Conversion Utility UTM 9 to XG

Jae Lupo As alda mentioned, there are limitations with the current version of the UTM to XG migration assistant. As a result, additional migration work may be required or advised. I would advise to reach out your Sophos Partner to help guide you with your migration.

For reference, take a look at the Sophos Migration Assistant Guide here (specifically pg 9 -Appendix A: Conversions and limitations).

Please don't hesitate to reach out to me via DM if you had any other questions or concerns.

Regards,

Hello FloSupport,

" there are some limitations" - a truly excellent euphemism for the useless !

You don't even know how your migration tool works because what I found in my analysis is not mentioned in the Release Notes, in the Sophos Migration Assistant Guide, or in the migration process too.

Do you know what firewall rules are not migrated during migration ( they are  lost during migration and there is no record of this ) or what network object is so badly migrated that it completely change the entire firewall policy?!?

Oh my God!

You really do not know how your migration tool works ...

Regards

alda

Hello FloSupport,

" there are some limitations" - a truly excellent euphemism for the useless !

You don't even know how your migration tool works because what I found in my analysis is not mentioned in the Release Notes, in the Sophos Migration Assistant Guide, or in the migration process too.

Do you know what firewall rules are not migrated during migration ( they are  lost during migration and there is no record of this ) or what network object is so badly migrated that it completely change the entire firewall policy?!?

Oh my God!

You really do not know how your migration tool works ...

Regards

alda

Hi alda 

Would it be possible to PM me with the results from your analysis so that I can forward these to team who manages the Migration Assistant?

Thanks,

Hello FloSupport, that's a big surprise  that you do not have my analysis.  Because I did the analysis for the European Sophos Support. 

Regards

alda

So... are Home Users such as myself eventually be able to access this tool if we want to migrate?  The XG platform alone is status quo confusion to figure out after using UTM for so long.  None of the interfaces really make much sense.  It would be nice to at least use the tool to migrate to an XG set up in a VM so we can see where our rules are going and how they are set up, even if it's not everything.

I don't have anything that's out of this world in terms of setting up things, but the time involved and setting things up correctly could be improved by using the tool to at least see where things are going.  I tried XG once - and dropped it just a few days later because the setup alone, even though I thought it was correct - wasn't correct at all and out of frustration was uninstalled immediately.

Hi Amodin 

Let me check with the Team responsible to inquire about if/when a possible release for Home Users would be available.

Regards,

I guess that's a 'no'?

Hi Amodin,

That's correct. Unfortunately this tool remains only accessible for use by Sophos Partners.

Regards,

Just forget this tool.

Migrate manualy.

Sorry.

Paul Jr

Not going to migrate at all, lol.  I'm not going near XG for now. 

Guys I was promised this tool as well 2 years ago when we purchased XG.  After a lot of fighting I was finally able to send in my backup config files and get them converted.  Now 3 of my firewalls were simple configs and the tool did a good job in moving some of the objects and rules over to XG it was not perfect and it still required me to configure a lot of stuff.  My 4th firewall was fairly complicated and the tool just could not convert my config properly.  After months of frustration I just typed in in from scratch.  In the end I wish I just did that with all of my firewalls and saved me a lot of time and frustration.  My point is if you have a complicated setup just type in yourself it it will be much cleaner and you will get rid of a bunch of junk you don't need any longer.  If you have a simple setup just type it in it won't take long as there is not much to do.