LuCar Toni, Do not you read the criticisms of the firmware updates, are you already so far away from the customer?
A similar question has also asked me a Sophos supporter.
And the other thing I notice that you are running the sophos firmware version SFOS 17.5.3 MR-3, which is old and have the same kind of issues you are facing. I recommend you to upgrade it to newer version 17.5.7_MR-7, which resolve lot of these issues.
Our answer: A few words to your remark about MR3. Did you ever bother and read the damning reviews on MR7, but also MR4-6 ?? Between claiming to be a perimeter firewall and the reality is currently a big gap.
We are still at MR3 and can not believe it how bad the quality of the firmware update has become. Similar to Windows 10, you now have to be afraid with every update / upgrade that the system works without a problem afterwards. We came from Astaro v3 on Netscreen / Palo Alto to XG and have to realize that the XG is currently not really suitable for enterprise use.
Between April and July there were alone 4 firmware upgrades and every upgrade has additional bugs !! And that although Sophos has the claim, to have an Enterprise Firewall with the XG. There is still a long way to go.
We would be ready to switch to mr7, if you guarantee, that we will not have additional bugs like DHCP or SSL-Vpn. If you can not guarantee that it will get better and not worse, we wait for MR8 in the hope that SOPHOS will be able to roll out a firmware that does not contain any new bugs !!
Currently, the product and unfortunately the support is a mean disaster. We have a ticket open at L3 for 6 months, with no prospects of success. Recently opened a ticket that is already at L2 and probably will go to L3 and probably no solution is found.
One thing is certain, that in the current situation, after three years of subscription we will look for another firewall manufacturer.
Paul, This is not a personal attack on LuCar Toni and thank him for the good qulified help here in the forum. But if you're a Sophos staff member and that's who he is, you know the situation (i hope so) and should think about it a bit more. As i said, i'm glad that there are forum moderators like LuCar Toni, however, we are already a bit frustrated with such a semi-finished product as the XG and a totally overloaded support.
We have 200 employees who can work very limited because of these many problems depending on the situation and a solution to this problem is not really in sight. If we followed the recommendation of Sophos Support to switch to MR7, there would probably be one problem less but 5 new ones. That's why we also hope for a MR8 that fixes all known problems and does not cause any new ones.
