2 years on and there is some less than good feedback about their support.
Be warned http://www.edugeek.net/forums/intern...eb-filter.html
1 and a half years later and we have all 300 computers on SSD drives including most servers.
Still not a single failure!
You can now also get an intel 60GB drive for £48 now.
Thank you, thank you, thank you!!!
Yes I heard bad things about their anti virus being bloated and hard to uninstall/upgrade
But this box is superb, I'm still surprised everyday at how good it is.
Today I setup a ra sites open. It literally took abonew policy for our boarding boys after 4pm with some extut 5 clicks to do. Very impressed.
Sophos are the last people i would have gone with considering their anti virus solution
A week after use and this hardware just gets better and better.
It automatically emails me when someone requests a website unblocked from the denied page. Then it can aggregate the results and I can unblock the most requested with 1 click.
It is blazingly fast, had loads of comments on how "good the internet" is now
The reporting features are outstanding.
It can even email me when someone types in a search word that is banned
The summary page is excellent showing how much bandwidth is being used now or over a time period.
Just to update this, we are now moved over to Exchange on-line school wide and very happy so far.
The original points still remain valid (especially the lack of single sign on and poor active directory integration) but quite happy about the system in terms of email provision.
Our old Exchange 2003 server is going to run for 6 months then I will turn it off
Thanks zag. Most appliance vendors likely base their offering on a linux kernel somewhere way down beneath the shiny tin. This makes hyper-v support quite hard. We're certainly "better than we were" on hyper-v, but I would still generally caution against its use outside of a test environment for Smoothie.
As for SSD... our support manager is keen - but they still have price and reliability issues which we would not dare pass on to our customers for the benefits offered!
PS. We have since changed the look of the front panel of our UTM... so hopefully it would pass your high standards now
How small is this Sophos box? My Smoothwall UTM isn't that big, its probably 50cm deep if that so this Sophos box sounds like its a mini-itx box or something like that?!
To be honest it was a close run thing between smoothwall and Sophos. I liked smoothwalls power and support but the Sophos box was easy to use and did the job just as well. I am a great believer in power through simplicity.
Both companies were willing to match on price so that wasn't a huge issue.
The Sophos kit is 1u yes but its very light and half depth and looks great (yes I'm that vain).
I was using the G2 interface on smoothwall but there didn't seem to be a clear schedule of when G3 would be available when I was looking(some time ago).
The shipping country wasn't a huge problem but I thought I would mention it as the Sophos box came from the UK.
The hardware thing is understandable but when buying a brand new server that could last 5 years then I want the latest core i5000 whatever
Neither companies offered a Virtualized Hyper-V solution which was very frustrating. I understand there are good technical reasons for this though.
Also annoying there is no SSD option
Too right I would be interested in feedback. We are constantly improving based on it - it just takes a while sometimes Not a massive fan of "2 clicks" type rules, I'd rather have 4 obvious clicks than 2 arcane ones (see: Vi vs Emacs!). We've a way to go... but getting there. Wonder if you saw G2 or G3 interface. The fact you point to our wrong website, and a short review sounds like you spent minimum time on the box. Price wise - we try to be competitive, thats all we can hope for.
We ship from Germany or California depending on where you are - these are both out of house fulfilment partners (as probably most companies do for appliances). Germany is a good base for shipments as we can cover most of europe, north africa, some of asia very quickly. They're also a really good bunch and do a great job on RMA etc. for us.
Also... I don't think our hardware is old... the UTM1000 is based on a fairly new core2quad - we'll probably move to a sandybridge platform next year, but to keep costs sane, you have to stick to a platform for a while. If you're owndering why not xeon - heat & power. We find the c2q performs very well for its power draw. And please tell me how to get that CPU, 6 NICs and 2 Western Dig RE4s into a smaller chassis?
Interesting your comments on Smoothwall, the 1U rack mount appliance isn't that huge, infact its the same size as a Sophos WS1100 which is also a 1U rack appliance.
I don't find my UTM using much electricity at all either, attractiveness is a personal thing but it certainly isn't ugly with its Blue LCD display and simple design its clean and effective in my view.
What is wrong with the German shipment, replacement kit arrives on-time and on-schedule and it works what more do you need?
I am sure that @tom_newton would be very pleased to hear from your and take your feedback on the product, what you don't like about it and the UTM appliance as I am a big fan of the UTM and the product they produce and its been a great asset to us and our entire LA now they are moving onto it, and its a UK designed and supported product, and I know that using it is keeping a good number of people in the UK in jobs
Just to update this the 98% cpu and high memory usage were due to the sharepoint timer service. I think it was indexing the search of the site every 15mins causing the slow downs.
Turning it off has fixed this and doesn't seem to have effected sharepoint features at all but I will keep an eye on it.
6 months later and we just moved all the admin staff over to SSD drives.
The 40gb value drives cost £62.99 and are perfect for client PC's.
Virtually all the staff have commented on how quick their machines are these days and seem very happy.
I have a few of the newer 200mb/s drives in testing but there is no difference in day to day usage in terms of speed so will be sticking with the tried and tested Intel-v drives for now.
We've got 55 of them deployed now and not had a failure yet, another bonus.
I'm guessing your not in London. The RBC there (London Grid For Learning) seems to be the only one in that region with their act together. Good prices and services.
If you do go alone. Make sure you are capable of managing both your network and connection. I've seen plenty of schools connections ruined by network admins not quite knowing enough to do the job properly.
Yeh they do offer more but in our situation is probably even more reason to move as we don't use many of their "extra" services
- The VLE they supplied(netmedia) was awful and useless, no one ever used it as far as I know
- The web filtering is poor and slow (I'd rather go for the best solution around, especially as I can't virtualize cachepilot right now)
- The line monitoring is indeed good but we've had a fair few outages due to DNS servers going down, or router problems. In essence all it really means is the provider talk to the LA first instead of me being able to do it.
- Email virus scanning seems inconsistent and I would rather have more control over the process, with office 365 that should be out of my hands anyway, but in a good way
- I have no interest in the LA intranet anymore, it just made things harder to find from my experience
Bear in mind LA services will be more then just supplying you with capacity. The grid I am connected to offers the following:
- Web Filtering
- Redundancy for reliability (both seperate line and seperate power supplies, both of which have been used recently!)
- Connection to the LA IT Support Intranet which in turn has a lot of resources from upgrade notifications to e-Safety
- 24/7 monitoring for connection failure
- Attendance to the LA server farm within an hour on-call if something does go wrong
- Access to VLE, Filtered and virus scanned Webmail, MIS Integration and other services
If you change providers, can you supply the same things that your LA is supplying? Especially the on-call and redundancy sections.
Interesting, let me know how you get no also looking at moving away from the LEA/Grid
Ohh, them's some bad apples.
Thanks for blogging, will save me making the same mistake, though i think we are planning on installing it as the non-standalone option, part of a future cluster or whatever it's called.
Definately my mistake, the MACList.txt can either be a Allow list, in which only the machines specified on the list are allowed a IP address, or a block list, which blocks all machines specified on the list. First time I tried this, I had both, which didn't work at all well!