Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 44 subscribers
  • Views 3035 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

thinking on moving over to sophos xg

ncage

Hi everyone. I'm currently with arista/untangle & thinking on switching over to sophos xg. I have some questions though about the firewall. One thing i use quite a bit with arista is their content filtering (which is why i'm not going to go with pfsense or opensense, their content filtering isn't that good).

Does sophos xg have strong content filtering abilities (i'm assuming it issues of deep packet inspection & SNI)? On untangle they call it application control & web filter (if that helps)



This thread was automatically locked due to age.
Parents
  • 0

    NCage, 

    1. We have used Sophos content filtering for many years on both UTM and XGS.  It is effective, and can be tweaked to suit your enterprise.  We have combined XGS capabilities with Next DNS.  Next provides additional filtering, blacklists and analytics for a small fee each month.  Next has been very good in combating phishing, (block new domains), etc.  Next works by not returning URLs for blocked sites.  Forward internal or XGS DNS to NEXT, very easy setup.  Basically we are combing 2 sets of eyes using different methods and lists to scrutinize content.
Reply
  • 0

    NCage, 

    1. We have used Sophos content filtering for many years on both UTM and XGS.  It is effective, and can be tweaked to suit your enterprise.  We have combined XGS capabilities with Next DNS.  Next provides additional filtering, blacklists and analytics for a small fee each month.  Next has been very good in combating phishing, (block new domains), etc.  Next works by not returning URLs for blocked sites.  Forward internal or XGS DNS to NEXT, very easy setup.  Basically we are combing 2 sets of eyes using different methods and lists to scrutinize content.
Children
No Data
Unfiltered HTML