Experiences with Sophos SG appliances?

Started by harmen, October 13, 2021, 04:21:29 PM

Previous topic - Next topic
Hi Guys,

Bought a second hand Sophos SG115 firewall. (just 80 euro) Installed opnsense on it via bootable usb.
Specs: Intel Atom E3827 dual core, 4GB memory, 64GB SSD, intel nics and passive cooled. Power ussage 7Watt
Config: QOS (A+), OpenVPN, Unbound DNS, Sensei adblocking. Working flawless for weeks now.
Internet provider is Ziggo 75/10. In the past i used several routers, like (Edgerouter, Sophos XG)

What are your experiences with these devices? Any tips or tricks?

Same here... I love them and have been watching ebay for when they come up. I just got one that was a 115 for $31 since they didn't have a PS for it.

Just bought 6 with rack mounts for $75. We had been running PFSense on Dell optiplexes at our warehouses and new boss wanted to change to more application specific hardware. I was able to get him to move to OPNSense on them all since that is what I use at home and I explained it had a much more stable release cycle. Netgate moving away from PFSense "Community Edition" and me telling him about their less than adult practices and attitude pushed him over as well.

Cannot say enough good things about them.

Great te hear! A real bargain.
Does anyone know the limits of these devices?

At work we have a couple of Sophos XG firewalls, hate the interface since i've been using Opnsense.  :)

Limits are, they are built to a budget. Probably not very high quality.

As to the XG, I liked the SG/Astaro, since sophos is going XG I'm working on migrating the company over to OPNSense.

August 04, 2022, 02:48:04 PM #4 Last Edit: August 04, 2022, 02:55:31 PM by SecCon
I would like to pitch in since this is about Sophos in general.

Just ordered a Sophos 210 and will probably get it in a couple of weeks. Meanwhile I am looking in to installation tutorials and hardware specs.

It seems the 210 is enough to use in a small home office (and a lot more) with about 100 devices an GbE lan. but I am having some issues finding the exact specifications... searching...

I found this, but not entirely sure it applies to the one I get, no confirmation of the hardware revision.
Quote
Hardware specifications rev 1
CPU: Intel Celeron G1820 (Haswell, 53W) 2c, 2.70GHz
RAM: 8GB 1600MHz-DDR3 in 1 DIMM, 2 DIMM slots (easy to add/replace ram)
HDD: 320GB HGST HTE725032A7E630  (Travelstar Z7K500 2.5", 7.2k/32MB cache, AF, 1 platter, 24x7 certified model) mounted in rubber stands
NICs: 6 Intel i210 NICs

I will have to verify this of course when I get it, but looks promising for RAM/HDD upgrade. From images I see I may be getting an earlier HW revision. Hoping to be able to dig in and replace/upgrade a few things.

All the SG's are listed here: https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-sg-series-appliances-brna.pdf
CLI is the lack of UI!

Quote from: SecCon on August 04, 2022, 02:48:04 PM
I would like to pitch in since this is about Sophos in general.

Just ordered a Sophos 210 and will probably get it in a couple of weeks. Meanwhile I am looking in to installation tutorials and hardware specs.

It seems the 210 is enough to use in a small home office (and a lot more) with about 100 devices an GbE lan. but I am having some issues finding the exact specifications... searching...

I found this, but not entirely sure it applies to the one I get, no confirmation of the hardware revision.
Quote
Hardware specifications rev 1
CPU: Intel Celeron G1820 (Haswell, 53W) 2c, 2.70GHz
RAM: 8GB 1600MHz-DDR3 in 1 DIMM, 2 DIMM slots (easy to add/replace ram)
HDD: 320GB HGST HTE725032A7E630  (Travelstar Z7K500 2.5", 7.2k/32MB cache, AF, 1 platter, 24x7 certified model) mounted in rubber stands
NICs: 6 Intel i210 NICs

I will have to verify this of course when I get it, but looks promising for RAM/HDD upgrade. From images I see I may be getting an earlier HW revision. Hoping to be able to dig in and replace/upgrade a few things.

All the SG's are listed here: https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-sg-series-appliances-brna.pdf

Same, Sophos 210 rev3.
Since I have seen folks mentioning about upgrading its CPU and memory, I am hopping it is socket and not soldered.
Sophos 210 rev3 allegedly comes with an Intel Celeron G3900 2.8Ghz 2/2 and 8GB of memory.
That CPU is an LGA1151 with 51W TDP ( thermal design power).

I am assuming the CPU is not soldered but socket so I got an i5-8500T 6/6 35WTDP.
In the worst case scenario if the CPU is soldered, I have a CPU for another project lol