Reset XGS - First buy

Hi,

i assume you have purchased this second hand?

ian

Yes, I was planning to use it as home lab to experiment with a siem.

And I read somewhere that it was apparently possible to use a home license to write in a base standard firewall OS.

Hi Fabien,

To use Sophos Firewall Hardware with Sophos Home, you must reformat the hard drive or the easiest way is to replace it.

For additional reference, you may check the following KB 

•  RE: Sophos Firewall Home 

Hi Erick,

Many thanks for the link,

By refering from the informations provided i can see the following :

Can I install the Home user license on the base OS standard ?

For Sophos Firewall hardware

• Yes, however, you must either replace or reformat the disk.
• Any Version

But as I see below as Note: For XGS hardware, this won’t install/run/work, even with replacing the SSD.

So currently what can I do with the XGS 136 ?
And if i can manage to use it (with opnsense, pfsense, or sophos), will I be able send the logs to a SIEM (elasticsearch, qradar, etc) strictly for training on personnal use purposes (no commercial intent).

Is there any workaround provided by sophos ?
That would be nice to "save the planet" from the discarded appliances which could be reused.

Hi again,

Found the original topic where it was indeed possible to use Home license key on a XGS with standard XGS base OS, there will be no support about NPU but that's all.
(+) Sophos XGS Licensing using Home XG Licence - Discussions - Sophos Firewall - Sophos Community
So basically that seems to be possible to use, which is a good news ?
I am starting 

And the remaining questions about security in itself :

- Can i flash the bios to make sur it hasn't been tampered or changed ?
- Can i install in a new ssd or existing ssd the base XGS OS, to make sure nothing has been tampered or changed ?
- Is there a internal picture of the inside, to make sure there is no addition of a foreign component ?

Thanks !

HI,

flashing the bios is not possible, that maybe done during a firmware installation/upgrade by the XG installer.

The best approach is to replace the SSD, that will cause you less grief than trying to format the original one.

I am not sure about internal photos of the hardware, but if a strrange device has been aded  it will not work when you install the software version of XG.

Ian

If I replace the ssd, how should I install and which image should I use ? Where to find it ?

I have to first register the serial number on Sophos central and then it will propose the correct installer ?

Will it work with XGS hardware then ?

Thanks !

Thanks !

Did anyone succeed in this install ?
And which installer to use ?

Hi,

the XG software version is the software, not the hardware version. You do not need to register in central. When you apply for a licence you will also be shown a list of software versions you can download after answering a number of questions. Will the software version work with the XGS series firewalls, I don't know because I cannot remember anyone reporting back after trying, the inbuilt NUC is in the data flow path.

Ian