Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Feedback from old UTM user - Bugs, typos, questions and suggestions

So I've been an UTM/Astaro since v6 (first at work, then also home when the home user license came along). About two weeks ago I decided I wanted to test the new XG Firewall Home Edition, and just reinstalled my UTM server with XG 15.01.0. Here is my findings, like bugs, typos, questions and suggestions. I did not know here else to put it.


System > VPN > SSL VPN Settings > I was able to set IPv4 Lease range for a /27 network to 10.81.234.0-10.81.234.30. I should not be able to select the network address (.0), should I? Trying to set broadcast .31 gives me an error as it should: "You cannot enter a network broadcast IP for End Lease IP Address"

Objects > Policies > IPSec > No explaination

Objects > Policies > IPsec > Unable to rename a self created policy (only duplicate and delete)
- Seems to go for lots of pages, including
- Web Filter Policy name

Objects > Policies > Web Filter >
- (default) No Online Chat > Has duplicate rules inside
- 'No web uploads' should probably be written 'No Web Uploads' to be the same capitalization as the other rules

System > Diagnostics > Tools > Ping > Interface > The list is not sorted, nor in the order of creation, so just kinda random.

Objects > Content > Application List > Name: Torrent Clients P2P > Typo in description: "... Torrent protocol. Ea ch client is capable ..."

Objects > Policies > Web Filter >
- 'No web uploads' should probably be written 'No Web Uploads' to be the same capitalization as the other rules

Please add shortcuts to the navigation - It's imposible to navigate back to last page you where on by clicking on the "path" under the page title; Like wanting to go back to the list of policies by clicking on "policies" when you're in "Objects > Policies > Intrusion Prevention"

Objects > Policies > Traffic Shaping > Too many slow-band shap policies maybe? from 2KBps to 512KBps only.. and a big bunch of small variants.. What's all these for anyway as a default?

Objects > Hosts and Services > Services > It's almost impossible to get a good overview or search; only filter on name. Not good enough

System > Network > DHCP > Should be a way to make a dynamic lease static directly, instead of editing the server config

System > VPN > IPsec > Endpoint Details > Should be on two lines so that the Remote part doesn't get "crushed" into the local dropdown. Minor cosmetics

System > VPN > SSL VPN Settings > Unable to select both TCP and UDP
System > VPN > SSL VPN Settings > Unable to select which port to be used. Is it default 443 (tcp) and 1194 (udp)?

System > Administration > Settings > No exceptions for 'block admin'

System > Administration > Backup & Restore > No options to do backup to more than one type. What if I want local, ftp AND email?

System > Network > Interface > Not possible to set Jumbo Frames? only says 576-1500


LAG - Why must my Lag0 itself have an IP? Doesn't make sense, at least it didn't in UTM
LAG - Why can't I convert a normal ethernet interface into a lag?
LAG - Why can't I start with a lag of one interface? This would at least make up for not being able to convert
LAG - The only way I was able to create a Lag0 on my 3NIC firewall was to enable admin on WAN and take down ethernet Port0 to join int with Port1 for lag setup. Thats not a good solution.


I don't know if some or all of this has been raised before - this is just what I did take note of when I was going through the entire XG GUI to get a feeling of the configuration.

It will take some time to get used to it. Hopefully I won't have to fall back to UTM9, but for the time being I'm having some firewall policy issues with my cloud backup software connecting outbound; but that I will ask about in another post.



This thread was automatically locked due to age.
Parents Reply Children
  • I found another annoying issue with the XG VS the UTM in relation to the SSL VPN.  I have also been an UTM user since v6 (first at work, then also home when the home user license came along). About a month ago I decided to retire my UTM 110 as I decided I wanted to test the new XG Firewall Home Edition on a much more powerful piece of hardware.  I discovered that unlike the UTM you cannot change the inbound SSL VPN port for not just only the connections but also the user portal.  Well this isn't good as I'm also running windows Server Essentials, I cannot change ports on that medium either.  Is it possible to have this added into a future release of the new operating system? Thanks