Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 22 replies
  • Subscribers 45 subscribers
  • Views 17768 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG complicated and confusing

logan517

Hi,

 

the last 5 years i've using the UTM as a virtual appliance at home with the home use license -> max. 50 ip's
And since every device has an ip, the problem is the limitation with the 50 maximum ip's

So i've to switch from utm to xg but that is harder than expected.

I think the web interface is very complicated and confusing.
Some functions are strange. e.g. why do i've to assign an ip to an interface, that has only sub-interfaces with vlan? (keyword native-vlan => /dev/null)

Why do I have to specify a source, destination zone AND source, destination ip for each firewall rule
Or why the hell i can't delete the default zones? I don't need DMZ and i'm a person who want it clean and get rid of stuff that is not necessary.

I have somehow the strange feeling of an Apple product and not a firewall for experienced system admins
Firewall ON / OFF

My first impression tells me that the XG is still in the aplha stadium.

 

I can not be the only "old" UTM user who does not like the XG yet.

Please tell me your experiences. Possibly. it is only up to me, since I'm used to the old webinterface.

 

Regards
Tobias



This thread was automatically locked due to age.
Parents
  • 0

    Hi Tobias,

    the VLANS on the XG are L3 while the VLANs on the UTM are L2. So to get L3 to work you need an L2 underneath and it needs an IP address.

    Each firewall rule is unique in that you can set your source and destination in greater detail. It allows you to point different users at different gateways, some using proxy others not. Also the XG has a different approach to firewall management/access it is application based where the UTM is site based.

    You are correct the menu system is not logical, but has improved so items are linked between menus.

    Ian

    XG115W - v20.0.3 MR-3 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • 0

    Hi Tobias,

    the VLANS on the XG are L3 while the VLANs on the UTM are L2. So to get L3 to work you need an L2 underneath and it needs an IP address.

    Each firewall rule is unique in that you can set your source and destination in greater detail. It allows you to point different users at different gateways, some using proxy others not. Also the XG has a different approach to firewall management/access it is application based where the UTM is site based.

    You are correct the menu system is not logical, but has improved so items are linked between menus.

    Ian

    XG115W - v20.0.3 MR-3 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data
Unfiltered HTML