Sophos Central Device Encryption Reviews & Insights

Score8.4 out of 10

38 Reviews and Ratings

Overview

Synthesised from 5 reviews | Last Published May 26, 2026

Sophos Central Device Encryption is primarily utilized by organizations to enhance endpoint security and streamline disk encryption management, particularly for BitLocker. IT teams leverage its centralized capabilities to oversee and secure endpoints from a unified platform, handling critical functions like BitLocker key management, automatic device encryption, and recovery key storage. In TrustRadius reviews, its robust centralized management and seamless integration with native encryption technologies like BitLocker and FileVault are frequently highlighted as key strengths, alongside its straightforward deployment.

Reviewers also note the product's ease of use, self-service recovery portal, and positive ROI from reduced helpdesk support and streamlined operations. However, some suggest improvements in policy configuration detail, audit log quality, and the initial setup user interface. There is also a desire for expanded capabilities, such as file/folder encryption and enhanced XDR compatibility. Overall, reviewers find the solution effective for core device encryption management, despite these areas for refinement.

Pros

Centralized management of disk encryption
Integration with native encryption technologies (BitLocker, FileVault)
Streamlined deployment and rollout process
Automated BitLocker key management and recovery
Granular policy control for encryption settings

Cons

Policy configuration options could be more detailed and sophisticated
Quality of audit logs needs improvement
Initial setup process and user interface could be simpler
Lacks file and folder encryption capabilities
Limited compatibility with XDR solutions

Read Full Review Insights

View All Reviews

Sophos Central Device Encryption Reviews

11 Reviews

Security with Sophos.

Rating: 10 out of 10

Incentivized

June 5, 2025

Use Cases and Deployment Scope

Because our clients have top-secret products and processes, we must work on a highly secure network. We also need to protect our data from hackers, so we need complete control over network security. To allow certain websites and block others, Sophos Central makes it easy to granularly control each device on the network, as well as overall internet security rules.

Pros

Blocks unwanted website access.
Allows access to websites that a blanket blocking would prevent us from using.
Isolates user/machines individually to check/watch for errors and issues.

Cons

The blocking of specific websites could be explained and executed more easily. It should be a separate option to block unwanted website access more easily.

Likelihood to Recommend

It is mid-level when it comes to running it by a non-IT person. I have no technical/IT training and can figure out on my own (or with a little web search) how to do most tasks. It may not be best for the very tech-challenged operator.

Verified User

Administrator in Professional Services (1-10 employees)

Vetted Review

2 years of experience

Sophos Central

Rating: 8 out of 10

Incentivized

May 19, 2025

Use Cases and Deployment Scope

We have rolled out Sophos Central Device Encryption at multiple organizations. As administrators, we now have more control and oversight over the security of our endpoints. Through the real-time dashboard, I can see which systems are fully encrypted with BitLocker and where further action is needed. The rollout went smoothly: BitLocker was automatically activated without any user issues. Thanks to the self-service recovery portal, support requests have dropped significantly. Management is now more streamlined, and we can better meet compliance requirements.

Pros

Centralized management of BitLocker and FileVault.
Self-service recovery portal for end users.
Real-time reporting and compliance monitoring.

Cons

Expansion to File and Folder Encryption.
Compatibility with Dynamic Disks.
Knowledge needed to set it up.

Likelihood to Recommend

We recently rolled out Sophos Central Device Encryption for a client, and the results were fantastic. Thanks to centralized management, we can monitor all devices in a single overview without additional infrastructure. The implementation was quick- no separate agent required, everything integrated into their existing Sophos solution. What proved especially useful was the self-service portal for recovery codes; this significantly reduced support tickets. Additionally, the real-time reporting is invaluable for audits and compliance. Especially when combined with Intercept X, it provides a solid, comprehensive security solution. I believe this could also be an excellent solution for several other clients.

Verified User

Administrator in Information Technology (201-500 employees)

Vetted Review

3 years of experience

Sophos Central Device Encryption is an excellent solution to manage your endpoint encryption.

Rating: 10 out of 10

Incentivized

May 18, 2025

Use Cases and Deployment Scope

My organization uses Sophos Central Device Encryption to protect corporate endpoints with encryption and BitLocker management from its web-based Sophos Cloud solution. It addressed the need for encryption on mobile devices and provided a necessary solution while allowing us to manage the encryption, passwords, access, and removal of the keys in case the device is lost.

Pros

Sophos Central Device Encryption provides the ability to easily encrypt endpoints.
Sophos Central Device Encryption provides the ability to force and change passwords easily.
Sophos Central Device Encryption provides the ability to easily manage access to the device.

