Sophos ZTNA

Name: Sophos ZTNA
Brand: Sophos
Rating: 4.7 (1980 reviews)

Leader

Defeat Cyberattacks

Est 1985|Valuation $3.8B|Raised $805.9M

LinkedIn 720K|Website|Web traffic 4.7M|FTEs 5,500|HQ Abingdon-on-Thames, England, GB

MarketsNetwork Access Control (NAC)Security Service Edge (SSE)

Platform CoversFirewalls

Published Sep 28, 2026

01Common complaints

1. Organizations that require transparent public pricing and self-service purchasing models should consider vendors that publish list pricing and support rapid self-procurement. 2. Enterprises with a high percentage of macOS users and strict stability requirements should evaluate macOS client behavior closely and consider alternatives with stronger macOS client track records. 3. Deployments that require maximum global performance for widely distributed users and that prioritize a vendor with extensive global PoP infrastructure may be better served by vendors with large, born-in-cloud footprints. 4. Environments with complex application publishing patterns (for example, webhook-driven apps, unusual internal routing, or RDS farm topologies) where procurement timelines do not allow iterative troubleshooting. 5. Organizations seeking a ZTNA-only, vendor-neutral posture integration without dependence on a single vendor’s endpoint/firewall suite; Sophos’ strongest integration benefits are realized when the broader Sophos ecosystem is in place.

Deal disqualifiers

Requirement for transparent public pricing and self-serve purchasing.
Heavy macOS usage with zero tolerance for reported client/DNS stability issues.
Need for an independently managed, vendor-neutral ZTNA approach without integration into a specific vendor’s endpoint/firewall portfolio.

Known / reported issues from community threads

Reports of macOS client DNS issues in at least one community thread.
Performance and latency concerns raised by multiple users in forum discussions.
Cloud gateway access quirks for internal/private IP publishing in specific test scenarios.
Reports of RDP initialization or connection errors in some user threads.

Vendor-acknowledged packaging/licensing transition risk (2026)

The vendor communicated a transition of ZTNA into a Workspace Protection bundle with defined milestones, which introduces potential changes in licensing, packaging, and renewal terms. Organizations should request explicit details about how existing subscriptions and renewals will be handled during the transition period.

Roadmap notes

Vendor-released notes indicate ongoing feature work, including on-premises AD support and improvements to failover and gateway capabilities.

02Why they buy

Unique selling points supported by vendor materials and user sentiment

Ecosystem integration: centralized management in Sophos Central, Sophos Firewall gateway options, and the ability to incorporate endpoint posture signals are consistent differentiators in vendor documentation.
Reported reconnection behavior: at least one community report described faster reconnection compared with the user’s prior SSL VPN setup.

Areas where competitors may have advantages

Vendors with established, global SSE/SASE infrastructures may offer broader platform bundling and advanced features (for example, deeper DLP/CASB capabilities) in a single suite.

03Field reports

Important caveat: review platform coverage

A dedicated, widely indexed set of end-user reviews for a distinct "Sophos ZTNA" product was not located on major review platforms in the searches performed. Reviews for other Sophos products (e.g., firewall, endpoint) are present on those platforms. The assessment here therefore relies on vendor documentation, partner materials, and community discussions (for example, technical forums and community discussion threads) where ZTNA-specific issues and experiences are described.

What users report positively

In community discussions, some users report improved reconnection behavior compared with their experience of SSL VPNs; a few users described faster reconnection in day-to-day use.
Reported benefits from product messaging and vendor materials include reduced lateral movement risk through application-level access controls and simplified management through centralized administration when integrated with the Sophos platform.

What users criticize / complain about

Recurring themes in community threads include: - Pricing concerns relative to the overall cost of the Sophos stack for smaller customers. - Reported macOS client issues, including DNS problems in at least one user report. - Performance and latency concerns raised in multiple community comments, accompanied by reports of support tickets. - Troubleshooting complexity for certain application publishing scenarios (for example, internal/private IP access or RDS farm configurations). - Instances of extended support investigations reported by some users for specific connection or performance issues.

Why customers choose this product over alternatives

Common reasons cited for selecting Sophos ZTNA include:

Existing investment in the Sophos product ecosystem (Sophos Central, Sophos Firewall, and Intercept X), with preference for a same-vendor solution.
The objective of reducing VPN exposure and simplifying remote access management.
Interest in combining identity and device posture signals for access decisions.

Why some customers leave or consider alternatives

Common churn drivers suggested by community feedback and user reports:

Performance problems and unresolved support cases.
Client stability concerns, including reports specifically affecting macOS.
Cost sensitivity among smaller organizations that already pay for other Sophos products.
Difficulty publishing certain application patterns that require iterative troubleshooting.

Availability of quantified ZTNA case studies

Vendor materials located in public sources primarily included product pages, partner announcements, documentation, and whitepapers. Detailed third-party-validated ROI case studies specific to ZTNA were not identified in the reviewed sources.

Vendor-published benefits (methodology gaps)

Vendor materials frequently describe benefits such as reduced attack surface and VPN replacement savings. These materials typically do not disclose a complete methodology for ROI or performance claims. Organizations should request reference customers and validated before/after metrics (for example, incidents related to exposed RDP or lateral movement) during procurement. Requested procurement evidence: - Reference customers in similar industries and of similar size. - Before/after metrics related to VPN incidents, lateral movement, or remote-access-related compromises. - Latency benchmarks appropriate to the organization’s user locations compared with current VPN performance.

04Best fit

Company sizes

Heuristic fit: small-to-midsize and mid-market organizations with centralized IT/security teams and an existing Sophos endpoint/firewall footprint.
Managed service providers (MSPs) that manage multiple small-business customers are also a potential fit, depending on billing and licensing preferences.

Industries

Common buyers include professional services, healthcare, education, and manufacturing—sectors with frequent remote access needs and concerns about ransomware and lateral movement.

Roles/personas

Decision makers: IT Director, Head of Infrastructure, Security Lead/CISO in mid-market organizations.
Implementers: network and security engineers responsible for identity, endpoint, and remote access management.

Pain points addressed

Reduction of exposed VPN and RDP attack surface.
Enforcement of application-level access and segmentation.
Integration of identity and device posture signals into access decisions.

05The pitch

What the product does (core value proposition)

Sophos ZTNA (Zero Trust Network Access) is a cloud-managed secure remote access product intended to replace or reduce reliance on traditional VPNs for accessing private applications. The product focuses on user-to-application access (rather than network-level access), applying least-privilege principles and micro-segmentation. Sophos describes ZTNA as an access layer that can incorporate device posture signals when integrated with Sophos Endpoint/Intercept X and Sophos Firewall. Key functional components as described by the vendor: - ZTNA client for managed endpoints (Windows/macOS) plus clientless/agentless access options for some web applications. - ZTNA gateways (virtual appliances) to publish applications, and a Sophos Firewall-integrated gateway option. - Identity-provider-driven access policies with support for providers such as Microsoft Entra ID, Okta, and on-premises Microsoft AD (added in Sophos ZTNA 2.1).

Target market and market positioning

Primary audience: SMB to mid-market organizations and customers already using the Sophos product ecosystem (Sophos Firewall, Sophos Central, Sophos Endpoint) seeking an alternative to traditional VPN.
Positioning: presented as a ZTNA solution designed to simplify deployment and management, with stronger security when used in combination with Sophos’ platform features (e.g., synchronized telemetry and centralized reporting).

Get a comprehensive analysis of Sophos ZTNA including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →