Poppapete 104 Posted March 26, 2016 Share Posted March 26, 2016 pcdoc, I agree with all you say but most people (even geeks) will be happy with the basic UT setup which is far more secure (with the new addins) and "customizable" than a retail router even if it is supercharged with DD_WRT. I had UT for 2 years (paying for the good AV) and changed to sophos to save the money but never a week went by without me having to tweek it due to some family member having trouble with some device. In the beginning I found tweaking sophos a challenge then just time consuming. Link to post Share on other sites
snapper 38 Posted March 26, 2016 Author Share Posted March 26, 2016 ...it cannot hold a candle to XG... A bit OT, but how are you getting on with XG now the new update has landed? I'm still on UTM9, but contemplating UT or XG... Link to post Share on other sites
pcdoc 114 Posted March 26, 2016 Share Posted March 26, 2016 I actually love it. I guess it might be what you expect but for me it has been awesome. Like it enough to have switched the company I work for over to it. Once you understand it it really make it pretty easy. Sent from my iPhone using Tapatalk Link to post Share on other sites
rotor 15 Posted March 27, 2016 Share Posted March 27, 2016 (edited) I actually love it. I guess it might be what you expect but for me it has been awesome. Like it enough to have switched the company I work for over to it. Once you understand it it really make it pretty easy. Sent from my iPhone using Tapatalk They really don't make it easy though. A specific fixed IP and no console login to change it, no console status to give an idea of what's going on... Appliance 101 is give console access to provide initial configuration. Also, in 10-20 minutes of Googling, I was unable to find accurate information about setting up an ESXi VM (what OS to choose, what disk controller, what NIC controller). I ended up choosing RHEL7 with Paravirtual and VMXNET3, and it seemed to work (although I haven't tested yet because I have to build another VM SOLELY to configure it with the crappy IP they statically assign just so I can change it through the web console). Edited March 27, 2016 by rotor Link to post Share on other sites
ServerRookie 1 Posted March 29, 2016 Share Posted March 29, 2016 Can XG be used in bridge mode? Link to post Share on other sites
psykix 27 Posted March 29, 2016 Share Posted March 29, 2016 For me, in a home environment Sophos XG is useless. At least with Untangle (paid $5 per month sub) I can enable IPS, Web filter, AV filter and it doesn't break Netflix or Microsoft updates, or other video streaming services. Also, Sophos XG always reported my WAN as being down when it wasn't, no decent real time monitoring, no way to reset warnings once things had breached (i.e. CPU usage), and the support level is non existent unless you are a fully paid up corporate member. There was more but I forget the other issues! It was so bad for me, that I even deleted the VM. And yes, that static IP for initial config - who on earth thought that idea up?! So it's all horses for courses I guess! Link to post Share on other sites
itGeeks 187 Posted March 29, 2016 Share Posted March 29, 2016 (edited) Having used Untangle for years I can say without reservation that despite the feature list they have listed, it cannot hold a candle to XG. Untangles base features do very little without allot of user input and it is not very user friendly to tweak the settings above the default settings. 98% of what Untangle does without purchasing modules is NAT. Web/application filtering is very poor and not maintained. The AV works well from what I have seen and the VPN works but the rest needs help. The one things is the learning curve is pretty short for the basic setup but even longer than XG for a more thorough setup. Just my two cents from a long time user who swore by untangle. pcdoc, Have you tried Untangle brand new version? I have not but it sure does look good. v12.0 Comunity Webinar https://www.youtube.com/watch?v=PVBemaMLA3I I am also thinking of taking v12 for a spin. Edited March 29, 2016 by itGeeks Link to post Share on other sites
itGeeks 187 Posted March 30, 2016 Share Posted March 30, 2016 (edited) For me, in a home environment Sophos XG is useless. At least with Untangle (paid $5 per month sub) I can enable IPS, Web filter, AV filter and it doesn't break Netflix or Microsoft updates, or other video streaming services. Also, Sophos XG always reported my WAN as being down when it wasn't, no decent real time monitoring, no way to reset warnings once things had breached (i.e. CPU usage), and the support level is non existent unless you are a fully paid up corporate member. There was more but I forget the other issues! It was so bad for me, that I even deleted the VM. And yes, that static IP for initial config - who on earth thought that idea up?! So it's all horses for courses I guess! I agree with most of what your saying. It is a bummer that Sophos can't seem or want too fix some of this stuff, I believe it's the later. I love Sophos in all it's glory but things like Windows updates, Printer updates & Netflix not working is just crazy. I am still on XG at the moment but that's probably going to change at some point. I am waiting on my Luma devices to show up, I also am trying to hold out for the next XG update to see if some of this stuff gets sorted. Now I am thinking about trying the new UT, How is it working for you in compare to XG? Do you feel your getting the same level of protection without the problems of XG? It really is a shame about XG because I really do feel secure with my network but this annoying stuff needs to get fixed if its going to be for home use and the fact that everything with Sophos seems to be the best kept secrete unless your a partner has got to change if they want to grow in the home market. Maybe Sophos should get smart and take a lesson from Untangle and charge a small fee for there top rated protection and make us feel we are part of there customer base with support rather then alienate us, Some of the best ideas come from home users. Its just crazy that home users can't even fill out a support ticket because it gets bounced. Edited March 30, 2016 by itGeeks Link to post Share on other sites
psykix 27 Posted March 30, 2016 Share Posted March 30, 2016 Well given that I had to turn pretty much everything off in XG to keep things like the kids iPads working properly, then it's a vast improvement. I have IPS installed and running, I have Web Filter installed and functioning great, and I have installed and tested the Antivirus module using eicar.org and it seems to be doing the job. On top of that I installed the web cache just to see how it works, and it seems to be caching a few thousand hits a day. All in all, and along with the new modern looking interface, it's great. It's $5 per month vs free for XG but $5 per month is worth it for me. I have had an issue whereby my box wouldn't apply updates properly and they have narrowed it down to an incorrect Grub version or similar. I logged a support ticket, and got a really fast initial response, although since that it's been a bit slow on getting the resolution implemented. Mind you, compared to XG support it's head and shoulders better! Link to post Share on other sites
itGeeks 187 Posted March 30, 2016 Share Posted March 30, 2016 Well given that I had to turn pretty much everything off in XG to keep things like the kids iPads working properly, then it's a vast improvement. I have IPS installed and running, I have Web Filter installed and functioning great, and I have installed and tested the Antivirus module using eicar.org and it seems to be doing the job. On top of that I installed the web cache just to see how it works, and it seems to be caching a few thousand hits a day. All in all, and along with the new modern looking interface, it's great. It's $5 per month vs free for XG but $5 per month is worth it for me. I have had an issue whereby my box wouldn't apply updates properly and they have narrowed it down to an incorrect Grub version or similar. I logged a support ticket, and got a really fast initial response, although since that it's been a bit slow on getting the resolution implemented. Mind you, compared to XG support it's head and shoulders better! Thanks for the update. Are you running UT in a VM? If yes how much CPU & RAM did you give it? How many devices are on your network? In all fairness the last XG update did fix some of the problems that we where having such as the 'web filter' and IPS can now be active without braking streaming on mobile devices but we still cant have http scanning enabled because that still brakes Netflix steaming to mobile devices. That said I am still having to bypass my desktop computer to download and install new Windows 10 insider builds. Link to post Share on other sites
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now