Where is V17.5.8 MR8 ???

Hi all
I also have the impression that subsequent MR patches fix one functionality and spoil others. In my opinion, the most stable soft was v16.5 MR5. Later problems with various functions started.

Some of my clients say that they are looking for something else, such as Fortinet. Unfortunately, the lack of information about the planned release date of v18 means that customers will not wait for an undefined future, but will take a different product.

I have the impression that SOPHOS is constantly learning how to make a good product. Maybe version 18 will bring more, because in production environments I would rather not recommend the SOPHOS installation.

So many words from me. I do not write to smash someone, but out of concern, because there were times when I was delighted with this product.

greetings
Darnok

Dear All

 First of all I don't want hurt anybody's feeling . We have been using Sophos XG 17.6 MR7 with  more than 200 Endpoints with EDR and very satisfied  with the product stack . There are

some shortcoming and short fall but in terms of number of product  feature versus price point it is one of the best product around. It will be better

if all forum members make push to share there Future plan and list out  our problem or feature request and  collectively push them  as community to fix them on priority .

Best Regards,

Vishvas

Hi VishvasChitale,

I am not sure you have read many of the various forum threads.

When asking for a summary are you asking for :-

1/. missing features compared to the UTM

2/. features that don't work correctly

3/. bugs?

This could grow to be a very long thread.

Ian

Hi Guys,

maybe its because of my deep knowledge with all Sophos Products but i do not have any problems in XG right now, which i cannot resolve in short time.

I guess it is because i work with XG / SG the whole day in my business hours. 

Most likely i respond here in the forum in my free time.

But lets wrap up those points.

1. My units do not send backups via email anymore.  Since v17.5.3 MR3.  An "out of a box" wiped to OEM appliance won't send mail either.  MTA.  Legacy mode.  Standard rule.  Business rule.  Forget it. It's not gonna send mail. That's it.  That's all.

I am still not sure, where the RCA for this issue is. Maybe because i could not have a look into the logs. 

All my customers uses XG Alerts and Backups via the XG inbound service. 

But maybe you should try out XG Central Management? There is another Backup Service, which should work for you. The Backups are stored on Central.  (5 Temporary backups, one permanent). 

1. NAT rules is a mess in XG.  And the go...  da... Business Rules are just there to make sure things don't work.

This is one story, there are couple of work in progress about NAT Rules in the next release. 

But which NAT rules does not work for you? I did not hear any issues about NAT rules stop working after a certain Update? 

1. DHCPgate !!!

That is a real bumper, that there is a issue, but the workaround is quite simple. 

As you know, you can revert the DHCP generation mode. 

Interesting enough, i did not heared about this issue at all in business cases. 

Only my personal appliance (XG135) and you guys in the Community bring this issue up to my attention. 

Strange. 

1. Since I tried many time wiping to OEM, I now know wiping DOES NOT WIPE ALL.  One example: my "send to email" adresse was still there after a FACTORY Reset.  WTF ???  How is that possible ???  There's no partition on XG storage.  I presume boot loader is somewhere in UEFI.  There should not be anything left.

You should simply take a USB Stick and reimage the Appliance.

In the reimage process, all partition will be formatted. 

https://community.sophos.com/kb/en-us/126906

I rarely use the factory default process, instead i have to reimage the appliance (German Law). 

1. LogViewergate !!!

Like the DHCP Issue. But here is a actually RCA already done and the issue is found in the XG. 

https://community.sophos.com/kb/en-us/134173

I do not argue with you guys about certain points. DHCP and Reporting looks kinda bad. 

But i am talking about my personal experience with Partners and Customers. 

Another point:

Did you ever bother and read the damning reviews on MR7, but also MR4-6 ??
Between claiming to be a perimeter firewall and the reality is currently a big gap.

I read those reviews and comments in the Release notes, but i personally do not comment on them.

If there are problems, those people should open a "normal" thread or (better way) open a Support Case.

Under the Release notes should not be the right place to discuss all issues. Maybe those issues are "personal?".

For example:

Under MR7 are two people talking about SSL VPN broken after Update.

I did not hear anybody in the community or my peers talking about such an issue. All my SSL VPN Clients working fine. 

There are couple of DHCP Gateway issues. 

I already talked about this above. 

LuCar Toni,
Thanks again for your commitment here in the forum, we appreciate that already.

But apparently we both have totally different experiences in things XG.
## maybe its because of my deep knowledge with all Sophos Products but i do not have any problems in XG right now, which i cannot resolve in short time. ##

Our problem is that we are slowly losing confidence in this XG product.
I do not know how many times I've been looking for bugs with the L3 support, without success.
If even the L3 Supporter does not know what to do anymore? We are shocked by the helplessness of Support who really wants to help but ultimately can not.
The idea behind the product XG is good, but there are too many massive bugs that even the support no longer understands.

I know these are maybe tough words.
Mind you, we are talking about a perimeter firewall here and not about XBox, Nintendo etc.
Again, please do not take it personally, but over the years we have been used to other support and quality of the product.
We think back to Netscreen / Palo Alto with sadness......

So basically we are not talking about a Product / Maintaince Issue here, instead about a Support issue?

I mean, the support people here like FloSupport could review your Cases, maybe there is something going on. 

Do not worry, i just share my experience with my peers. There can be difficulties, if you migrate from no matter what vendor. I guess, there are also difficulties, if you migrate to other vendors. Like you said, we are talking about a perimeter firewall with features on it. So basically, if X of Y features works fine, one feature does not for what ever reason, the whole product is not good. And that is simply not true at all. 

So basically we are not talking about a Product / Maintaince Issue here, instead about a Support issue?

I mean, the support people here like FloSupport could review your Cases, maybe there is something going on. 

Do not worry, i just share my experience with my peers. There can be difficulties, if you migrate from no matter what vendor. I guess, there are also difficulties, if you migrate to other vendors. Like you said, we are talking about a perimeter firewall with features on it. So basically, if X of Y features works fine, one feature does not for what ever reason, the whole product is not good. And that is simply not true at all.