Sophos Firewall: v18.5 MR2: Feedback and experiences

Hi folks,

I have installed this version on my xg115W and it is not working well. I have tried a number of different configurations. The aim was to replace my home XG with this new box. I built a configuration based  on my existing system but with many cleaned up and refined policies and firewall rules. That was a disaster, throughput for speediest max'ed out the line, but web surfing, just did not work at all well, pages took many seconds and sometimes minutes to load and more often timed out leaving online payments in limbo.

A restart partially fixed the issue but not completely.

The logviewer showed many failed to associate connection errors.

I removed over 50% of the configuration and in a lot of cases used the default XG provided policies with my firewall rules. With one user connected works well, while not as quick with page loads as my existing XG, still worked.

I moved my IoT network across again after refining and reducing the configuration and end up with poor connection times and lots of cannot associate errors in the logviewer.

So, the conclusion I have come to is that this version of XG software is not suitable for my XG115w with a full business licence.

My IoT network has 7 wifi devices and 5 fixed devices, which most are not always active or powered on.

Ian

Same here, very slow. I have MR2 loaded on my XG210, except with a home license. I only have a couple NAT rules in place.

Edit: I think for me it was pointing my DNS server to the wrong gateway. I had put the Sophos firewall in side-by-side with my other firewall for a while to do some testing and setup and swapped some of the gateways on my servers around, but didn't flip them back when I made the complete change.

Same here, very slow. I have MR2 loaded on my XG210, except with a home license. I only have a couple NAT rules in place.

Edit: I think for me it was pointing my DNS server to the wrong gateway. I had put the Sophos firewall in side-by-side with my other firewall for a while to do some testing and setup and swapped some of the gateways on my servers around, but didn't flip them back when I made the complete change.