Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on infosec.pub
selfhosted·SelfhostedbyRedFox

Sophos XG Firewall Home Use

Public Service Announcement:

Have you checked out Sophos XG Firewall for home use lately?

It's basically an enterprise firewall fully licensed for personal use.

  • All the firewall stuff
  • Normal IPS
  • Built-In easy transparent SSL/TLS proxy
  • Web Application Firewall

I like it better than PF/Open Sense right now.

https://youtu.be/Ui8UC8-MeJU

Sophos XG Firewall Home Usehttps://www.sophos.com/en-us/free-tools/sophos-xg-firewall-home-editionOpen linkView original on infosec.pub
-36
Comments7

7 replies

SirMaple__
lemmy.ca

Nope. I'll stick with OPNsense which is open source.

25
RedFoxreply
infosec.pub

I like OPN also. I've always appreciated the stability of the BSDs.

My only personal complaint with OPN/PF was the TLS inspection.

I've read about adding the modules to *Sense, but I haven't figured out the configuration pieces.

It just works with Sophos UTM and XG firewall, and the configuration was super easy.

You always use what you like though.

-1
RedFoxreply
infosec.pub

Knowledge primarily, since I'm not running a business.

At this point, like they say in Chips, TLS inspection is standard...

If your enterprise isn't doing TLS inspection on everything other than banks, medical, gov, they're doing it wrong.

Some times people think the hard part is getting the CA trust setup, but I find it's far more tedious to deal with certain sites and mobile apps especially that do certificate pinning.

1
Dran
lemmy.world

Thank you for letting me know what software not to use; good bot

8
StarkZarn
infosec.pub

They place arbitrary limits on home users as well, which is a secondary reason to not use it compared to open source offerings. For instance:

  • you are limited to 1Gbps line speed
  • you are limited to one week of analytics, with no export option, so you can't even ship them elsewhere
  • there are also resource limits that prevent ram and CPU utilization
7
RedFoxreply
infosec.pub

This is true, the 6 GB RAM limit and four cores.

I run a pretty enterprise home lab, and I haven't ever seen the devices hit the resource limit.

I have around 3k IPS rules and TLS inspection for most categories of sites except the normal stuff like streaming, banking, etc that you'd not want or need to inspect.

For anyone it might help, I use these as inline proxies rather than as the gateway at the moment. So they have more than just internet traffic going through them, they also have segments of my LANs getting evaluated. Performance has been great so far.

0

You reached the end