This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Moving from XG to UTM?

GernotMeyer over 6 years ago

Hi together,

there are a lots of articles to move from UTM to XG.

What's about the other way: moving a SG135 from XG to UTM? Is this possible?

This thread was automatically locked due to age.

0 Big_Buck over 6 years ago

I am REALLY interested to hear about that one too ...
Cancel
Vote Up 0 Vote Down

Cancel
0 darrellr over 6 years ago

Sophos would view this as a downgrade, thus why you don't see any official documentation of that. Why are you wanting to switch back to UTM?
Cancel
Vote Up 0 Vote Down

Cancel
0 Big_Buck over 6 years ago in reply to darrellr

Reason for downgrade. ...

- Let's face it. XG v17 MR1 is a BETA software under construction. It lacks essential features you find on $200 appliances. For example, you cannot port forward, I mean, at least properly. For example, a rule of type "this zone & subnet, to this zone & subnet, with these services, action: port forward to this IP adress" is not possible. I.e. Source: LAN, network 192.168.1.0/24, service HTTP & HTTPS, Destination: WAN, network the Internet, service HTTP & HTTPS, Action: Port Forward to IP "Sophos WEB Gateway:8080". So if your ISP provides you a single IP address, and not a bank of 8, your floating onto bowling waters. You will not be able to run your Exchange server for example.

- XG reliabilty is just not there yet. VPN problems are impossible to workaround as of now.

- XG cannot integrate to other Sophos products.

. It does not integrate with Sophos WEB appliance. Transparent proxy is not possible.

. It does not integrate with Sophos End Point protection.

. Heck !!! it integrates with nothing.

XG is an appliance meant to work alone.
Cancel
Vote Up 0 Vote Down

Cancel
0 darrellr over 6 years ago in reply to Big_Buck

That's all good info. I have been toying with making the move from UTM to XG at home...might still wait a bit. Every release I keep thinking surely it's good enough by now. Maybe not.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jay Jay over 6 years ago in reply to darrellr

I played with XG for a few hours before settling on UTM. Maybe it's the terminology or ui, I'm not sure. I had a really difficult time making sense of it. UTM, while still having a learning curve made a whole lot more sense.
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 6 years ago

OK. Nice to know that I am nor alone.

But actually not "how-to". Isn't it?

My motivation in fact is: UTM web interface is much more usable than XG is.
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 6 years ago in reply to GernotMeyer

found this 2 links:

https://community.sophos.com/products/xg-firewall/f/sophos-utm-to-xg-migration/73397/is-it-possible-to-migrate-a-xg-appliance-or-a-sg-appliance-back-to-utm-9

https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Conversion-Guide---Sophos-XG-Firewall-Appliance-to-Sophos-UTM.pdf?la=en

and will try them out the weekend
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 6 years ago in reply to GernotMeyer

I did it yesterday. Works great. Have a XG with UTM now!
Cancel
Vote Up 0 Vote Down

Cancel