Next best UTM product recommendations?

RE: Next best UTM product recommendations?

Billybob — Sat, 16 Jan 2016 10:46:01 GMT

Agree with William. As much as I don't like the direction sophos is taking with UTM/XG, I still applaud them for letting this kind of open discussion take place on this forum as it is clearly against their posting guidelines. https://community.sophos.com/kb/en-us/122482

Pointing out shortcomings of current sophos software is open discussion, however openly soliciting views about other competitors on these boards is not necessary. This thread needs to end here.

RE: Next best UTM product recommendations?

William Warren — Sat, 16 Jan 2016 09:12:36 GMT

this is a sophos board. I may have my issues with sophos but you do not see me soliciting different vendor products here. If you want other vendor recommendations go to another board...just my .02

RE: Next best UTM product recommendations?

William Warren — Sat, 16 Jan 2016 09:11:42 GMT

I have two of them i manage and their are a pain in the ass.

RE: Next best UTM product recommendations?

Goldy — Sat, 16 Jan 2016 03:58:25 GMT

Just look at Dell SonicWALL.
Look very interesting.
Any idea how it is?

RE: Next best UTM product recommendations?

NvA — Thu, 14 Jan 2016 02:19:43 GMT

I use some small FortiNet FortiGate (60 Series) for SOHO. I mostly just use firewall features an less of other UTM stuff.
They are doing a good job.
But since about firmware v5.1, they always push logs to a cloud space, even if the hardware has a build in hdd.
I don't compared pricing for bigger ones. The small FateGates are less expensive as simlilar Sophos UTM - even non FullGuard.
Greetings Nathan

RE: Next best UTM product recommendations?

BeanAnimal — Wed, 13 Jan 2016 09:25:36 GMT

Also - as for watchguard..

I have a few: CLUNKY would be my best description.

Also, get this:
I have a customer that has alarm panels out in the field. They can contact the central station, BOUND for ANY port in a range of 1000 ports, but ONLY COMING FROM a specific SINGLE SOURCE port. Watchguard firewall rules DO NOT allow for filtering on SOURCE port!!! They LOG the source port, but there is no way to filter on it. I escalated my issue to the corporate office and talked to the head developer and a board member of the corporation. I was told flat out that they see no need for the ability to filter on the source port of an incoming packet.... given the very clunky interface and that fact, I walked away.

RE: Next best UTM product recommendations?

BeanAnimal — Wed, 13 Jan 2016 09:20:30 GMT

Sophos could give a rats ass about real word functionality. Sophos' interest is large corporate installation, where buzzwords sell, not real world functionality. As long as they continue to win useless awards that mean nothing in the real world, corporate decision makers will buy the garbage and direct the subordinate IT department to deal with. By the time they realize the product is garbage, they will have invested too much to walk away and instead will simply throw more money at the problem, even if it means buying into the next generation of garbage.

RE: Next best UTM product recommendations?

lferrara — Tue, 12 Jan 2016 13:19:54 GMT

I have many HA UTM around and I am still buying license renewal.
I had bad experience with Watchguard while some good with other vendors.

I am keeping an eye on Sophos XG (at moment I have installed at home). Many many features are missing but there are some things that UTM can forget and we need to take care of them (Proper CLI, Unified Policy, create custom ips rules and ips per rule). UTM rocks but has some/few limits.
So I will ask myself this question at the end of the year when XG will have release 2.0 and as Sophos promises, many features will be integrated.

So keep UTM into your installation and keep an eye on XG too (no now but at the end of the year).

Luk

RE: Next best UTM product recommendations?

JasonIstre — Tue, 12 Jan 2016 11:53:14 GMT

I've been a huge fan of the UTM for awhile. I like that the same platform I'm running at work and other SMB companies is the same at my home. Power customization and controls are a huge win. I've turned some other IT friends on to it as well. I'm a little discouraged now with everything I read. Also, with the forums now gone and the "community" pages really lacking and not very active it seems like having to move products at some point is inevitable.

Like OP, I'm also very interested in what other platform people have successfully jumped ship to. Any products that have corporate use and home prosumer use like UTM does?

RE: Next best UTM product recommendations?

William Warren — Wed, 06 Jan 2016 17:40:40 GMT

I have a client with two of them...trust me..don't.

RE: Next best UTM product recommendations?

Mokaz — Thu, 26 Nov 2015 00:39:23 GMT

"It would be interesting why Sophos bought cyberroam when they already had the Astaro platform. Somewhere someone though Astaro was a dead-end and the cyberroam train is now full steam ahead."

I think that possibly every former knowledgeable original makers from Astaro simply left the boat. Also clearly that answer's as to why the urge of buying a new product (agreed, a bad one). I'm wondering if Sophos see's the hit on their sales numbers already, i do think so... A very bad move honestly.. I've already had some doubts about the endpoint code (which if i'm correct was/is a pure sophos dev: https://lock.cmpxchg8b.com/sophail.pdf) which I've moved away from though now there's not much left to keep me here. Well life is change, my future is elsewhere though as said i'm sad about this because I've been a firm endorser of the Astaro technology.. ahh well, move on...

