Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 34 replies
  • Answers 1 answer
  • Subscribers 45 subscribers
  • Views 8259 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What kind of Intel CPU is capable to handle the workload?

Wepee

Hi,

I could not find any information about the CPU to run Sophos Home Firewall v20.

All I know is that FW v20 only can run on Intel CPUs and supports 4 cores. 

Given that I have an old Intel Core2 Quad 8XXX, which does not supports Intel AES instruction, 

would the CPU be running slow as an VPN server? 

If not, what kind of Intel CPU is recommend? Intel 3rd Gen CPUs?

The home firewall will be used at home catering about 2-6 people.

Thank you.

Regards,

Marcus



This thread was automatically locked due to age.
Parents
  • 0

    The Core 2 quad which is only a 45 watt CPU (no hyperthreading) will be fine for XG Home. It will be even better if you don't use HTTPS decryption, and limit your IPS rules. You would have nothing to worry about. It would be on an older motherboard supporting legacy mode BIOS, so you could run the firewall bare-metal without needing to virtualize it with Proxmox, ect. If you have between 4 to 8Gb or RAM, you will be fine, the home version is limited to 6Gb or RAM even if you have more. Any Intel CPU 9th gen or lower will be OK as long as you are using a retail motherboard (not HP) since it can be supported by the firewall, otherwise any current or older gen CPU would be fine if you want to virtualize through Proxmox, VMware, ect.

    Also, the older server-grade single/dual/quad port Intel NICs are well supported especially for use in bare metal installation. Realtek NICs are not recommended,. The newer Intel NICs (i219+) would almost certainly need to be virtualized.

  • 0 in reply to alan weir

    Hi, Thanks for sharing.

    I am going to run Sophos Firewall on a dedicated PC, so Proxmox is not applicable to my case.


    Yes, I was thinking about using Core 2 CPU but did not proceed due to the following reasons:

    1) This platform does not have built-in GPU, meaning I will have install a cheap VGA card and that is going to drive up the wattage usage.
    2) This CPU does not support AES-NI, so running it will be slow when I have VPN server set up.
    3) I need to use PCI-E express bus X16 slot to install my quad port INTEL NIC which uses X4 PCI-E lanes, how am I going to install a cheap VGA card?

  • 0 in reply to alan weir

    Thank you for your suggestion. Yes, buying an Intel dual port NIC will solve the problem.
    But, the Core2 Quad CPU platform is getting very old nowadays and not to mention the high power usage when running 24/7, compares to the modern CPU.

    If I have a chance to build a custom PC to run Sophos Firewall, I would not built it, just buy from ebay, a 2nd hand XGS appliance will do.  

  • 0 in reply to dirkkotte

    Sorry, I very new to this platform, what is SF0S21 ? Sophos Firewall OS version??

  • 0 in reply to Wepee

    correct SFOS 21 =  Sophos Firewall OS version21


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to Wepee
    Wepee said:
    If I have a chance to build a custom PC to run Sophos Firewall, I would not built it, just buy from ebay, a 2nd hand XGS appliance will do.

    Don't spend too much money on the XGS. The XGS has a secondary CPU for off-loading which is not functional with the home version of the software ISO. Also, the XGS series has no video output, so will have to use the COM ports which is not fun. Instead, look into something like this that is fanless.

    https://www.amazon.com/Q330G4-I3-4005U-Fanless-Ethernet-Untangle/dp/B074XPXFQN/ref=sr_1_4?keywords=fanless%2Bpc%2Bintel%2Bi211&th=1

  • 0 in reply to dirkkotte

    That is most likely not relevant for most home users, as they use the SFOS software version and not the Hardware. Software installation will be able to update to V21.0 

    __________________________________________________________________________________________________________________

  • 0 in reply to alan weir

    XGS is IIRC not at all capable to run Sophos Home on it.

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

  • 0 in reply to dirkkotte

    Oh, you mean the next version of Sophos Firewall v21, ok thanks for the heads-up.

  • 0 in reply to alan weir

    Alright, thank you for sharing.

    I didn't know XGS has a 2nd secondary CPU.

    Sorry, I mean to type: XG not XGS.

    For example: XG 135: https://www.ebay.com/itm/354945315163?itmmeta=01J50Z6BTY8RV979NA9CVD65ZB&hash=item52a463b15b:g:IfsAAOSwsXRlBbXb

    This unit does have HDMI video output

  • 0 in reply to alan weir

    OK thanks, I meant to type: XG not XGS.

    The XG 135 in ebay is arount USD $ 109. which does have HDMI video output.

    I cannot post a link here, because I think I am not allow.

  • 0 in reply to LuCar Toni

    Is it too early to say whether there are plans to include an updated Linux kernel version or even UEFI support with v21?

Reply Children
No Data
Unfiltered HTML