As a long-time UTM user, trying once again to convince myself to give the XG a go, these are my experiences.
I absolutely love the UTM, the simplicity, well designed UI and how easy it is to use.
However on the XG....
The WebUI still seems like something straight out of 1995, optimized for 1024*768 resolution.
Not consistent naming of for example interfaces. Some places you can use the self defined name, some places not.
Not always being able to rename created objects.
Text being truncated, making it extremely hard to get an overview.
The zone based firewall and NAT linking is a f****g joke. Seems more and more like they just expect people to always do "ANY-ANY" rules.
Documentation is mis-leading and often just specifies "just add ANY", doesn't describe the actual usecase, and often exremely bad written. Some of it almost seems auto-translated, or written by Indian support?
When you write to support you quite fast get a response from their Indian support team which points to a generic KB or support page, even though you clearly stated that you already tried that solution, then doesn't hear anything back for days.
Video how-to guides, where 95% of the time is spent on useless sales pitches.
I often find myself not being able to delete objects because it claims its still in use not really being able to find out where.
It seems Sophos is actively trying to force customers from UTM to XG by keeping them in the dark, removing functionality, not updating functionality to new standards.
I'm quite sure XG can be a dream in a all Windows / AD, using all of Sophos's products and end user protection.
Right now I'm stuck with 2 XG firewall's I recommended to a client, really wishing I had stuck with UTM.
Sophos have had so long to fine tune the product, but it seems they are more focused on adding features to support their software, that delivering a good product.
Am I really just not understanding the product?
and yes, have actually had courses in both the UTM and XG, and are/were a certified XG and UTM architect.
This thread was automatically locked due to age.
