Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Question regarding bare-metal hardware and SFOS Home

So -- in the olden days we could take old retired SG appliances, wipe the drive (delete partitions with Gparted, etc.), and load SFOS Home on them -- we had engineers that would run them at home for training, and to test bleeding-edge releases, etc.   Apparently the new bare-metal software installers (ISOs) for v20 and up (and maybe the old ones) detect if one is trying to do the same with a XG (not XGS) appliance.  As best I can tell the installer sees the BIOS string with the model number in it and says it will not install, due to it being a XG appliance (no doubt to keep end user customers from accidentally goofing up their appliances).   So it looks like that avenue for inexpensively training engineers is closed.... (though if someone has a helpful hint that's great too).

That said, what bare-metal hardware suitable for use in a home environment (someone without a rack, something that doesn't sound like a jet plane) have you had success with?  Not looking for crazy performance or anything, just basic home use for our engineers, etc.



Added TAGs
[edited by: Erick Jan at 7:12 AM (GMT -7) on 26 Sep 2024]
Parents
  • I’ve installed V21 EAP on XG Hardware recently without issues. Sure you used the correct (software) install-iso?

    For SG/XG hardware that should still be fine.

  • Nope to both answers with XG hardware (Yes, you can do this on old SG hardware) -- using v20 software ISO, will not install, even if you change the SSD.  It does look at DMI values in the BIOS, and as soon as it sees that it is an XG 115r3 it stops the process.  I did find out how to get around this by resetting the DMI values (bootable EFI image, AMDDMI mod tools)... fun part now is it installs, sees all the interfaces, the LAN interface lights up, but is not reachable via network cable.  I can test ping itself on that interface from the console.  It just refuses to communicate.  So all this effort for naught (and I've tried two boxes).

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • Nope to both answers with XG hardware (Yes, you can do this on old SG hardware) -- using v20 software ISO, will not install, even if you change the SSD.  It does look at DMI values in the BIOS, and as soon as it sees that it is an XG 115r3 it stops the process.  I did find out how to get around this by resetting the DMI values (bootable EFI image, AMDDMI mod tools)... fun part now is it installs, sees all the interfaces, the LAN interface lights up, but is not reachable via network cable.  I can test ping itself on that interface from the console.  It just refuses to communicate.  So all this effort for naught (and I've tried two boxes).

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data