This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Installing Sophos UTM Home, Virtualized or Bare Metal

Hey Guys

First of all I have to admit, that I do not have any experience with Sophos UTM. I have experience with other routers and firewalls tough.

Sometime this year I am getting a new Internet connection at home and for that I need a new router, because it will be 1 Gbps symmetrical and the router which I own at the moment cant handle that.

I do not need a huge bunch of features:

-Client VPN (PPTP?)
-Site to Site VPN
-Firewalling (at the moment I have "only" a router, without sophisticated firewalling mechanisms.) I do not want to build Fort Knox at home, but it would be nice to know that some of the "bad stuff" is filtered out.

The problem is, that I do not know how I want to use Sophos UTM.
First, i planned to install it on a 1RU server as a VM, so that I would have a possibility to run other servers on this hardware too (like SVN, Fileserver and so on).
But then I saw, that UTM is not supported by virtualbox but only by "professional" Hypervisors.
The problem with those professional hypervisors is, that they require more knowledge and support and altough I am a student of "computer sciences", I do not want to have to install updates and other stuff 24x7.

So what advise can you give me?
-Install it on a hypervisor anyway (maybe it is less painfull than I imagine)
-Install it with a less professional hypervisor, like VMWare Workstation
-Install it bare metal with all disadvantages like longer restore times, bader backup possibilities and "wasting" new hardware as router

______edit_______
Regarding the performance: I am clear that 1Gbps is much to route and very fast.
I am not dissapointed if it will not be able to route (especially firewalled) everythint with this speed.
But about 600-700 Mbps would be nice!

I am sorry if i wrote anythign wrong, I am no native speaker[;)]
Regards
Thor_

This thread was automatically locked due to age.

Parents

0 William Warren over 10 years ago

ok for gigabit speeds only on firewall you can use dc vm with 2.0 ghz and 4 gigs of ram(as i said 4 gigs is the minimum for my specs).  For gigabit ips the minimum is dc I3 at 3.5 ghz so you would need dc at 6 ghz for gigabit ips and firewall.  Once you throw in web filtering(web proxy https app control and atp) the requirements for gigabit performance is minimum QC xeon e3 at 3.5 ghz.

When it comes to ips ghz is king but everything else can add quite a bit of overhead as well.  If you want to have a prayer of being able to max out your WAN connection with a hexacore 2.5 ghz install directly to the box with no less than 16 gigs of ram.  Ram is also used in the processing of packets and with the raw number of packets you are going to be doing you are going to need a ton of ram.

To give you an idea your requirements(firewall/atp/ips and http proxy w/av all capable of doing gigabit at the same time) would require a minimum of an sg450 which has a
Quad Core Xeon E3-(3.50GHz) and 16 gigs of ram.  More slower cores doesn't win this race well.  If you have already bought the hexa try it it might be fast enough if pushed by user usage.

HTH

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 10 years ago

ok for gigabit speeds only on firewall you can use dc vm with 2.0 ghz and 4 gigs of ram(as i said 4 gigs is the minimum for my specs).  For gigabit ips the minimum is dc I3 at 3.5 ghz so you would need dc at 6 ghz for gigabit ips and firewall.  Once you throw in web filtering(web proxy https app control and atp) the requirements for gigabit performance is minimum QC xeon e3 at 3.5 ghz.

When it comes to ips ghz is king but everything else can add quite a bit of overhead as well.  If you want to have a prayer of being able to max out your WAN connection with a hexacore 2.5 ghz install directly to the box with no less than 16 gigs of ram.  Ram is also used in the processing of packets and with the raw number of packets you are going to be doing you are going to need a ton of ram.

To give you an idea your requirements(firewall/atp/ips and http proxy w/av all capable of doing gigabit at the same time) would require a minimum of an sg450 which has a
Quad Core Xeon E3-(3.50GHz) and 16 gigs of ram.  More slower cores doesn't win this race well.  If you have already bought the hexa try it it might be fast enough if pushed by user usage.

HTH

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Installing Sophos UTM Home, Virtualized or Bare Metal

Submitted a Tech Support Case lately from the Support Portal?