new pc for home edition

Hi,

In general, wireless chips are not supported.

The Celeron n3150 is a Braswell Silvermont chip, which is the new 'Atom' architecture... generally it is designed for very low power rather than performance.
I don't know if it'll run well at 100mbps. Maybe. (I do know that a fast i3 will work great.)

Note the IPS is typically the bottleneck for the CPU. Tuning the rulesets and using the ruleset aging can help a bit.

Barry

Hi,

In general, wireless chips are not supported.

The Celeron n3150 is a Braswell Silvermont chip, which is the new 'Atom' architecture... generally it is designed for very low power rather than performance.
I don't know if it'll run well at 100mbps. Maybe. (I do know that a fast i3 will work great.)

Note the IPS is typically the bottleneck for the CPU. Tuning the rulesets and using the ruleset aging can help a bit.

Barry

thanks for reply Barry, i'm searching a little fanless box because mini itx it seems to much big and more expensive (is it true?) i tryied to contact italian sellers for sophos xg appliance but they don't sell private only businness :(..

if anyone knows alternatives of this box (or similar for dimensions and price) i apprecciate tips

thanks for your time

You don't want Sophos hardware for this project unless cost is not important.  BarryG's been in these forums for many years - I would take his recommendation about the i3.

Cheers - Bob

I don't know of much with 2 good NICs in that price range.

As I said, the CPU might handle 100mbps, or close to it.

If you don't want to spend much more, and can't find an i3 in your budget, that system should be OK knowing that it might not hit the full 100mbps.

but 30gb SSD is too small. You want 50-60GB to have space for logs and updates. You don't need an SSD, an old laptop hard drive is fine.

Barry

guys, thanks very much for reply, i searched for i3 barebone but it is too much expensive, i will buy a zotac ci323 with n3150 if realtek chip is supported (i answered to know correct Ethernet chip, it seems rtl8111) because sophos xg is unsopported by apu1d4.

if i can, i will buy at least 60gb ssd (much more faster than hd 5200rpm), if i haven't choise i will use and laptop hd xD

for IPS and web filter i enable it as prpxy http and antivirus because internet is used by my parents and sister and they surfing is much Security XD

i hope zotac is the way

Realtek NICs normally work in the UTM; they're not great but they're usually usable.

I don't know about the XG.

hi guys, for who want to buy zotac zbox CI323 nano, zotac says that it has:

The CI323 has a Realtek (RTL8111) G/LAN chip, and an Intel Dual Band Wireless-AC 3160 (3160GW).

it seems to work from hw compatibility, probability not for wifi

regards

I have the 321 and it works great. I agree Web filtering is an expanse not needed unless kids are an issue and I do not use it. I also tuned IPS for best performance. I have a 60MB download speed and easly get that with about 30% CPU utilization. My Zotec 321 has 2 cores so this one with four cores is a great option

Thanks Mark, that's very helpful.

I'll also note that anyone wishing to use VLANs with the UTM should be aware that Realtek NICs have had issues; see

http://blog.metamatt.com/blog/2012/03/19/custom-built-linux-router-no-thanks-to-realtek/

for some info.

Looks like driver updates in recent Linux kernels may have resolved the problem.

Barry

I also have (had as it's currently with Sophos in Germany for XG testing) a Zotac Zbox CI321 Nano which I was testing for mini boxes for our company and it's a great little unit however I had a 100mbps link and with all features turned on it throttled the internet to just shy of 60-70mbps. My upload is only 15mbps so that wasn't affected.

When I turned off all the features and just had transparent web filtering turned on with single scan AV it hovered around the 90mbps mark. For high throughput I don't advise getting this box as you will be disappointed!

Apparently this unit is pretty snazzy and with intel nics: http://www.amazon.co.uk/Shuttle-DH170-barebone-workstation-barebones/dp/B016B6B6PO

Another user on the forums is looking into getting one for the XG and looking forward to his testing and remarks.

With the Zbox and XG I can state for my own unit it installed but could not complete Firstboot, it freezes on the SwapOn stage so if you're looking for it for the XG right now, I'd advise not to :)

Emile

thanks for your reply, seems that barebone in your link sell without cpu and its to much expensive for me...

your zbox ci321 nano has celeron 2961y dual core 1,1ghz right? at the end i bought a zbox ci323 that has celeron n3150 quad core 1,6 GHz boost to 2,03... it comes next week :D, if i have a problem i see i Can install esxi or xen and virtualize sophos xg, is not the best way but i hope it works with physical hardware

regards