Hardware Limitations In Home version

Is it possible to get the hardware limitations removed for the home version?  Or have they been removed in V18?

Parents
  • C'mon mate, lets imagine that sophos has to pay salaries, developing new solutions, ideas maintain current activities, infrastructure etc etc. We can be glad that sophos is allowing us a home users to using their product just for free with all features. Beside that, for home usage 4 cores and 6 gb is a overkill. With all features on you can gain 1GB/s. look how Fortigate(and other solutions) are expensive, what the are offering etc. With sophos you've got it for free with great community :) appreciate it ^^ and if you wanna use it for commercial just support it - buying it ;)

  • I understand this logic, but there is no reason to limit hardware if it is proven that the UTM is in a home location.  There are tons of other UTM packages out there that don't have hardware limitations.  I don't mind paying the annual license, but to pay the annual license with a hardware restriction is weak.  I guess I'll just stay on PFsense until they finally decide to remove the limitations.  Thanks

  • Hi Michael,

    I run a 6gb system and use all of that memory, to go above 4gb (3.8) you need a 64 bit system. My system uses 3.5gb of the available memory. Now in v17 you will find most home users with 6gb were running about 75% memory utilisation which has been fine tuned in v18.

    Ian

     
    V18.0.x - e3-1225v5 6gb ram on 4 port MB with 2 x APX120 - 20w. 
    If a post solves your question use the 'This helped me' link.
  • Hi Ian,

     

    I have read, but you have to use various disk tools (gparted and such) etc. Which I'm more than happy to do etc.  I was mulling an XG105- XG135 appliance at one point (used) but being on a UK ADSL connection, utterly pointless.

    I was running an i3 6100T/32GB RAM with a 4 port Intel NIC with pfsense and no probs at all, it's now running ESXi 6.7 atm.  It lacks cores for me to turn it into the Sophos XG box.

     

    Find the UI on my Atom system a bit slugish, hence why I may consider an update.

    IF / WHEN 1Gbit internet arrives in our area I'd happily review specs again.  

     

    Cheers,

    Mike

  • 75% is horrible.  If you had more available memory it wouldn't be pushing the limit like that.  I just don't get it.  Do they not have a 64-bit system available?  

  • Hi Michael,

    let me try an put things into perspective

    1/. XG is a 64bit OS.

    2/. many XG  installations only have 2gb of ram using v17, v18 needs 4gb.

    3/. 75% ram usage on a linux system is not an issue like on a MS system. Linux has a very much better memory management system and uses swap effectively.

    4/. a while ago many forum member were very upset that their XG's memory usage was running around the 70-80% mark. Sophos XG devs took notice added a lot of new functionality and refined the XG, they also tuned the load management as reported in the GUI and diagnostics. 

    My system is currently showing around 60% memory usage which grows if I leave the GUI open for too long, but shrinks when the GUI is closed. Prior to v18 my XG memory usage was around 75% on a 6gb system.

    If you are a home user and like to fiddle with your firewall settings, then a J1900 or XG85/6 or XG 105/6 is not for you. If you are a set and leave then they will be fine depending on your internet connection speed of course. I have J1900 4 port NIC system which I use for testing, but it is too slow when making changes or reviewing logs for my regular use.

    Ian 

     
    V18.0.x - e3-1225v5 6gb ram on 4 port MB with 2 x APX120 - 20w. 
    If a post solves your question use the 'This helped me' link.
  • I had a feeling, which is why I feel like they should just unlock it rather than have the hardware limitations on the package.  Until they remove the hardware limitations I can't see the reason to switch to Sophos.  I think this is a sad thing they have chosen to do, and could have easily unlocked for the $50/year subscription; as well as allowing unlimited devices.  It's not hard to prove the device is at a house location.  I hope the developers actually read this post, and see the benefit for unlocking the hardware limitations.

    There's quite a lot of people arguing on their behalf that the hardware limitations in the software are more than enough hardware.  I feel these people just don't understand that you should be allowed to use faster processors and more ram if you deem it necessary.  I understand the company wants you to buy their devices, but then why have a software package available at all to home users.  They obviously realized a need, but determined that a limitation should be on that need.  

    Any who this seems pointless at this time; as the developers will not unlock the software package for users.  Therefore, I will continue to use PFSense rather than giving the Sophos developers a yearly subscription fee.  Good luck to others; maybe they will finally realize this is the right thing in V20.

  • There is a thing of cutting off your nose to spite your face - by all means stick with PFSense if you so wish - just to ask....you are aware of the security vulnerabilities that exist in the product?

    If not, pass me your IP address and I'll give you a demonstration...

