Sophos Central or stick with SEC?

Question

Hi, 
 My organisation are currently reviewing some possibility of migrating our endpoints over to central and just wondered if you guys could offer some views on the advantages/disadvantages? 
 We are a fairly large organisation with around 15,000 endpoints and approx 2000 servers, we are also multi domain environment (100's), we have the whole shebang Anti-Exploit, Web Appliances ect... 
 I've signed up for a central trial and to be honest i'm not over impressed with the UI, I just find it very un-user friendly and abit 'clunky' this maybe just me being a newbie and not knowing my way around the system as such! 
 Any how I thought i would just ask to see what peoples views are on the system as a whole and how easy is it in 'real life' to manage 1000's of endpoints compared to SEC? 
 Many Thanks 
 Tom

jak · Accepted Answer

Hello, 
 This article covers some of what you require: https://community.sophos.com/kb/en-us/121475 . 
 To be honest, given that number of endpoints I would consider talking to Sales/re-seller to see if you can get say 100 of your on-premise endpoint licences moved to Central and maybe 5 servers. You have a trial account so it should just be a case of giving them the account number under: https://cloud.sophos.com/manage/account/licenses . 
 I would explain that given the size of the deployment and you want to adopt a cautious approach that 30 days is not enough so I would like to have an initial smaller number of maybe endpoint and server licences. I would then consider deploying the Cloud client to either a couple of sites or departments. Maybe start with you immediate department to make it easier to troubleshoot any issues that might arise in phase 1. They should also provide better feedback other than it doesn't work. Maybe a couple of servers, maybe file servers that you could setup a update caches just to see how that behaves for you. Ensure that the Central Endpoints pull updates from a local source without all going to Sophos' CDN. 
 With on-premise, unless you have setup externally facing message relays it was always a little tricky to get 100% management of the roaming/remote client. Maybe a selection of mainly roaming users would be a good second phase test. Sales people on the road for example. I think you will need at least 2-3 months of management by Central to get a feel for it and how it will behave for you when scaled up but you should be able to cover: - A number of Endpoints say, Win 10 and Win 7 if you have both. - Onsite and external employees. - A couple of Servers, one of which is an update Cache that the clients/servers can use. Hope it helps. Regards, 
 Jak