Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 13 replies
  • Answers 1 answer
  • Subscribers 31 subscribers
  • Views 27610 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help Choosing Hardware for Heavy Home Use

technitect

Hi everyone,

I've been reading threads and researching the Sophos XG firewalls for some time now, but I keep running in circles in regard to my hardware choice.

I'm an IT professional, who works from home, but also has a family that heavily utilizes the internet (tons of web traffic and media streaming, upwards of 1TB+ per month). I also run a Plex media server and an ESX rig with multiple heavily utilized guests that have applications which are externally accessible. An average number of users is 4, but can be 10+ on many occasions. Wireless is also not an issue, as I have multiple Unifi AC-PRO's already in place.

Currently, my internet connection is 60/10, but there's a real chance I'll have access to synchronous 1Gbps in the near future, so I'm trying to future proof. From a module perspective, I'm looking to run basically all of the available modules, except for maybe Security Heartbeat. I'm not sure if I could really utilize it since most of my users are using tablets, phones, and other smart devices, and it was my understanding that was more desktop/server focuses (could be wrong, though?).

Anyway, I think my best option would be an XG-115 if I bought the hardware (about $750 with a 1-year license from CDW), but I didn't know if that was overkill. I was considering the XG-85 (about $550 from CDW with 3-year license) but didn't know if that was enough horsepower.

The other option is to build a mini-ITX machine with the following specs, and then load up the home edition:

Intel Core i5-7500. 4-cores (8 threads) @3.4Ghz

8GB of DDR4-2400 (I know home version can only run 6GB)

128GB Samsung EVO m.2 SSD

Dual Intel GigE NIC's

Cost - about $600

Thanks for all your help everyone!!

- J



This thread was automatically locked due to age.
  • 0

    Jared,

    If you want to use all the features without losing internet speed (60 Mb) you need an XG 125.

    See this PDF:

    You can build your own hw but keep in mind that you can use up to 4 core and 6 GB of ram and it should be used for home only.

    Regards

  • 0

    Note that from a cost perspective (STRICTLY for home use), it is always going to be more cost-effective to build your own gear.  

    The 100-series appliances use Atom processors (either dual or quad-core..depending on specific model) and they max out at 6GB of ram.  Core i5 systems are going to be in line with 300-series XG appliances from a processor standpoint.  So, it is a no-brainer for a home-use situation.  BUILD IT!

  • 0 in reply to LarryHerzogJr

    My current XG, the one carrying all the load as of today is based on a server board using 8gb (6gb is only allocated under home licence) and a e3-1225v5. 2 onboard NICs and two added.

    Uses about 20 watts, now has two ISPs and 8 rules, 2 AP55s with 5 SSIDs about 25 devices spread over both ISPs.

    Utilsation.

    cpu about 2% when very busy

    ram 45% peaking at 49%.

    Both ISP connections are flat out at 5mb/s on a good day, most days around 4.3mb/s down and 500kb/s up if I am lucky.

    How well this box loads up I will not know for at least 12 months if lucky.

    Ian

  • 0

    Look at my recent thread about gigabit FIOS etc and the hardware I am using.

     

    community.sophos.com/.../357487

  • 0 in reply to Grammaton

    Hi,

    I think you have pasted the the wrong link, that link links back to this thread.

    Ian

  • 0 in reply to rfcat_vk

    Hmm weird, the URL resolves to my question regarding SNORT filtering. 

  • 0 in reply to Grammaton

    Hi,

    Must have been a glitch at my end, because now it points at the that thread. An I5 is an overkill because, a high performing celeron will do with less heat. The i series processors have the extra processing functions which are not used by the XG.

    Ian

  • 0 in reply to rfcat_vk

    I agree I used to have it on I3 but then I gave that box to my family.  The I5 was a repurposed son's PC after inadequate performance at school.  SO yeah it probably is an overkil, but it was "free".

     

    Since GHZ is king when it comes to SNORT processing then I would recommend going with an I3 over celery.  At Micro center you can get a 2.9Ghz Celery for $39.99 or 3.9 Ghz I3 for $99.  I would (if you have $60 to burn) spend the $60 and go with a lesser mobo and maybe an Gigabit Intel Pro Duo (for $30 off amazon). 

     

    But those are just my own opinions.

  • 0 in reply to Grammaton

    Hi,

    thank you for your thoughts and explanation.

    I have many small MBs from upgrades to reduce power usage, this one is currently the best bang for buck. The CPU hits about 3% on dashboard after all my recent network changes.

    Also in AU the costs of any upgrades is a bit more expensive that your suggested prices.

    Ian

  • 0 in reply to rfcat_vk

    Yeah I wasn't going for power saving I was going for throughput.

     

    So with IPS on MAX and AV on Dual Scan, App filter on and Ad Blocker On I get 340-350 Mbits on my gigabit.  If I kill IPS I get the full bandwith.