Cons

The Sophos Central Device Encryption policies could be more enhanced and detailed.
The Sophos Central Device Encryption audit logs could be better.
The Sophos Central Device Encryption real-time monitoring can be improved.

Likelihood to Recommend

Sophos Central Device Encryption provides robust, centralized management of BitLocker and FileVault. Its seamless integration, simplified key recovery, and compliance reporting make it ideal for effectively securing data. However, it can be complex to configure for some environments. The reliance on specific hardware and software can lead to compatibility issues and increased administrative overhead for smaller teams.

Verified User

Vice-President in Information Technology (501-1000 employees)

Vetted Review

8 years of experience

Sophos Central Device Encryption makes life easier

Rating: 9 out of 10

Incentivized

March 14, 2025

Use Cases and Deployment Scope

A easy way to central manage Bitlocker throughout a clients network. Force new endpoints to start encrypting the hard drive As well as centrally keep a copy of Bitlocker recovery keys.

Pros

Centrally enforce device encryption
Easy 3 button policy is sweet and simple to setup and rollout
Uses the same Sophos Endpoint client already installed on the machine

Cons

None so far, It does exactly what it is supposed to

Likelihood to Recommend

If you need to enforce hard drive encryption throughout your company and want a way to centrally rollout, enforce and manage. Then Sophos Central Device Encryption will work for you. Also keep in mind that when it comes to managing Bitlocker, you dont need something flashy, It needs to enforce a policy, keep track of Decryption keys for easy recovery. And thats about it

Stephan van der Merwe

Head of SecOps in Information Technology at Commsworth Solutions Limited (51-200 employees)

Vetted Review

Reseller

7 years of experience

View profile

Security and Compliances Covered with this masterpiece

Rating: 9 out of 10

Incentivized

January 13, 2025

Use Cases and Deployment Scope

We wanted to ensure our endpoints are secure and protected. We wanted to make sure the right access and policies are driven across the organisation and right amount of visibility is provided. Also from the compliances perspective we wanted to make sure that we are covered. Sophos Central Device Encryption provided a centralised control for the IT team to monitor in case of any attack making sure that CXs are in peace of mind wrt to the data and device at risk.

Pros

Makes sure you are covered from the compliances perspective
The data is secured and encrypted
Ease of deployment
Centralised Management Console that gives all the visibility
Micro level control of policies to be enabled/disable on the endpoint

Cons

Interface is a little difficult to get Hands On. It can be simplified for better adaptability
XDR compatibility should be enhanced
More simplified white-books should be provided to train the non tech teams
Commercially also the cost should be improved for different industry segments

Likelihood to Recommend

If you want to cover your Infra from the compliances standpoint along with security and encryption posture then this is the solution you should sign up for. If there huge endpoints in your org, with this solution and with the expertise of Sophos Central Device Encryption in this domain you can safeguard your end points and the terminals along with network at the outset making sure that the stakeholders are at peace.

Verified User

Manager in Sales (501-1000 employees)

Vetted Review

3 years of experience

Sophos Central Device Encryption Puts The Customer Security First

Rating: 8 out of 10

Incentivized

May 5, 2022

Use Cases and Deployment Scope

Sophos Central Device Encryption has been a huge help with compliance based issues. Customers that need extra protection and assurance have come to count on Sophos Central Device Encryption. We have sold it to many enterprises and small business clients who needed it for a variety of reasons including, protecting client laptops, meeting the needs for cyber security portfolios, and giving CEO's peace of mind knowing their networks are more secure.

Pros

Securing Data
Compliance
Easy deployment

Cons

simply the interface
usability for non technical teams

Likelihood to Recommend

Sophos is great in many cases, when a client asks about getting cyber security insurance, I can feel confident starting with Sophos Central Device Encryption. If a client has between 50-200 users, this product is very strong. This product is not suited for business cases where users are 0-25 unless they have both the budget and the specific need.

Alli Vaughan

Whiterock Cybersecurity in Information Technology at White Rock Cyber Security (11-50 employees)

Vetted Review

Reseller

4 years of experience

View profile

Sophos Central Anti Virus & Encryption Solution - Our Migration and Experience

Rating: 9 out of 10

Incentivized

August 13, 2021

Use Cases and Deployment Scope

We migrated from an on-premise Sophos SafeGuard solution. This was coupled with a separate on-premise Sophos Anti Virus. So the systems were on two separate on-premise servers. Also, this meant our users who were increasingly working away from the office, needed to be on the corporate VPN to be able to pick up new definitions and new policies. We migrated to Sophos Central. This is a single online, internet-facing portal that now contains both our Anti Virus and Encryption solutions. We are also a global business and can now have a single global system, with different 'region specific' policies that are applied by putting the endpoint into the region's group. This is much better for administering the systems and also for the users not having to connect to the VPN.

