This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hardware requirements for link 300/50 and 1000/300

What is hardware requirements for link 300/50 and second device for 1000/300 link?

Its sophos home firewall its right for this ? Running ids/ids , VPN



This thread was automatically locked due to age.

Top Replies

  • The limitations for the home license of Sophos firewall XG is 4 CPU cores and has a limitation of 6Gb or RAM maximum. For your scenario it depends on how many users you will have.

    There is no official hardware compatibility list, but the requirements are:

    The system (motherboard) you use must support legacy BIOS and booting in legacy mode.

    Intel "server oriented" NICs are recommended since they are the most compatible. Most dual port LAN PCIe cards you buy are "server grade" and will mostly work. Obviously try to avoid NICs from Realtek since these are less supported.

    Some of the newer Intel NICs are not supported yet such as the i219 and i225, so be careful if using one of the fanless firewall appliances. Ultimately you may need to virtualize your firewall using KVM, Hyper-V or ESXi to run the Sophos Firewall on "unsupported" hardware. This may be difficult depending on your skillset.

    The choice of hard drive is up to you, but a minimum of 64Gb seems to be the norm. A consumer 256Gb SSD is no issue.

    If you are building a system yourself you will need a fast enough CPU to handle a gigabit download speed, but generally any modern dual/quad core CPU should work fine. I'd recommend any CPU 3 Ghz or faster. This is just a recommendation. Slower CPUs may work fine if you don't need too many IDS rules.

    A good motherboard that seems fast enough would be a mini-ITX from Asrock, the Asrock J5040 mini-ITX, and it seems to be one of the only mini-ITX worth getting these days, as many of the older ones are very slow such as the J1900.

    So it depends on if you are building your own system or wanting to go with a firewall appliance.

    Jump to answer
    • A 4 core processor is best, hyper threading does not provide the same performance . I did use an i3 for a while but it got tooo hot. I prefer the Xeon series because they don't have a very high performance video onboard.

    ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • What features are you planning to use?

    If your only going to use IPS + App & Web filtering any of those processor you have will be able to handle both of your Links.

    Overall I recommend you to use the i3-7100, It's two years newer than the others and have a lower overall power consumption. (And higher AES-NI throughput for things such as TLS Decryption and SSLVPN.)

    PS; Almost all of the i3-7100 motherboards have CSM support, if you enable It first then there should be no issues installing Sophos Firewall. (You wont need to use Proxmox.)


    If a post solves your question use the 'Verify Answer' button.

    XG 115w Rev.3 8GB RAM v19.5 MR1 @ Home.

  •    which of xeon cpu you recomended for h110?