching to the local firewall, and reporting/customization options could be improved. There can also be occasional sync delays between devices and Sophos Central. Review collected by and hosted on G2.com.

One of the best aspects is the single dashboard view, where I can monitor firewall, endpoint, and user security status in real time. I frequently use the Alerts & Events section to quickly identify critical threats and take immediate action.

The Device Management panel is very helpful for checking endpoint health, applying policies, and isolating compromised systems remotely. I also rely on the Threat Analysis Center to investigate malware detections and review root cause analysis.

The policy management feature allows me to modify web control, application control, and threat protection policies easily without logging into multiple systems. Additionally, the reporting section helps me generate scheduled reports for management and customers.

Overall, the centralized control, real-time visibility, easy policy deployment, and detailed reporting are the features I use the most, and they significantly reduce administrative workload. Review collected by and hosted on G2.com.

All good, full fill my all requirements. Review collected by and hosted on G2.com.

Enables a very clean oversight and configuration and control of the entire Sophos hardware and Software ecosystem. Also provides an easy reporting interface that helps with creating a report from"C" level reports to detailed technician styles reports. Review collected by and hosted on G2.com.

Only downside is the fact that in order to perform some admin level tasks requires a complex set of steps to get down far enough to perform those actions. Not always intuitive on how to get to where you need to be. If the interface could be customized in some fashion to make it any unneeded menus this would be an almost perfect single pane of glass interface. Review collected by and hosted on G2.com.

Sophos Central’s best strengths are its single, cloud‑native management console and tightly integrated AI‑driven protection (Intercept X, XDR, and MDR), which together deliver fast detection, coordinated response, and simple multi‑site administration—especially useful for distributed teams in Ahmedabad and India where centralized visibility and cloud hosting region choice matter. Review collected by and hosted on G2.com.

Cluttered navigation,Policy and alert workflows,Mitigation,Reporting and Visibility,Sometimes Sophos Central works slow, Sometime not able to download setup file from Sophos Central Review collected by and hosted on G2.com.

Sophos Central is that it lets me manage everything—like computers, firewalls, and mobile devices—from one easy-to-use dashboard. I don’t have to jump between different tools; everything is in one place.The integration with other Sophos products is seamless, and their support team is always responsive whenever help is needed. It’s simple, clean, and gives real-time protection updates, so I always know my systems are safe. Review collected by and hosted on G2.com.

The initial setup can feel slightly technical for beginners.But overall, it’s still very reliable and easy to manage once everything is set up. Review collected by and hosted on G2.com.