Sophos UTM

[chrisalltraine]

Anyone using this?

 

I am currently looking into alternatives with TMG 2010 being retired and having looked at the options available I would much like to jump to Sophos UTM.

 

Can anyone offer some feedback on it

 

Software or Hardware based?

Usability?

Cost?

Yearly costs?

Support?

Updates?

OS Support? 2012R2?

[Gatt]

Yeah I'm using it at home and I'd recommend it!

 

Software or Hardware based? BOTH

Usability? ? via an web interface, comes iwth a "User Portal" for users to manage Spam Settings and connect to VPN (aka UAG) published apps.

Cost? Not sure - using the home licence which is free

Yearly costs? Not sure - using the home licence which is free

Support? Sophos support - varies depending on licence

Updates? regular and can be set to automatically apply

OS Support? 2012R2? Supports all OS's as far as I know.

 

Full range of what TMG/UAG does and all via a web console!. It offers full AD integration for users and is highly configurable

I have it running as a VM with 1 vCPU and 1GB RAM (YMMV) can also deploy/mamage AV using the Sophos Endpoint client

 

Def worth considering

[pantscat]

Interesting... does it really do everything TMG will do?

 

I'll have to have a closer look at this...

[chrisalltraine]

Thanks for the Info Gatt, It does seem the perfect replacement for TMG

[Gatt]

As far as I can tell,

 

 

1. Network Protection - Firewall Rules, NATting, etc
   
2. Web Protection - URL/Domain filtering (including application control (eg Facebook, YouTube, Ebay, etc)
   
3. Mail Protection - SMTP/POP3 scanning / Quarantine
   
4. Endpoint Protection - Sophos Endpoint Proection Client (eg Antivirus)
   
5. Wireless Protection - not used so not sure how this works
   
6. Webserver Protection - basically this is how you publish your internal webservers externally
   
7. Remote Access - This is allows users access to VPNs, and internal sites or RDP - bit confusing at first as they label it as "HTML5 VPN Portal" - but does similar thing to UAG
   

 

First time I used it, it was a bit confusing to navigate round, but very quickly got to grips and its been worth it

 

Generates some good reports too..

[pantscat]

Cheers @Gatt... very helpful!

[boolyn]

Something you will never regret, highly recommended

[woody]

We currently use TMG with Websense. If Sophos was to be a complete replacement for this setup, it would need to have good web filtering that matches the functionality of the main players (Websense, Smoothwall, Bloxx etc)

 

Does it do:

 

HTTPS inspection?

Anonymous proxy detection?

Quotas?

Force safe search?

Location specific filtering?

 

If it did all of this (or most of it) then it would definitely be worth a look depending on cost of course.

[Gatt]

We currently use TMG with Websense. If Sophos was to be a complete replacement for this setup, it would need to have good web filtering that matches the functionality of the main players (Websense, Smoothwall, Bloxx etc)

 

Does it do:

 

HTTPS inspection?

Anonymous proxy detection?

Quotas?

Force safe search?

Location specific filtering?

 

If it did all of this (or most of it) then it would definitely be worth a look depending on cost of course.

 

The only thing in that list that I'm, not sure about is Quota's?

 

It certainly does the rest!

[clodhopper]

Have a look at SonicWall as well, had a demo and it look really good and almost half the cost of Sophos over 3 years !!!!

[chrisalltraine]

I have a meeting on Monday scheduled with Sophos to discuss requirements.. I will feedback costs here.

 

I may have to arrange a call back from dell to discuss. I do like what their SRA platform provides which could be a solution to combat BYOD and Remote assistance especially with the LGFL2 blocks...

 

NSA and SRA would be needed for that full solution which could be a bit more costly, I am definitely going to look in to it

[detjo]

You can add/enable the modules you need. So if you wanted it to do everything except web filtering (coz you already have smoothwall etc), you can do that.