Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 36 replies
  • Subscribers 33 subscribers
  • Views 85549 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I really want to like this product, but...

psykix

If I'd purchased this for deployment in my place of work, then I'd be looking for a refund.

1) The webfilter issues are a show stopper. I wanted to use the webfilter to enable malware/antivirus scanning on the gateway. As soon as I enable the webfilter, then Youtube, Netflix, and the kids Amazon Fire TV boxes are all rendered useless. This has been posted about several times, and there is no response.

2) My connections shows interface status up, gateway down, but it's not down. I've tried with a straight and also a crossover cable - no difference. It's working so why is it saying it is down? Must be a bug.

3) How on earth do you get the performance indicator to stay green? I'm running it on ESXi 6 and have given the box 2 cores (and even tried 4) and 6Gb of RAM. Still it's flagging performance as orange.

4) Can't get email notifications to work using my normal Microsoft Exchange hosted server. Notifications from other applications BEHIND the Sophos XG firewall work, so why don't they work from Sophos itself?

5) Support is pretty much non-existent. It just seems to consist of users helping users, and at the moment it's like the blind leading the blind - none of us can figure the product out properly and most of us are not exactly networking novices. That should be telling you something about your product.

Rant over.



This thread was automatically locked due to age.
Parents
  • 0
    I'll combine your first comment with your #5 first - if you had bought this for your workplace, you'd likely be entitled to support. Support wouldn't be non-existent, and they'd work with you through these issues. I'm working with their support engineers now on a few bugs, and they're excellent. How they should be supporting other folks - like forum folks - that aren't paying XG customers yet - that's a different discussion. I think their involvement here could (should?) be better... especially since they seem to want people to use the free home version... and I think it will get better... Support just got handed a new product, too, so they are working to understand this new XG product as well. Give it a little time.

    Now - 1) webfilter issues. Just about any webfilter with HTTPS filtering is going to break something like netflix and amazon fire. I enabled Watchguard's version of https filtering at my house - had very similar issues. I came from and am certified in the watchguard product, so I had a spare of their smaller boxes lying around to test. Anyway - anything that tried to validate SSL certificates - and for which installing new certificates was nearly impossible - generally had major issues. Amazon Kindle e-readers would freak as well. This is a known issue with just about any deep packet inspection https filter, and the only way resolve that is to install the ca certificate from the firewall onto the end devices - or except the traffic from the https filter. The XG device actually makes it fairly easy to except certain traffic from HTTPS inspection. Entire categories can be exempt via the policy, and when ssl certificates for those sites are detected, the traffic is not intercepted and monkeyed with, or individual IP addresses can be exempt as well. I've found it works acceptably well. I have had to add in a few *special* exemptions - logmein rescue, for example, certain sites using websockets in an odd way, that sort of thing - but overall, it is working like an absolute champ.

    2) can the gateway be pinged? The xg relies on pings - not whether traffic is passing through the interface - to determine the status of the gateway, I believe. I think I remember that from the XG certification course.... Maybe that was only multi-wan was setup...

    3) What's the load average look like on the performance screen?

    4) Do a packet capture on the smtp traffic to see what the SMTP conversation looks like. Could be any NUMBER of things - including user error (hey, it happens... even on a stupid smtp connection. )
  • 0 in reply to ChavousCamp
    Yes, that's what I was getting at - their involvement on this very forum.

    1) Maybe I misundertand the issue with the webfilter then - I don't want to have to mess with certificates. I do want web browsing to be scanned for malware/virus and I have tested with the webfilter switched on and it does indeed detect those things. However, as stated above Netflix etc break with the webfilter on. That means that Video Streaming functionality and malware/virus detection are mutually exclusive at the moment with this product.

    2) I have no idea if it can be pinged - this is the WAN and is not on my LAN - I'll try the below recommendation from Wayne!

    3) Load average has gone above 2 which is what triggers it - however I cannot see why it goes above 2 when cpu usage and RAM usage are negligible. There appears to be no logical correlation.

    4) It seems I am not the only one with this issue now - I'll have to dig further, but the lack of any proper realtime log makes troubleshooting more difficult. Unless I am missing that feature somehow?
  • 0 in reply to psykix
    I tried setting the interface to static and back to DHCP and it refreshed the interface but still shows as down.

    I'd check the modem for whether pings are allowed, except it is a Huawei HG612 and it is locked down - don't really want to have to go putting the hacked firmware on it really.
Reply
  • 0 in reply to psykix
    I tried setting the interface to static and back to DHCP and it refreshed the interface but still shows as down.

    I'd check the modem for whether pings are allowed, except it is a Huawei HG612 and it is locked down - don't really want to have to go putting the hacked firmware on it really.
Children
No Data