How to Migrate from Sophos Email Appliance to XG Firewall with email protection licensing?

Question

Hi All Member, 
 
 I want to ask and also discussion about migrate SEA into XG firewal with email protection licensing? 
 Can we do it? 
 the problems are : 
 
 The topology not the best best practices 
 
 Internet 
 | 
 Mikrotik ---- SOPHOS EMAIL APPLIANCE 
 | 
 DMZ Switch 
 | 
 Core Switch ----- EXCHANGE SERVER 
 | 
 LAN 
 2. With the existing topology like that can we deploy XG ini bridge mode? 
 3. Any suggest from you guys? as far i know the XG must under the mikrotik, CMIIW 
 
 Thanks in advance 
 Jeremy.P

lferrara · Accepted Answer

Jeremy, 
 "Nice suggestion"? This applies always in any scenario with any product. 
 Anyway configure XG in Routing mode, where Lan and WAN have 2 different IP and they configure and enable MTA mode 
 https://community.sophos.com/kb/en-us/125596 
 Regards

lferrara · Answer

Jeremy , 
 with the current version, XG cannot send an email to a smart host, but it needs to send email directly. 
 Also DKIM, SPF, etc are missing. Stay on SEA. Much much better. 
 Regards

lferrara · Answer

Jeremy, 
 it means smart host. XG needs to send the email directly to other email servers in internet. If you have another MTA before the internet (another antispam, email server, appliance), XG will not work. 
 Good luck with features. SEA is a dedicated product on the market from years and it works. Do not expect to have the same features set like SEA. I hope that you tried XG before buying it. 
 Never never buy a product before you have tried it. 
 It is like buying a black-box. 
 Regards