Hi,
Recently updated from 10.6.3 MR-1 to the new SF0S 15.01 and here is the feedback:
Migration
- Had new rules created for active logged-in live users that seemed to be duplicates of existing rules; had to remove these extra rules after upgrade
- Custom services that defined both TCP and UDP ports had all reverted to TCP causing failures for certain devices on the network; had to correct the protocols to UDP to restore services
- High 100% CPU that drove up load average beyond the 5x threshold for the first 20 minutes after boot, it settled down after that and can only suspect internal first-run worker tasks as the cause
- Netflix streaming broke for TIVO and tired various scan/filter settings, the fix was to add a new rule and define TIVO device as the source with no filtering (defeating the UTM purpose) to allow streaming to work
- LAN to WAN speeds seems to have been reduced by 20% assuming the UTM is doing more work?
- WIFI to WAN upload speeds have dropped considerably, still investigating the traffic shaping (QoS) settings but something is different here
SFOS
- The web interface doesn't load correctly in Chrome and forced me to use another browser
- The web interface is very heavy so pages are slow to render in comparison with the previous 10.6.3 UI (feature request to have a lite theme option)
- The security policies rules have some odd behaviors:
- Enabling filters and making changes to policies reverts the filter status on save (can be quite annoying when working with multiple rules and forces a filter selection every time)
- Clicking on zone check-boxes sometimes don't work, the solutions is to click on the word directly (i.e. LAN, WAN, etc)
- The default filter specifies "All" however in the list there is an "Any" when choosing this no records are returned (seems like a bug)
- Rules in general are cumbersome which larger text boxes and more scrolling to achieve the same; please can you bring back the old Cyberoam view that gives a thin, clean and streamlined view of the rules (maybe a future feature lite theme option?)
- The log viewer has left-to-right scroll bar, please bring back old Cyberoam UI where pages could size correctly to the width of the browser. I was able to see all log entries on the old 10.6.3 UI and now have to scroll down and scroll right to see log entries -- very cumbersome
This is all I've caught for the moment. It is refreshing to see new features and capabilities (ATP, Heartbeat, etc.); please take lesson of your quality assurance processes from Cyberoam. In the past 3 years I've not been hit by a single UTM/UI bug with my use, however since joining into the Sophos family I've seen several issues which start to call quality control into question.
Thanks.
This thread was automatically locked due to age.
