Upgrading to XG from UTM 9.4 migration tool

Colin,

the tool will be available during this summer.

Regards,

Hi Lferrara,

Can I please know whether this migration tool now available?

If yes, please let us know the link 

If not, can I please know when it will be available?

Thanks

Mathew

I would stay on the UTM 9 if I were you. I think SFOS is still quite premature from my experience (might be spoiled from many years of running Astaro/UTM)

Mathew,

the tool should be available with v17. September. Stay with UTM9 and pay attention on all features that are not still available on XG.

Regards

Hi Guys,

Any updates for the migration tool availability?

Do we have to wait till September?

Mathew

Mathew Fernando said:

Hi Guys,

 

Any updates for the migration tool availability?

Do we have to wait till September?

 

Mathew

 

Summer over.  When will this be available?

Hi All,

see the AlanT thread:

https://community.sophos.com/products/xg-firewall/f/sophos-xg-firewall-general-discussion/86384/xg-v17-what-s-coming-next

So when is it coming?

Hello Michael,

unfortunately, very likely at the beginning of next year with version 17.1.

Regards

alda

Alda,

The first time I heard about that tool it was supposed to be available mid-2016, and that info came from Sophos so it wasn't a rumour. Now, I just think that will never come. I've been so disappointed with Sophos in the way they support their customers that I don't really expect anything anymore from them.

I can't re-create everything from scratch since it would take to much resources as our environment is so vast, so oh well... I guess I'll remember that when it will come the question to renew our contracts and hardware...

CL

Completely agree with Christopher.. we can upgrade for free but we just can't import anything! Our production environment is huge, I have installed XG onto a temp server for now and am trying to configure it but it is taking so long!! I asked my reseller about it and all he said was that they would be happy to do the work for us! Yeah right! and happy to charge me a fortune for it!

I even went on the XG course, what a waste of time and money! Anyone considering it don't bother! They show you how to do create a rule but they do not explain what is going on with it!

Completely agree with Christopher.. we can upgrade for free but we just can't import anything! Our production environment is huge, I have installed XG onto a temp server for now and am trying to configure it but it is taking so long!! I asked my reseller about it and all he said was that they would be happy to do the work for us! Yeah right! and happy to charge me a fortune for it!

I even went on the XG course, what a waste of time and money! Anyone considering it don't bother! They show you how to do create a rule but they do not explain what is going on with it!

The Point is: Most of your Rules makes no sense in XG. 

Let me paint you a picture. Do you use the UTM Proxy? In UTM, you do not have to setup a firewall rule. You create Proxy Profile and everything attached to it.

In XG, you create a firewall / user policy and attach the webfilter rule to it. 

Same for IPS. Same for ATP, Same for nearly everything. 

Firewall rules even handle the MASQ. Which is not the case in UTM. 

How should a migration work, if you would simply migrate all of your firewall rules from a network based firewall to a zone based firewall? 

Would consider to get back to the whiteboard and think to simplify your ruleset instead of performing some kind of 1:1 migration.