As for the watchguard pricing i ain't got no clue, i'm currently playing with their XTMv appliance (with no licenses yet...), it looks neat...

RE: Next best UTM product recommendations?

MW — Wed, 25 Nov 2015 13:12:51 GMT

Does anyone know if watchgaurd pricing is comparable to UTM full guard?

RE: Next best UTM product recommendations?

MW — Wed, 25 Nov 2015 13:12:08 GMT

Sophos has done well in hiding this. But current Cyberroam customer already can upgrade (and downgrade) to SFOS without a config change. And the way that SFOS works is identical to cyberroam. It just has a new GUI and a few UTM add-on features like RED support.

But cyberroam was a bad product before Sophos bought it (well, not bad, but inferior to UTM) and its still bad even with its new GUI.

It would be interesting why Sophos bought cyberroam when they already had the Astaro platform. Somewhere someone though Astaro was a dead-end and the cyberroam train is now full steam ahead.

RE: Next best UTM product recommendations?

Billybob — Wed, 25 Nov 2015 11:52:29 GMT

This was discussed during the beta although sophos never officially said anything. www.astaro.org/.../59199-answered-feature-function-comparison-chart.html Read the posts by vilic, they are quite revealing.

Also if you login to cyberoam NG demo http://demo.cyberoam.com/ user guest, pass guest you will notice that the functionality is exactly like SFOS minus the new kludgy gui.

RE: Next best UTM product recommendations?

eganders — Wed, 25 Nov 2015 11:23:34 GMT

"SFOS is not much more than GUI update to cyberroam."

Wow. I'd like to hear more about this.

RE: Next best UTM product recommendations?

pebo — Wed, 25 Nov 2015 04:19:26 GMT

Thanks guys for sharing your explorations, we also are looking for alternatives

RE: Next best UTM product recommendations?

Mokaz — Wed, 25 Nov 2015 01:56:54 GMT

I'd also have a look at watchguard, which i think are very decent UTMs and have already adopted a few requested features on Astaro (which are currently not available on Astaro)..

RE: Next best UTM product recommendations?

bryans2k — Wed, 25 Nov 2015 00:30:36 GMT

think it's time to seriously look at sonicwall

RE: Next best UTM product recommendations?

MW — Tue, 24 Nov 2015 17:35:07 GMT

While UTM won't be EOL for a few years, realize that this platform will be going into security patches and "sustain" mode much sooner. There is no way we can justify our own purchase nor recommend our customer buy a product thats not truly under development.

Also realize that Sophos considers SFOS to be "worthy" now. SFOS is not much more than GUI update to cyberroam. In fact current cyberroam customers can upgrade to SFOS right now as a normal update. When Sophos bought Cyberroam, they considered the cyberroam product a full complete replacement and better option than UTM. They see it as just missing a few UTM specific features that will come in time. The cyberroam platform/codebase and ethos wont magically give way to a UTM code base in a future release.

Back to my original question...anyone have experience with palo alto networks? Likes promising. I'll take a look at FortiNet too.

Any others people would recommend?

RE: Next best UTM product recommendations?

Scott_Klassen — Tue, 24 Nov 2015 16:16:15 GMT

"maybe the community could buy Karlsruhe". Don't know why. You'd get an office space with a bunch of sales folks. Very few Astaro/original UTM employees are still with Sophos. Much of the UTM development was moved from Karlsruhe in the past three years.

RE: Next best UTM product recommendations?

Mokaz — Tue, 24 Nov 2015 16:04:06 GMT

On the other hand i can not imagine that sophos will send UTM 9 EOL before having a product that is a "worthy" replacement. That would be stupid and bad for business.

Isn't that almost exactly what happen? I mean I've tried to setup the Sophos "next gen firewall" on the same hardware used for my UTM 9.3, the thing does not even detect my networks interfaces.. Straight to NO GO / BROKEN for me.

I'm sad to see what's happening here really though maybe the community could buy Karlsruhe and continue as OpenAstaro?? Anyways as SFOS is a no go for me i'll check a few alternatives, Fortinet FortiGate being my number one target. Although clearly there is no rush for now..

I've checked other solutions like pfSense, Untangle, ipFire amongst others and clearly they do not compete aligned to Astaro utm..

RE: Next best UTM product recommendations?

Ben — Tue, 24 Nov 2015 01:57:03 GMT

i did alot of testing of different firewalls and utm products. UTM 9 is still a product i would recommend and buy/subscribe today if we needed a UTM Solution.

If you need scalability and just simple firewall without UTM features the former makers of Astaro made "ocedo", a network virtualization product that scales very well. It does not replace a UTM but can manage your networks pretty well if you have multiple locations etc. (lacking some features)

UTM going EOL will be a problem in a few years, considering the current state of the "next gen firewall" we will not stay with sophos. That beeing said we are not going to ocedo either (it lacks too many features of the UTM) - It will definitly be "interesting" on what will be on the market.

On the other hand i can not imagine that sophos will send UTM 9 EOL before having a product that is a "worthy" replacement. That would be stupid and bad for business.