
Lastly the support, often times we're waiting above a week for a response, we also have to escalate cases to the Technical Account Manager to get replies of "dismiss the alert it's nothing to worry about" and recently I had a case where I had to ask 3 times for an install procedure for server core. scheduling a firmware update and using the XG as a NTP time source) also we have to manually set the MTU on RED interfaces for the tunnelled wireless networks, but when the XG reboots these are set back to 1500?! The interface is woeful, several useful features from the UTM have been removed (i.e. The Sophos XG, unfortunately this is where it all goes badly wrong I'm afraid. One problem we've had with our endpoints is when users shut their machines down, move sites and then try to re connect their heartbeat status doesn't go back to green until the laptop has been rebooted a few times, so far we've had good results on fixing this with disabling fast boot. The logging and reporting is really well done and will notify you of any problems with the heartbeats of endpoints. The Sophos Central administration page is fantastic, you can monitor and manage your endpoints seamlessly from a single pain of glass (I believe that is the industries favourite saying currently). Also if something is blocked by the web endpoint web control we get a generic "this page cannot be displayed" message. Speaking of the web control - firstly why does this not synchronize with the XG's web filtering platform yet? Absolutel nightmare to manage and troubleshoot. It offers traditional Anti Virus security aswell as peripheral control and web control.


Starting with the endpoint, Sophos offers great functionality in terms of it's "next generation" Intercept X which so far I have to say has been brilliant in stopping ransomware in my experience.
