Messages

anyone who is looking into the same ( migrating from utm 9 to opnsense)

we just succesfully migrated to opnsense

defects / not working in the scripts:

1 DNS-hosts are not converted  ; we created them manually
2 network in firewall rules ; only the first network ( vlan)  is selected, we added the others that were needed manually as well.

beside the above 2 points , the migration went very smooth.

   

we did buy the business edition, but everything is already configured in HA proxy now, but thnx for the tip

Hi all,

a few months ago we started prepping for a migration from sophos utm9 to OPNsense  since sophos will end support in june 2026.
we are currently running sophos and opnsense both on a sophos xg 330, ( 2 identical devices)
 
since sophos is quite different compared to opnsense we decided to export the sophos  configuration  and using a bunch of scripts to extract the proper data, and import everything via the api.

so far what we have been able to export and import succesfull: 

aliasses
allias groups ( it builds groups based on the firewall rules)
services
Services groups , (same as alias groups)
Firewall rules
nat rules
most  WAF related things, creating a new ha-proxy config for every virtual webserver. 

so i thought, since sophos utm is near EOL, maybe someone else can also benefit from those scripts.
i just started committing to github, so it is empty right now, but i expect the scripts to be there very soon
you can find the proper scripts on my github: https://github.com/pjottrr/sophosutm9_to_OPNsense_migrationtool
 

If you have any question, just send me a message
my native language is dutch