Which Sophos UTM?

[mwnci]

In the process of choosing a Sophos UTM device for a smallish primary school (250 pupils).

 

One supplier has told us that a 135 XG unit will be perfectly adequate. Sophos themselves have suggested larger 210 (and more expensive) unit.

 

The online product comparison is useful, but I would be interested to hear from anyone out there with experience of these devices to see how well they perform.

[nathan]

In the process of choosing a Sophos UTM device for a smallish primary school (250 pupils).

 

One supplier has told us that a 135 XG unit will be perfectly adequate. Sophos themselves have suggested larger 210 (and more expensive) unit.

 

The online product comparison is useful, but I would be interested to hear from anyone out there with experience of these devices to see how well they perform.

 

Sorry this doesn't answer your questions, but just out of interest what sort of price is the 135 XG model coming out at?

[localzuk]

What will you be using it for? What bandwidth is the internet connection? Will you be enabling IDS, will it be running any internal routing etc...?

 

We're running an SG330 for out 270 pupil first school. They have a 40/10 FTTC line, and the device is used for internal routing as well as external, with IDS enabled and a couple of VPNs set up. They have a couple of hundred iPads though.

Edited July 12, 2017 by localzuk

[mwnci]

Planning to use this with an 80/20 EoFTTC connection. A max of 30-40 users at peak times. Not internal routing as such, but we will be using the RED functionality for some cross site traffic with a a bit of AD and Auth traffic. Using one of the stock policies for Intrusion Prevention.

 

One of our suppliers say they have secondaries running on 210 units, and that this is well within their capacity. We will not be running the email or web server protection options at all, as all of this is hosted off site. We've been looking at less than a £1000 for the 135...

 

It seems Sophos have a reputation for overspecking.

[Asgard]

Sorry to thread jack but anyone got an idea what I could do with two redundant UTM625?

 

We have just replaced them with two SG550 so now have two boxes that whilst are being phased out by Sophos are still perfectly fine.

[Wave9_Lee]

In my experience it's resellers who have a habit of underspeccing, generally to meet a budget number. It's in Sophos' interests for you to choose the right size appliance to ensure that you have a good experience. If your device/user count increases, or you start to use additional features, you might find that the appliance will start to slow down. Better to bite the bullet upfront and plan for growth in my mind - 3 years is a long time to be stuck with an underpowered solution.

 

cheers

[Blue_Cookeh]

We were using an SG115 in our primary school, with about 100 devices with two FTTC connections of 20/10. It was doing internal routing, firewalling, VPN, filtering (before we moved to SchoolsBroadband), WAF etc. The CPU never went above 50% and RAM hovered around 75%.

 

Sorry to thread jack but anyone got an idea what I could do with two redundant UTM625?

 

We have just replaced them with two SG550 so now have two boxes that whilst are being phased out by Sophos are still perfectly fine.

 

Most of them are just standard Intel computers. Plug a KVM in and you can install any OS on them you want. Our SG115 license is expiring this summer and I've just stuck pfSense on ours.