Things that may (not) working better after migration from UTM to XGS

Thanks for sharing! Keep 'em coming so others know what to expect and maybe Sophos will pay attention. I'm not holding my breath, but I'm hoping Sophos XG will elevate to the number one spot on my list of viable UTM replacements before June 30, 2026. Regrettably, XG's currently very low on that list.

I'm with you. As an Astaro SG user, I'm really saddened to hear of the sunsetting but to be fair it's gone far longer than I expected. I'm sure I'll put it off for quite a while but I'll have to start evaluating new options myself. I've tried XG, the *sense, and a few other niche options but have always come back to UTM. 

I've read some of your other posts and it's just as ingrained in my environment as it sounds for yours. I really don't want to tackle that conversion as I have years of configs and optimization in place (not hacks, just settings). While I'd love to not have the IP limit, I'm really not excited about the hardware limitations.

Well there is no "to be fair".

The UTM is till today a superior Product.

And Shopos will not get any of the features XG is missing into XG within the next 3 years. that's for sure.

So instead of making a rock solid product even better and update it to modern needs, nope, again management knows it better again.

the other brands will take any changing customer with ease.

because some of them are less pain then the XG.

IPv4 and IPV6 are management completely seperate. If you have a dual-stack environment, be prepared to have your workload more than doubled, as you need to create everything twice, maintain everything twice, and keep track of it all. A nightmare.

It would be to their credit if they would return the UTM codebase back into the open source domain, so it could be kept up to date for home or other environments without deep pockets (we provide services for charities and non-profits). The XG is a disaster of a product.

If there is no way to continue using the UTM (as I understand sophos will switch it off once the license expires, and it will become useless), we'll have to look elsewhere for an alternative solution for Firewall and WAF (the main components used).

Wishful thinking but unlikely to happen.  Why would sophos want aid a competing product.

They are discontinuing the product, so they don't see it as a viable and competing product in the market anymore?

But if code was released and product improved then it would be competing :).

How to get rid of competition... buy out your competitor, then kill their product.

True. But then without us and our clients, the XG was and still is crap.

Can't argue there. I already have my solution lined up.  Just need inspiration to make the transition.

It took a fire at my webhost's datacenter to push me into self hosting email. Been meaning to do it for years, but never got around to it.  Took a few weeks to work all the bugs out but working well now.  Even has redundancy (like today when some @sshole drove into a tree which fell on a power line, taking out the entire neighborhood for a few hours).