Probably ways but if you have it working in pfsense probably not worth spending the time to try Sophos. Not a very common use case though.
Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.
Maybe not creating a gateway group of two or more client connections but for home users it's actually quite common to want/need your firewall to be able to act as a VPN client to a VPN service.
But in most situations that's done by the router in front... at least that's the likley logic Sophos is using given the target enterprise audience.
i was looking to download the UTM and i got this page then nothing after i click on the links.
am i doing something wrong?
am i doing something wrong?
I'm not sure I understand the use case you are referencing. Every firewall I've worked on (including my current Sophos UTM firewall at work), there is no router in front. The ISP provides a WAN connection that is then connected to and setup as an interface in the firewall and used as the default gateway in most cases. A client VPN connection could (if supported) be setup as a similar interface and used to route certain traffic out of it instead of the WAN interface.
how compute hungry are your XG VM/appliance?
i fired up my XG VM (bridege mode) with 4 vcpu and 6Gb running on a 2660v2 and it was using up 25-35% of my cpu.
i fired up my XG VM (bridege mode) with 4 vcpu and 6Gb running on a 2660v2 and it was using up 25-35% of my cpu.
I just tried XG again this weekend. Got it installed but couldn't get any connectivity (I know it's all off by default) but only had a few minutes to play with it. Not as lightweight (obviously) as pfSense/OPNSense and you can "feel" it in the sluggish responses to the UI. I'll try working it some more when I get a chance.
What resources are you giving it? That might be why I ditched it
Sent from my HTC 10 using Tapatalk
the home edition is limited to 4 vcpu, 6gb ram, so i gave it all that on a 2660v2.
yeah, i was wondering what it was crunching too.
when i first built it, i had it on an isolated vswitch. gui was reachable and the esxi wasn't going nuts. decided to move it to my local network and configured it to run on bridge mode. that's when it started going nuts. lol
50 IP active within the UTM itself, i.e. the UTM is handing them out and routing them.
As long as you handle your DHCP and routing elsewhere (I run DHCP on Windows 2016 servers and route by way of Cisco 29xx & Cat 3560G's), you can effectively park an unlimited number of IP addresses behind UTM 9.
How does Sophos not have an in place upgrade option from UTM to XG? That eliminates a large amount of users from being able to move to XG, especially myself (at work).
They must have some config export import toolkit atleast ? If not pretty poor, does not affect me but as you say a lot of business and bigger installs would need something or else never migrate. Not that they seem to be in any hurry to get people off UTM are they ?
As far as I've seen they do not. If someone knows better correct me if I'm wrong but I can't find anything that allows me to migrate my config (over 4000 definitions, etc.) from UTM to XG.
Nope, they promised a Migration Tool by the end of the summer. Now they are saying early 2018. Also, if you use most of the features in UTM don't even think about migrating for at least a year as XG is missing many features I use in UTM.