Pros

Centralised portal for both Anti Virus and Encryption
Internet-facing with the ability for global / multi region access for large organizations
Multi-level, built-in admin roles for different access levels for your Support Team. Also, you can define new roles to tailor to your organization

Cons

You will probably need to define some admin roles to suit your business unless you are a very large organization. The built-in roles are very siloed. For example, the Helpdesk role that your normal technician would probably be assigned cannot add nor move computers between groups.

Likelihood to Recommend

We found the incorporated system of both AV and Encryption to be an absolute breath of fresh air for us.
It is great for small and mid-sized companies. We rolled this out across our 4 global regions. We created region-specific groups for our endpoints and placed the appropriate endpoints into those groups. [Then] we defined policies for AV and Encryption that would be used inter-region and assigned roles to the different regions' support staff. Great stuff.

Verified User

Administrator in Information Technology (201-500 employees)

Vetted Review

1 year of experience

Sophos SafeGuard, A Must to protect your companies data

Rating: 8 out of 10

Incentivized

December 20, 2018

Use Cases and Deployment Scope

SafeGuard is deployed on all laptops to provide full disk encryption to protect our companies and clients data at all times. It also allows us to monitor that encryption status of all our company laptops.

Pros

Provides full disk encryption.
Provides monitoring for all laptops and tracks communication with our servers to ensure laptops are secure at all times.
Integrates with Windows seamlessly.

Cons

Data Recovery where the hard drive is having mechanical issues.
Expand policy management.
Performance of full disk encryption.

Likelihood to Recommend

Enforcing full disk in encryption in a corporate or enterprise level IT department.

Not ideal if performance is critical, SSD hard drives can be used to mitigate performance.

Verified User

Director in Professional Services (10,001+ employees)

Vetted Review

5 years of experience

Partnership with Sophos is great

Rating: 8 out of 10

Incentivized

March 6, 2018

Use Cases and Deployment Scope

We use Sophos for our email security. Together with Sophos partner we manage to use Sophos to encrypt certain emails. And we manage to use Sophos for the approval of the encrypted email. Before the email is sent to the recipient, the encrypted email will be quarantined. Once the IT Security gets the approval from the sender's Division Head, then IT Security releases the email. And the sender will receive the key for decryption, and sender needs to forward it to the recipient.

Pros

Email encryption, it can encrypt based on the criteria defined. We use regex for this to discover the content.
We can have a view of what is the content of the email being quarantined.
We use Sophos together with our Email Exchange

Cons

Sometimes Sophos response is slow
The regex we use is too complicated, probably need to have cotext based discovery or machine learning?
-

Likelihood to Recommend

From my experience Sophos could give us a proper email security solution at that time. However once the requirements of the security gets bigger such as machine learning, at that time we do not find it in Sophos. Despite all, we are really satisfied with the Sophos email security solution that we use.

Verified User

Manager in Information Technology (5001-10,000 employees)

Vetted Review

4 years of experience

SafeGuard Disk Protection

Rating: 9 out of 10

Incentivized

November 7, 2017

Use Cases and Deployment Scope

[It's being used by the] Organization to protect data using the Safeguard SOPHOS disk encryption solution. Sophos disk encryption is implemented across the globe/within entities.

Pros

Easy disk encryption process
Administration and management is very easy
Value for money, as this does not require any special engineer to manage the Safeguard Sophos application
The recovery/response challenge is secure

Cons

It's ride on the Microsoft BIT Locker utility
In the event of disk response the challenge process is tedious
Incompatibility issues with some known branded laptops
The disk encryption time is very high

Likelihood to Recommend

Well Suited

Large organization, centralized management

Less Appropriate

Cross-domain functional, trust relationship creates problem

Muneer Ahmed Khan,ITIL® v3

Dy. General Manager - IT in Information Technology at Glenmark Pharmaceuticals Ltd. (10,001+ employees)

Vetted Review

8 years of experience

View profile

Loading Reviews List....

Sophos Central Anti Virus & Encryption Solution - Our Migration and Experience

Rating: 9 out of 10

Incentivized

August 13, 2021

Use Cases and Deployment Scope

Pros

Centralised portal for both Anti Virus and Encryption
Internet-facing with the ability for global / multi region access for large organizations
Multi-level, built-in admin roles for different access levels for your Support Team. Also, you can define new roles to tailor to your organization

Cons

You will probably need to define some admin roles to suit your business unless you are a very large organization. The built-in roles are very siloed. For example, the Helpdesk role that your normal technician would probably be assigned cannot add nor move computers between groups.

Likelihood to Recommend

Verified User

Administrator in Information Technology (201-500 employees)

Vetted Review

1 year of experience