{"id":22328,"date":"2016-01-07T12:00:00","date_gmt":"2016-01-07T11:00:00","guid":{"rendered":"https:\/\/www.avanet.com\/blog\/the-new-xg-firewall-what-you-need-to-know\/"},"modified":"2023-12-05T09:07:53","modified_gmt":"2023-12-05T08:07:53","slug":"the-new-xg-firewall-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/www.avanet.com\/en\/blog\/the-new-xg-firewall-what-you-need-to-know\/","title":{"rendered":"The new XG Firewall &#8211; What you need to know"},"content":{"rendered":"\n<p>It wasn&#8217;t that long ago that Sophos introduced the new <strong>SG Firewall<\/strong> in April 2014.\nThe new hardware replaced the <strong>UTM series<\/strong> at that time and brought significantly better performance.\nIn November 2015, Sophos again presented us with something new in the form of the new <strong>XG Firewall<\/strong>.\nWhat has changed now?   <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-hardware-aussen-gleich-innen-auch\">Hardware &#8211; outside the same, inside too&#8230;<\/h2>\n\n<p>For those of you who have just recently purchased a new <strong>Sophos SG<\/strong>, I can first reassure you. The hardware of the &#8220;new&#8221; <a href=\"https:\/\/www.avanet.com\/en\/shop\/sophos-firewall\/\" data-type=\"link\" data-id=\"https:\/\/www.avanet.com\/shop\/sophos-firewall\/\">\n  <strong>Sophos Firewall<\/strong>\n<\/a> is identical compared to the SG Firewall. An SG 125 therefore corresponds 1:1 to an XG 125. Only the labeling is different. The only, but crucial difference, is the pre-installed operating system.<\/p>\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"344\" data-id=\"12959\" src=\"https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-1024x344.jpg\" alt=\"Sophos XG Firewall Sizing Chart\" class=\"wp-image-12959\" srcset=\"https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-1024x344.jpg 1024w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-64x22.jpg 64w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-300x101.jpg 300w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-600x202.jpg 600w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-768x258.jpg 768w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-1536x516.jpg 1536w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart-18x6.jpg 18w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-sizing-chart.jpg 1600w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/figure>\n\n<p><em><strong>Update<\/strong>: Since revision 3, there are now also optical differences between the SG and the XG.\nCheck out this blogpost: <a href=\"https:\/\/www.avanet.com\/en\/blog\/sophos-firewall-rev-3-sg-xg-85-135-completely-revised\/\">Sophos Firewall<\/a> Rev. 3: SG\/XG 85-135 completely redesigned <\/em><\/p>\n\n<p>For <a href=\"https:\/\/www.avanet.com\/en\/kb\/sophos-for-home-users-firewall-and-endpoint\/\">homes<\/a> or small businesses that need to cover fewer than 5 users, the XG series now includes the Sophos XG 85. For those of you who thought the SG 650 was too puny, the Sophos XG 750 is also available. Please in the cluster.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"sophos-firewall-os\">Sophos Firewall OS<\/h2>\n\n<p>A completely new operating system has been developed for the XG Firewall.\nThe Sophos SG continues to ship with Sophos UTM 9.x, while the Sophos XG comes with the newSophos Firewall OS&#8221;.\nSince the SG and XG are exactly the same, the newSophos Firewall OS&#8221; can also be installed on an SG appliance.\nFor the Sophos SG series and UTM, the <a href=\"https:\/\/www.avanet.com\/en\/kb\/sophos-firewall-hardware-or-virtual-appliance\/\">old blogpost<\/a> still applies.   <\/p>\n\n<figure class=\"wp-block-embed is-type-video is-provider-vimeo wp-block-embed-vimeo wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Sophos Firewall - How it Works\" src=\"https:\/\/player.vimeo.com\/video\/144094496?h=f061424ea8&amp;dnt=1&amp;app_id=122963\" width=\"1290\" height=\"726\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n<p><del>The new Sophos Firewall OS unfortunately does not yet bring all the features that are available in UTM 9.x.<\/del><\/p>\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong>Update<\/strong>: 09\/29\/2017 &#8211; Since SFOS v17.0, there is almost feature parity between UTM and SFOS.<\/p>\n<\/blockquote>\n\n<h2 class=\"wp-block-heading\" id=\"virtuelle-appliance\">Virtual appliance<\/h2>\n\n<p>Unlike the UTM, the newSophos Firewall OS&#8221; is no longer licensed per IP in the network, but as it should be, by performance.\nThe software licenses for the newSophos Firewall OS&#8221; can be purchased in our Sophos Shop. <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"lizenzen\">Licenses<\/h2>\n\n<p>A new licensing model has also been designed for the new <strong>Sophos Firewall<\/strong> OS.\nHere, in my opinion, some things have been improved.\nIf you don&#8217;t want to read, you can watch the video here.   \ud83d\ude42<\/p>\n\n<figure class=\"wp-block-embed is-type-video is-provider-vimeo wp-block-embed-vimeo wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"XG Firewall Licensing Overview\" src=\"https:\/\/player.vimeo.com\/video\/144504175?h=276b97adb7&amp;dnt=1&amp;app_id=122963\" width=\"1024\" height=\"768\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n<h3 class=\"wp-block-heading\" id=\"base-licence\">Base Licence<\/h3>\n\n<p>The free <strong>Essential Firewall of<\/strong> the UTM is no longer available on the XG Firewall.\nIt is now called <strong>Enhanced Base Fire<\/strong> wall or simply <strong>XG Base Fire<\/strong>wall.\nHere are a few facts about the new &#8220;Base License&#8221;:  <\/p>\n\n<ul class=\"wp-block-list\">\n<li>If you buy an XG appliance, the base license is already included in the price.\nWith the virtual or software appliance, this must be purchased in addition. <\/li>\n\n\n\n<li>No renewal is necessary for the &#8220;Base License&#8221;.\nThe license is always valid and does not require renewal. <\/li>\n\n\n\n<li>The &#8220;Wireless Protection&#8221; is now included, without restrictions and all functions.<\/li>\n\n\n\n<li>IPsec and SSL VPN are also included.<\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\" id=\"enterprise-guard\">Enterprise Guard<\/h3>\n\n<p>The two modulesNetwork Protection&#8221; andWeb Protection&#8221; are usually purchased in addition to a UTM.\nThat is why XG Firewall now offers the <strong>EnterpriseGuard<\/strong> license bundle, which combines Network and Web Protection.\nTogether with the hardware, it would then be the <strong>EnterpriseProtect bundle<\/strong>.   \ud83d\ude42<\/p>\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"690\" src=\"https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-1024x690.png\" alt=\"Sophos XG Firewall Licensing Guide\" class=\"wp-image-12960\" srcset=\"https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-1024x690.png 1024w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-64x43.png 64w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-300x202.png 300w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-600x404.png 600w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-768x518.png 768w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview-18x12.png 18w, https:\/\/www.avanet.com\/assets\/news-post-content-sophos-xg-firewall-licensing-overview.png 1254w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n<h3 class=\"wp-block-heading\" id=\"performance\">Performance<\/h3>\n\n<p>If you take a look at our comparison table of the XG and SG in our store, it seems that the new XG hardware has completely different performance data.\nMore IPS throughput, but less VPN, how come? <\/p>\n\n<p>As mentioned, the hardware of the SG and XG is really the same.\nBut due to the new and optimizedSophos Firewall OS&#8221;, more IPS throughput can be achieved than before, for example.\nThe testing procedure has also been changed.\nWith the &#8220;SG series&#8221;, the data was measured at a CPU load of 100% in each case.\nThis looks good on paper, but in active operation, it is no longer possible to work with 100% CPU utilization, or only very slowly.    <\/p>\n\n<p>All values of the XG hardware were measured with a CPU load of 50%.\nTherefore, the data of the XG hardware is certainly more realistic for active operation. <\/p>\n\n<p><strong>Read more here:<\/strong> <a href=\"https:\/\/www.avanet.com\/assets\/sophos-xg-series-sizing-guide-de.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Sophos XG Series &#8211; Sizing Guide<\/a><\/p>\n\n<h3 class=\"wp-block-heading\" id=\"sophos-xg-firewall-policy-management\">Sophos XG Firewall Policy Management<\/h3>\n\n<p>Finally, I would like to briefly mention the newSophos XG Firewall Policy Manager&#8221;.\nThere&#8217;s not much to say here, except that it will take some getting used to for die-hard UTM lovers.\nYou can get the most important information in the following video.  <\/p>\n\n<figure class=\"wp-block-embed is-type-video is-provider-vimeo wp-block-embed-vimeo wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Sophos XG Firewall Policy Management\" src=\"https:\/\/player.vimeo.com\/video\/144445571?h=abf94a2f6a&amp;dnt=1&amp;app_id=122963\" width=\"1290\" height=\"726\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>It wasn&#8217;t that long ago that Sophos introduced the new SG Firewall in April 2014. The new hardware replaced the UTM series at that time and brought significantly better performance. In November 2015, Sophos again presented us with something new in the form of the new XG Firewall. What has changed now? Hardware &#8211; outside [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":21223,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[277],"tags":[],"class_list":["post-22328","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/posts\/22328","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/comments?post=22328"}],"version-history":[{"count":0,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/posts\/22328\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/media\/21223"}],"wp:attachment":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/media?parent=22328"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/categories?post=22328"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/tags?post=22328"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}