Sophos UTM Retirement / EOL announced

Hi Jay Jay.

Yes for now we use UTM 

Hi Alan.
1. I couldn't find  OpenAppID plugin.
Can you tell me where it is?
2. 5,400$ sound reasonable.

I'm pretty sure the latest version of snort 3.0 has it built-in. I never used that or pfSense so I'm just going by what the snort blog says.

Yeah, $5,400 is probably a good price for a business with unlimited users. Who knows how much Sophos is a year, but at least Untangle/Arista is transparent about their pricing and you can use your own hardware and not tied to an appliance.

Well, it would be aweseome to have a mail proxy like the utm got one in the new firewall.

my dream would be, that sophos would sell the utm software to $company and the utm can go on another round.

Still a hard pill to swallow... The decision to phase out a superior product in favor of developing this Cyberoam EXPLITIVE DELETED!

I think my first attempt to replace the UTM will be with Opnsense but I still have a lot of research to do. XG will be a last resort for me, if at all.

For those that utilized the UTM's SMTP proxy, what's available as a replacement? I haven't come across anything that's free or very low cost for home use. I hate the idea of throwing an email server on the edge even if it does have some spam and anti-virus capabilities.

Ironically that's what I spend the last week doing, although I never used utm's smtp proxy.

The webhost I use has a datacenter in NY that was recently shut down for 3-4 days due to a fire.  While there are other options, I decided to try self hosting.  My fiber connection gives me a pseudo static ip - last changed a few months ago after being the same for over 5 years.

I'm running something called mailcow which appears to be a reasonable AIO package for email including spam control. Another one I tried was mailinabox but that required more advance knowledge to configure. The cow product was deemed more attractive

As for opnsense, i'm passing on that. It's UI just doesn't make sense to me (much like xg's).  Also pfsense has recently made improvements so I can connect it directly to the ethernet coming off the fiber media converter without any complication. This could be done in the past too but required additional software to authenticate the connection.

Good luck with what ever you choose.

I don't know a good full replacement for the UTM, but OPNsense is quite ok for a free Firewall. For a standalone mail proxy the Proxmox Mail Gateway is a nice solution. Its open-source and you don't need a commercial subscription.

I'm still going back and forth on pfSense vs OPNsense. I'm leaning towards OPNsense because it supports Zenarmor out of the box.

Are you active on the netgate forum? How about you Amodin ?

I was active on netgate forum in the att bypass thread.  Their whole implementation of 802.1x has been a bane of many customers who want/demand to run their own equipment without dealing with the spyware gateway.

Back in june worked with one of their devs to assist in testing patches to wpa_supplicant to allow for listening on vlan0 tagged traffic. That's part of the appear I suppose. Response from franco, the guy from opnsense just unwelcoming - https://forum.opnsense.org/index.php?topic=34403.0 .

Jeff x said:

For those that utilized the UTM's SMTP proxy, what's available as a replacement? I haven't come across anything that's free or very low cost for home use.

NGNIX is open source and can be used as an SMTP mail proxy server.