After more than a decade of faithful service, the generic intel box I was using with the software version of Sophos XG has started failing. I was going to get another similar box, but in reading the various discussions on repurposing old XG/SG appliances, decided to take a different route and purchased a brand new Sophos XGS107 appliance, but without any license.
Given that it's a brand new license, I was wondering if it might be possible to avoid the hassle of wiping the existing drive on the appliance and activating the unit using my existing home license serial number. Does anyone know if that would work?
On a related note, would it be better to use my existing home license serial number (which will still be running while I set up the new appliance) or instead apply for additional home license serial number and use that instead?
Any advice would be most appreciated.
Hi dma0,
Thank you for reaching out to Sophos Community.
I'd agree with rfcat. Also, kindly see below for the Licensing reference guide.
Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Thank you very much Ian and Erick. I was not aware that the appliance includes a perpetual base license. That's great.
However, based on a review of the licensing guide provided by Erick, it seems that the base license has a couple of things missing as compared to a home license - specifically e-mail and web server protection, both of which seem to require separate subscriptions (and which I currently use in my existing setup). Would that be correct? Are there any other modules that are included with the home license that are not included with the base license?
Hi dma0,
You may check the following for the type of License.
Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Hi dma0,
That is correct, however, if you use the home license. the performance will be restricted to the Sophos Home limitations
https://www.sophos.com/en-us/free-tools/sophos-xg-firewall-home-edition
Also, please note that Sophos Home is intended only for private, personal, and non-commercial use.
Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Thanks very much Erick. Yes, I understand the restrictions with the home license as I've been using the home version for many years now.
And just to be clear, this is most definitely for private, personal and non-commercial use. My existing box and the new appliance are and will remain installed at my home.
Any guidance you might be able to offer in relation to my original questions above would be most appreciated - i.e. if it's possible to activate the appliance using my existing home license serial number and/or if it's better to use my existing home license serial number (which will still be running while I set up the new appliance) or instead apply for additional home license serial number and use that instead.
Hi dma0,
The home license will work on Sophos Appliance. The easiest way is to replace the HDD or wipe the disc.
or you may try the following
community.sophos.com/.../install-xg-home-on-xg-appliance---how-to
A firewall license is attached to the serial number; you can't have two firewalls running simultaneously.
I would recommend doing a backup, restoring it on the new appliance, and applying for a new home license. The previous device might serve as a backup device.
Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
I have now moved on to trying to wipe the existing partitions but so far have not been able to find a boot usb that actually runs. I understand that the XGS 107 uses an x86 processor, so have tried downloading 32 bit boot drive images. I've tried Hiren's boot CD and GParted Live so far. They seem to boot but then at some point both freeze and all I see is a cursor when connected via USB console.
Any suggestions would be most appreciated.
Hi dma0,
there a some posts if you wipe the built-in disk with a live-linux that the boot-loader will not be wiped correctly. You can remove the disk and attach it to a booted system and wipe it there or (as I did): install Veeam Agent for Windows free and create a recovery media (will be a recovery-windows installed on the stick) boot it up and use Shift + F10 (cmd prompt) and use DISKPART -> lis dis (get the disk #) -> sel dis # -> clean. Reboot and reattach the Sophos Installer usb-stick and all is good. :)
_______________________________________________________
Sophos SG 210 with Sophos XG Home - 20.0 MR 1
If a post solves your question please use the 'Verify Answer' button.
Thank you Thomas. I noticed there were some that indicated success without needing to remove the disk and attaching it to another system and unfortunately based on purchasing decision on that. I'm sure that would work but just because of my own personal preferences decided not to take that step - didn't want to spend the additional time and effort and risk borking a perfectly good and new appliance and because I think I saw something else about drive being integrated into the 107 (i.e. non-removable). I've decided instead to try to sell the unit and proceed with my original plan (i.e. using a generic Intel server as I did for my existing firewall.
As perhaps a caveat to others, if anyone is thinking of going down the same route (i.e. using a home license with an actual Sophos appliance), it may be advisable to perhaps reconsider and just buy a plain vanilla intel box. I thought using a new authentic Sophos appliance would make things easier and that's definitely not the case - it's a bit of a nightmare actually.
A few years ago I got a Sophos SG 125 Rev.3, and also wanted to apply the home licence to it.
A little bit of searching, and I found all I needed to do to apply the
Home Licence to the Hardware device, was .....
Delete/Rename /etc/asg -> /etc/asg.bak
Then the new Home Licence would install without an issue.
Hey thanks very much Trevor. I've since moved on to using a plain server but I'm sure this will come in handy for others.