I am using the free UTM 9.1 and installed it on a 4 core amd pc with a 256GB SSD and 8 gigs of ram, it has 5 network cards in it. I am looking for the best suggestions how to configure the network I want an unsecured wireless guest network with its on DHCP scope , a DMZ for my own domain website as well as remote and mail servers , a full dhcp scope for my private uber secure network secured wireless netowrk with DHCP scope connected to my private LAN I can see the network cards under the interface list but since they are all the same I cant figure out which is which.. I am sure I can find a way I do have my own domain name and 5 static IP's from my ISP which will be used for my DMZ, I am assuming I can use 1 static IP to NAT to the guest network any suggestions or caveats to watch out for would be welcome, I am familiar with Cisco and Watchguard firewalls but not Sophos UTM Thanks in advance

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

need help planning a DMZ and guest network

I am using the free UTM 9.1 and installed it on a 4 core amd pc with a 256GB SSD and 8 gigs of ram, it has 5 network cards in it.
I am looking for the best suggestions how to configure the network

I want an unsecured wireless guest network with its on DHCP scope ,
a DMZ for my own domain website as well as remote and mail servers ,
a full dhcp scope for my private uber secure network
secured wireless netowrk with DHCP scope connected to my private LAN

I can see the network cards under the interface list but since they are all the same I cant figure out which is which.. I am sure I can find a way

I do have my own domain name and 5 static IP's from my ISP which will be used for my DMZ, I am assuming I can use 1 static IP to NAT to the guest network

any suggestions or caveats to watch out for would be welcome, I am familiar with Cisco and Watchguard firewalls but not Sophos UTM

Thanks in advance

This thread was automatically locked due to age.

0 BarryG over 10 years ago in reply to mikeownage

I agree completely with your statement William regarding the loss of the power saving feature. ... It may be that the loss of the power saving feature may not be an issue for him. I was just pointing it out as a simple way of achieving guaranteed performance.

Hi,

Disabling SpeedStep (BIOS) or CPUFREQ (Linux) will not have a noticeable affect on power consumption on Ivy/Sandy Bridge or Haswell (or Broadwell) (tested with Kill-a-Watt on Haswell i5).

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago in reply to sheetzdw

Thanks all I do like the input, I am not implying or trying to Sophos is bad only that improvements like multithreading would be nice additions since multi threaded CPUS have long been mainstream.

Most components of the UTM are multi-threaded.

The Snort IPS is multi-process; multiple streams can be divided across CPUs.

Sophos is testing replacing Snort with Suricata, which is multi-threaded.

Regardless, the Snort IPS in the current UTM is fully capable of hundreds of megabits, single-stream, on Haswell CPUs (including i3):
https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/29110

Barry
Cancel
Vote Up 0 Vote Down

Cancel

need help planning a DMZ and guest network

Submitted a Tech Support Case lately from the Support Portal?