Sophos competes well with other content filtering products. It's categorization is on par if not better than the competition. What stands out most for me is it's ability to integrate seamlessly with the Sophos XG and XDR and Endpoint solutions. Like most network security …
I think Kaspersky is well suited for large and small companies. Larger companies can take advantage of the KSC (Kaspersky Security Center) servers to help manage a large network. The KSC has many good features to help monitor the health of the organization. It does a good job with updating and deploying remotely. It has inventory features, and can even deploy non-Kaspersky software packages uploaded to the center. KSC can become a source of good information about [your] network that can be seen at a glance. IT departments are normally smaller than they need to be. KSC helps with larger and smaller companies because of this. A small company would appreciate the amount of information and management that can be done through KSC without needing extra help. If the company is small enough that they don't have servers on-site, there is a cloud version. I have not used that to know how it differs from the local KSC.
Before Sophos, I would receive scammers regarding tradeshow lists. People wanted me to pay for lists, but these people weren't actually from the tradeshows. I can now block those, and have received much fewer of those scams. I am also able to open emails within quarantine to view them before deleting, releasing, allowing, or blocking. I use this to my advantage, and am able to make better decisions on what to do with the emails.
The Security Center is laid out very well and makes it easy to install and manage the client endpoint protection on servers and workstations.
The way security policies are defined and managed is very easy to understand.
The client programs seem to be lighter and smaller on the client systems than others I have used in the past. Using fewer resources is always an advantage.
Sophos does an excellent job of category-based content filtering. It's easy to configure and flexible for many environments with the ability to tighten or loosen restrictions as requirements determing.
Sophos' built-in capabilites can force safe search rules to protect against content work-arounds like Image search and search engines in general.
The Sophos XTreme architecture also helps improve the overall performance of the Web Content Filtering solution. It is very quick and very transparent when in use on the network.
The product is stable and accurate in detecting security threats. There are very few or no false positives in detecting security threats or unusual behavior and has very sharp heuristics. The product does the job very well including saving us money in getting 3rd party patch management tools as the business is already using Microsoft System Center Configuration Manager which is Microsoft product specific and the product patches these third party products e.g Adobe Flash Player
The integration with a known solution is not good (Cisco ISE), product (10.x) does not automate remediation, however security is great and detects security threats with accuracy including heuristics, very few or no false positives
I've used the on-premise server. I've only experienced one time that we couldn't open the console, and that was a server issue. It seems to be a dependable solution. It's there, and it's stable.
Users don't notice any slowdown with the antivirus running on their systems. There have been issues when the systems have missed a scheduled scan, and it was checked to run at [a] first available time, they will start a full scan at startup. This has caused some lag. Normally there are also some issues with the workstation, but it is something to note.
I give the maximum grade because we have no complaints; we never had any failure, serious error, and serious threat to the company. All of its features work very well. The great advantage of having a product supported by an industry-leading security company is that regularly updated security protocols will protect the system against all emerging threats.
Make sure to provide awareness campaigns on changes that will be implemented and WHY the business is doing it and the benefits reaped. Benefits reaped is very important for the justification of why things have to change and emphasizing the importance of security. This will reduce user disgruntlement and total bitterness on use of their workstation or laptop
Kaspersky is a leader in endpoint protection, but its ties to potential adversaries are unsettling. Kaspersky has a great threat research team and quickly identifies malicious software and its signature. Its web-based protection is also top notch. This is a great product but as with everything has its place.
Sophos has been a much easier product to configure and eventually manage, with preset rules and policies to start off right out of the box, saving administrators time from adding every category and or site. However you can add/import all know good company sites (internal url's) as well as local sites for a safer settings. (know sites)
You can create groups and create different policies for each group. You can customize many parts of the software before it is deployed. You can create different tasks and schedules based on the groups. It is customizable.