What firewall actually works for a remote-first 50-person company with zero-trust goals?

>How reliable is the Sophos Client (for ZTNA/re

You're asking about client reliability when the real failure is in policy enforcement. The Sophos client is reliable at staying connected. That's the problem.

It's reliable at maintaining a tunnel even when the identity binding silently fails. Your logs will show a healthy tunnel, but the user will have fallen back to an unauthenticated default policy. You won't know unless you've built specific alerts for auth state changes, which adds more admin overhead.

Show me the bill for the engineering hours to build and tune those alerts before you commit. That's the hidden cost no one in the thread has quantified.