    Tim Grantham

    Enterprise Architect & Business owner

  • Hi Michael,

    you can use the fastest intel processor money can buy, nothing stops you building a system around it, but you need a special mother board, big power supply and lots of heatsinks. But you gain nothing in performance eg my e3 is the same processor Sophos use in their topend models.

    Also it is not a developer issue it is a marketing issue.

    Please let Tim demonstrate PFSense to you.

    Ian

     
    V18.0.x - e3-1225v5 6gb ram on 4 port MB with 2 x APX120 - 20w. 
    If a post solves your question use the 'This helped me' link.
  • As a company, before we take on support of clients networks we put things through a PEN test, PFsense has always produced interesting results to say the least, it's good for a "home" protection and better than the NAT based solutions you had with the standard routers provided, but no where near good enough for the enterprise.

     

    You have to think, what would you prefer?  An enterprise solution for home, albeit with some hardware limitations, or an open-source experiment for the home market.

    Tim Grantham

    Enterprise Architect & Business owner

  • @Michael Caplan

    Sophos don't want your $50. More hassle than it is worth and I can well understand why they dropped it for UTM. One of the things I don't miss moving to XG is the 50 IP limit. In itself it was OK for a home network but as it is my 'playground' I quite often exceeded it testing new network setups. Ended up having to reinstall UTM each time it happened.

    I don't agree it is 'easy' to verify whether Home is genuinely being used at 'Home' - which would also require more time and effort (which means money). Sophos put a cap on to prevent people using it illegally in large commercial environments.

    I am grateful to be able to use it free at home. It also benefits Sophos (which is why they do it). From being able to use it and evaluate it at home, I have since become a Sophos partner and have several installations planned for customers.

    I also really can't understand your view point. The current cap should allow you to use it in a home environment, even with 1Gb connections, for the forseeable future as long as you have the right spec hardware. What is the problem?

    @Mike Scott

    I've installed the home edition on both a 125 rev2 and a 430 (my current home kit). It can be tricky getting it to install on the installed SSD so I just replaced it with a new SSD and then installation was easy. A small SSD is cheap and I got the 430 for £300 which is cheaper than anything I could buy new of similar spec and it fits nicely in my rack (yes, I'm sad enough to have a rack at home). The only thing you lose is hardware specific support (for instance the LCD display doesn't show anything meaningful).

  • Makes sense and the best way of understanding what you're taking on.  Many years ago when I worked in the MSP space we walked away from a big customer as so many issues were identified during the pre-onboarding process.  They refused to have items address or money spent, so the contract never moved forward.  I visited their rented datacentre space in Canary Wharf and it was horrific.

    Interesting re pfsense, particularly as I've seen large orgs using it.  Going to google it a bit more, even with version 2.4.5?  Problem with any vendor is getting past the marketing blurb.  Take Unifi for example, awful edge products imho

    I've worked with Fortigate, Cisco (PIX/ASA), Microsoft ISA (shudder)..  My main skills though is infra, vmware, Wintel, networking and so forth.

     

    Only exposure to Sophos XG at the moment is at home and I like it.  The problem with any solution installed at home is are they left in the default setup.

Reply
  • Makes sense and the best way of understanding what you're taking on.  Many years ago when I worked in the MSP space we walked away from a big customer as so many issues were identified during the pre-onboarding process.  They refused to have items address or money spent, so the contract never moved forward.  I visited their rented datacentre space in Canary Wharf and it was horrific.

    Interesting re pfsense, particularly as I've seen large orgs using it.  Going to google it a bit more, even with version 2.4.5?  Problem with any vendor is getting past the marketing blurb.  Take Unifi for example, awful edge products imho

    I've worked with Fortigate, Cisco (PIX/ASA), Microsoft ISA (shudder)..  My main skills though is infra, vmware, Wintel, networking and so forth.

     

    Only exposure to Sophos XG at the moment is at home and I like it.  The problem with any solution installed at home is are they left in the default setup.

Children
  • The only times I've seen large organisations using PFSense is for internal VLAN segregation, and where QoS is required - not for permitter use - they normally seem to leave that to the commercial side of things.

    Open Source has been a big no-no for a lot of the companies I support - it's the fear of the source code being available and therefore being examined by hackers for exploits - with closed source you have to take a longer route to find them.

    And agree, the problem is that most things at home have been left in the default setup, and that usually is not hardened enough...how many home users would just have an any>any rule, rather than just allow what's needed and block everything else?

    Any>Any kind of defeats the object of having a firewall - and a lot of people while they are happy to control what comes in, they forget about securing what goes out.

    Tim Grantham

    Enterprise Architect & Business owner