Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Buying a used XGS 107

Gday,

A seller on Kijiji is offering a “never used” in box XGS 107 for $200 CDN. 

I’m looking to get into Sophos hardware and endpoint security to perhaps eventually start a small MSSP. 

This deal seems a little too good to be true as this unit sells close to $700-800 new from a distributor in Canada. 

I plan to run this in a home lab and use it for training. Eventually may deploy as main router and buy an APX. 

the other question is licensing. As a home user, I don’t think any of the licensing will be affordable or make sense. But to build up my skill set I would need access to deployed equipment manges in Sophos central. I’m more interested in network protection, web filtering etc  No mes for server and email or cloud protection licenses at this point  

I am currently testing Sophos Central and endpoint security on a couple of machines free for 30 days. I’ve used Sophos UTM and XG in the past on my own hardware so I do have experience with Sophos. 

Any advice or tips?



This thread was automatically locked due to age.
Parents
  • $200 is very cheap and you know what they say about "if it looks to good to be true, it probably is". Might be stolen. Almost certainly registered. When someone buys a Sophos firewall, it gets registered to the customer by the seller and, in theory, you can't licence it unless you are that customer. I don't know how that works in practice because I've never tried licencing a firewall when we or the customer aren't the registered owner. There is a process to transfer to a new customer but this has to be agreed to by the existing customer.

    You can put a home licence on any hardware including Sophos firewall hardware. You will usually find plenty of decommissioned Sophos kit on auction sites, both Sophos XG and SG firewalls. You need to know a bit about what you are doing though because some firewalls with the same name, e.g.  XG 135, have 3 versions and anything but the newest version can be pretty slow. The advantage of using old Sophos hardware is you know the hardware is supported, they have plenty of NICs and it can be cheaper than buying something new. The problem is that you have to replace the hard drive or find a utility to wipe track zero on the hard drive before you can install the home version (otherwise it insists you install the hardware version that requires a retail licence). Also, Home will not take advantage of any of the Sophos specific hardware. For example, if you installed Home on an XGS model, I don't believe it would use the dedicated flow processor. That doesn't matter in a lab.

    If you decide to buy your own hardware, make sure that the NICs are supported otherwise it won't work.

    If you are using it purely in a lab then any model should suffice. I don't know what the XGS 107 is like but the web interface on its predecessor, the XG 106 was painfully slow and may be frustrating to use in a lab where you are making a lot of changes.

Reply
  • $200 is very cheap and you know what they say about "if it looks to good to be true, it probably is". Might be stolen. Almost certainly registered. When someone buys a Sophos firewall, it gets registered to the customer by the seller and, in theory, you can't licence it unless you are that customer. I don't know how that works in practice because I've never tried licencing a firewall when we or the customer aren't the registered owner. There is a process to transfer to a new customer but this has to be agreed to by the existing customer.

    You can put a home licence on any hardware including Sophos firewall hardware. You will usually find plenty of decommissioned Sophos kit on auction sites, both Sophos XG and SG firewalls. You need to know a bit about what you are doing though because some firewalls with the same name, e.g.  XG 135, have 3 versions and anything but the newest version can be pretty slow. The advantage of using old Sophos hardware is you know the hardware is supported, they have plenty of NICs and it can be cheaper than buying something new. The problem is that you have to replace the hard drive or find a utility to wipe track zero on the hard drive before you can install the home version (otherwise it insists you install the hardware version that requires a retail licence). Also, Home will not take advantage of any of the Sophos specific hardware. For example, if you installed Home on an XGS model, I don't believe it would use the dedicated flow processor. That doesn't matter in a lab.

    If you decide to buy your own hardware, make sure that the NICs are supported otherwise it won't work.

    If you are using it purely in a lab then any model should suffice. I don't know what the XGS 107 is like but the web interface on its predecessor, the XG 106 was painfully slow and may be frustrating to use in a lab where you are making a lot of changes.

Children
  • Thanks for the info. Seller reduced to $100! 

    I dusted off my old Dell Inspiron Intel Core 2 Duo w 4gb ram, installed SFOS home on it. Runs pretty good. Registered to Sophos Central.. that is very cool. I currently manage Peplink devices through their inControl2 cloud platform.

    So questions remain wirth licensing.. I presume Sophos Central isn't free, and I will lose my FW cloud management.

    I have reached out to Sophos sales and asked about deploying Sophos endpoint security into non profits such as churches etc... hoping I get a reply back. 

    But using XG home on older PCs and deploying them in family members homes for free, and managing them from Sophos Central would be really great.

  • Sophos CM is free for the 7 day version, it has limited functions, but manages firewall, APs and reports even backups but stores them for 7 days only.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?