Sophos UTM Firewall

w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
Just came across this little beaut. Sophos UTM (Unified Threat Management).

https://www.sophos.com/en-us/products/unified-threat-management.aspx

There is a free home version for up to 50 devices.

I take my home and office security very seriously. For instance, all my office computers are linux and firewalled. Up until now I did not like any of the free options out there. They were not advanced enough to counter the threats I was concerned about. So to get around this I was using a bootleg proprietary version of Kerio Control. However, there is always a trust issue with anything bootleg and Ive being looking for a product to go legit with for a while now. I think I have found it. Does everything I need it to do and its its advanced threat detection quickly picked up that one of my staffs android phones has some malware.

Very happy with it. Reporting and control is excellent. I installed the JeOS version.
 
w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
grump_grouch said:
There is a free version (home edition) : https://www.sophos.com/en-us/products/free-tools/sophos-xg-firewall-home-edition.aspx.

XG is supposedly the newer version that combines technology from the UTM platform with newer features and technologies (https://community.sophos.com/products/xg-firewall/f/sophos-xg-firewall-general-discussion/10811/difference-between-xg-firewall-and-utm9)
Click to expand...

Okay, so reinstall for me tonight. Thanks for the share.

Im starting to relook at the way I do security. Im trying to get it right from the ground up. Including buying hardened hardware to prevent things like arp poisoning.
 
w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
I think the home version is evaluation only for 30 days.
 
Fulcrum29

Fulcrum29

Honorary Master
Joined
Jun 25, 2010
Messages
55,031
ghoti said:
I think the home version is evaluation only for 30 days.
Click to expand...

No, the Sophos UTM Home Edition is their basic no cost UTM9 home solution, up to 50 IP addresses. There is no evaluation period.
 
G

grump_grouch

Well-Known Member
Joined
Jun 6, 2011
Messages
400
When you register, a mail with a free serial number will be sent to you. This will unlock the product and the 30-day trial period will fall away. The only restriction for the home edition that I know of is that the product is limited to utilising a maximum of 4 cores and 6GB of memory.
 
Fulcrum29

Fulcrum29

Honorary Master
Joined
Jun 25, 2010
Messages
55,031
grump_grouch said:
When you register, a mail with a free serial number will be sent to you. This will unlock the product and the 30-day trial period will fall away. The only restriction for the home edition that I know of is that the product is limited to utilising a maximum of 4 cores and 6GB of memory.
Click to expand...

Is that not only applicable to XG Firewall Home Edition?
 
G

grump_grouch

Well-Known Member
Joined
Jun 6, 2011
Messages
400
Fulcrum29 said:
Is that not only applicable to XG Firewall Home Edition?
Click to expand...

Correct. ghoti is currently running UTM but seems like he wants to try out XG. UTM is limited to 50 IP addresses (I think), whereas XG is limited on resource utilisation.
 
Fulcrum29

Fulcrum29

Honorary Master
Joined
Jun 25, 2010
Messages
55,031
grump_grouch said:
Correct. ghoti is currently running UTM but seems like he wants to try out XG. UTM is limited to 50 IP addresses (I think), whereas XG is limited on resource utilisation.
Click to expand...

Ah, cool. Sorry, I am in between MyBroadband and rugby at the moment.
 
w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
grump_grouch said:
Correct. ghoti is currently running UTM but seems like he wants to try out XG. UTM is limited to 50 IP addresses (I think), whereas XG is limited on resource utilisation.
Click to expand...

You got it, okay thanks for this. Ill give it a try. I just figured this out, so now I got a more advanced toy to play with. Ive got 8GB on my firewall machine, but ill just remove 2. Or ill set it up in virtualbox :p
 
w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
Well there is a big difference in the ISO size. The UTM iso was 900mb, XG is 360.
 
R

ramar

Well-Known Member
Joined
Jul 24, 2007
Messages
291
UTM is the original firewall developed by Astaro before they were bought out by Sophos. XG is the new version, developed since Sophos bought Cyberoam, incorporating features from UTM and Cyberoam. UTM is still actively updated and supported by Sophos, but XG is where they are putting more resources.
UTM has always been, and still is an excellent, stable platform. XG is still relatively new and has had a lot of teething problems and still has issues.
Many organisations still swear by UTM and wont move over to XG until all the issues have been worked out.
Personally i much prefer the UTM and still opt for UTM when buying new Sophos devices (their units can run UTM or XG). Though XG is coming along slowly.
 
SauRoNZA

SauRoNZA

Honorary Master
Joined
Jul 6, 2010
Messages
47,847
Very solid products either way.

If you get stuck Ghoti give me a shout as I'm a certified Sophos UTM Architect.

A little out of date but I don't think too much has changed.
 
w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
SauRoNZA said:
Very solid products either way.

If you get stuck Ghoti give me a shout as I'm a certified Sophos UTM Architect.

A little out of date but I don't think too much has changed.
Click to expand...

All good, I used kerio a lot, so I got a general idea of how this logic works. Was quickly able to setup some nice rules. Busy installing XG. I see there is an option to upgrade from UTM. People think I am being paranoid by upping my security levels, but I really do not take the threats lightly, and can honestly say, I have the most secure network for any councillor. If there is going to be a leak, it will not come from me.

Though, some of our politicians lack IT skills, one laptop I cleaned had over 10k infections. I was like "well basically everyone in the world has your private data". Its a good thing my party doesnt have to keep many secrets cause theres not a snowballs chance in hell the average PR could secure their systems.
 
w1z4rd

w1z4rd

Karmic Sangoma
Joined
Jan 17, 2005
Messages
49,747
What hardware would recommend for XG? I have it virtualized at the moment, but I want to commit it to hardware. Is there some small factor duel NiC system you can recommend at a reasonable price? I would prefer something with as few moving parts as possible.
 
Park@82

Park@82

Honorary Master
Joined
Jun 6, 2008
Messages
13,404
ghoti said:
What hardware would recommend for XG? I have it virtualized at the moment, but I want to commit it to hardware. Is there some small factor duel NiC system you can recommend at a reasonable price? I would prefer something with as few moving parts as possible.
Click to expand...
What would you say is a reasonable price?
 
You must log in or register to reply here.
Top