Things that may (not) working better after migration from UTM to XGS

Thanks for sharing! Keep 'em coming so others know what to expect and maybe Sophos will pay attention. I'm not holding my breath, but I'm hoping Sophos XG will elevate to the number one spot on my list of viable UTM replacements before June 30, 2026. Regrettably, XG's currently very low on that list.

I'm with you. As an Astaro SG user, I'm really saddened to hear of the sunsetting but to be fair it's gone far longer than I expected. I'm sure I'll put it off for quite a while but I'll have to start evaluating new options myself. I've tried XG, the *sense, and a few other niche options but have always come back to UTM. 

I've read some of your other posts and it's just as ingrained in my environment as it sounds for yours. I really don't want to tackle that conversion as I have years of configs and optimization in place (not hacks, just settings). While I'd love to not have the IP limit, I'm really not excited about the hardware limitations.

Well there is no "to be fair".

The UTM is till today a superior Product.

And Shopos will not get any of the features XG is missing into XG within the next 3 years. that's for sure.

So instead of making a rock solid product even better and update it to modern needs, nope, again management knows it better again.

the other brands will take any changing customer with ease.

because some of them are less pain then the XG.

Well there is no "to be fair".

The UTM is till today a superior Product.

And Shopos will not get any of the features XG is missing into XG within the next 3 years. that's for sure.

So instead of making a rock solid product even better and update it to modern needs, nope, again management knows it better again.

the other brands will take any changing customer with ease.

because some of them are less pain then the XG.

It would be to their credit if they would return the UTM codebase back into the open source domain, so it could be kept up to date for home or other environments without deep pockets (we provide services for charities and non-profits). The XG is a disaster of a product.

If there is no way to continue using the UTM (as I understand sophos will switch it off once the license expires, and it will become useless), we'll have to look elsewhere for an alternative solution for Firewall and WAF (the main components used).

Wishful thinking but unlikely to happen.  Why would sophos want aid a competing product.

They are discontinuing the product, so they don't see it as a viable and competing product in the market anymore?

But if code was released and product improved then it would be competing :).

How to get rid of competition... buy out your competitor, then kill their product.

True. But then without us and our clients, the XG was and still is crap.

Can't argue there. I already have my solution lined up.  Just need inspiration to make the transition.

It took a fire at my webhost's datacenter to push me into self hosting email. Been meaning to do it for years, but never got around to it.  Took a few weeks to work all the bugs out but working well now.  Even has redundancy (like today when some @sshole drove into a tree which fell on a power line, taking out the entire neighborhood for a few hours).

We do a lot for non-profits and charities, so we already run a lot of open source. The challenge is mainly on the management side, technically all solutions (firewall, ips, proxy, reverse proxy, mail services, etc) are well established and stable, but without a good GUI it is very difficult to manage it all efficiently.

It is the biggest issue I have with the XG, apart from the lack of some features: the architecture is so illogical (no central object management, seperate ipv4 and ipv6 objects, etc) that the management cost triples. Not to mention the diffence in licencing costs between the XG and the UTM.

We run a postfix / dovecot / roundcube / sogo / amavis / spamassasin / clamav HA cluster for email, have done so for years. With a database backend, so it wasn't too complex to build a web interface for that, which we use to manage domains, mailboxes, quota's, white and blacklists, etc.