The level of network visibility and the implementation of the Xstream architecture stand out immediately. Having the Xstream Deep packet inspection DPI engine handle AV, IPS, Web Filtering, and app control in a streamlined architecture keeps throughput high even under heavy loads and heavy TLS 1 .3 inspection. From an administrator's daily workflow, synchronized security is a game-changer. The way the firewall communicates directly with endpoint agents to share health heartbeats and automatically isolate compromised machines cuts down incident response times significantly. Additionally, managing multiple distributed appliances through sophos central simplifies everything from firmware pushes backups to group rule management. The built-in SD-WAN orchestration and multi-path performance routing have also made multi-branch connectivity much more reliable. Review collected by and hosted on G2.com.

The unified policy paradigm-while powerful once you get used to it-takes some time to master if you are migrating over from traditional zone-and-rule firewalls like Cisco ASA or FortiGate. Finding specific NAT configurations embedded within or alongside standard firewall rules can feel slightly non-intuitive during the initial setup phase. Furthermore, initial fine-tuning of deep TLS decryption policies requires careful exception-building to prevent breaking internal web apps or line-of-business software, though the built-in pre-packaged exception lists help mitigate this. Review collected by and hosted on G2.com.