Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can Sophos Firewall Home version be installed in a dual boot mode (with 2 HD) ?

Hello to the Sophos community !

Just getting onboard today and I would like to install Sophos Firewall Home edition on a laptop which has 2 hard drives (one SSD, one HDD).

I read that Sophos is wiping and taking a full disk, but wondering if it is possible to chose on which disk Sophos will be installed, and can you then get a dual boot system, eg. Windows - Sophos, just like you can have a dual boot Windows - Linu ?

I searched the community forum but didn't find a similar question, hence my post.

That kind of installation would be my prefered install option, as Sophos would run directly on the computer without using a VM.

Otherwise, if that's not possible to have a dual-boot system, which VM would you recommend please for a Core i5 laptop from 2017 with 8 Gb RAM for optimal perf?

Many thanks and kind regards,

Alex



This thread was automatically locked due to age.
Parents
  • You also need two NICs,

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • Further you can dual boot, that is a bios issue, but you can end up compromising your network security by allowing software to attempt to access the XG disk.

    ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • Hi Ian,

    Indeed, I just received the second NIC I needed for this kind of configuration.

    As for the dual boot, I usually use FDE on the other system installed in parallel of Windows, But in the present case, I understand from your post the security risk that would be caused by dual boot - thanks for the heads-up !

    What I am not comfortable with yet, is how to properly configure the connectivity between Sophos VM, Oracle VB and the Windows OS so that the system is secured.  No sure how  that operation is called, but could anyone recommend existing guidelines about this topic please?

  • Are you going to install a VM then run windows and XG in it which is different to what you progonally asked?

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • Hi, Rcat thanks for getting in the loop.

    Well, your message maybe suggests there is a subtlety here:

    In my initial post, I asked about the possibility to install Sophos FW as a dual boot system on a computer or, alternatively, to run it in a VM (which itself would run on a given OS, ie. Windows).

    As the dual boot route seems a bit tricky, I'll go for the second option Sophos FW in a VM (probably Oracle VB or if there is an issue, VMWare).

    I found the initial installation steps (on VMWare) here

    https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/

    My latest question is about the proper (or avdanced) configuration of the connectivity of Sophos FW in a VM, as the VM will access the network in interaction the computer and its OS. The idea is to apply best practices to ensure network trafic flows through Sophos FW and prevent leaks to/from the VM or underlying computer.

    And just wondering if there are any existing guidelines about this topic please?

Reply
  • Hi, Rcat thanks for getting in the loop.

    Well, your message maybe suggests there is a subtlety here:

    In my initial post, I asked about the possibility to install Sophos FW as a dual boot system on a computer or, alternatively, to run it in a VM (which itself would run on a given OS, ie. Windows).

    As the dual boot route seems a bit tricky, I'll go for the second option Sophos FW in a VM (probably Oracle VB or if there is an issue, VMWare).

    I found the initial installation steps (on VMWare) here

    https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/

    My latest question is about the proper (or avdanced) configuration of the connectivity of Sophos FW in a VM, as the VM will access the network in interaction the computer and its OS. The idea is to apply best practices to ensure network trafic flows through Sophos FW and prevent leaks to/from the VM or underlying computer.

    And just wondering if there are any existing guidelines about this topic please?

Children
  • Hi

    i am at a slight loss as to why you would install the XG on vm on a laptop except for training purposes?
    you only have two nics which is going to limit your security. Ms is not known for its network security on laptops.

    ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • Hi Ian,

    Basically, it is for home (lab) usage and indeed, training purpose at the same time.

    I don't have a computer that I am comfortable to wipe from Windows completely, so that's why I initially thought about a dual-boot mode. For instance, I have already installed a number of Linux distributions on that same laptop and it coexisted fine with Windows. Here, I appreciate we are speaking of something different, a software that is typically installed on an appliance and which can be also run on a computer or in a VM. I saw the various VM installers available so that's why I asked for a bit of advice about which ones are prefered in the community.

    The guidelines I would like to find now are about having something that is decently configured and working without blatant connectivty leaks so that my system don't get booed at first glance (can't pretend to be a network pro myself)Slight smile

    I am thinking to find some Sophos blog posts or doc, for instance, something similar to the below URL but for the more fundamental aspects of Sophos FW in a VM

    docs.sophos.com/.../index.html