Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Run Sophos Firewall Home Edition on Virtual Machine in Synlogy NAS

Is it possible to run Sophos Home Edition on virtual machine in a Synlogy NAS?

or it much better to run it bare metal on an old Intel based machine?

I have a Synloogy NAS running in my home and if thats possible it would be great.

Thanks in advance for any response. Really appreciate.



This thread was automatically locked due to age.
  • The question really is, how powerful is there NAS and how many NICs does it have?

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • You might be able to do this but I have never tried it, nor will I ever try it. I have specifically put any NAS behind the firewall so the firewall will keep an eye on everything going to the NAS.

    If you believe the hypervisor on the NAS to be totally safe and in case of a vulnerability it will never give access to the NAS itself you could try it. If you don't totally trust the hypervisor on the NAS then it might be better to place the firewall in front of everything else in your network. Bare metal means you don't have anything to update but the firewall itself. You could also install virtual on a different hypervisor but make sure to have a machine dedicated as a hypervisor and try to just virtualize the firewall and nothing else. 

    Using a hypervisor you could also create a HA-setup of Sophos (if the hypervisor-machine has enough resources) so whenever updating your firewall the downtime would be really short.


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

  • i totally agree with you there. I think it beat the purpose of a firewall if you won't put everything behind it right. Thanks a lot for your inputs. I guess my question was totally stupid from the beginning. Cheers.