Comment on Sophos XG Firewall Home Use

SirMaple__@lemmy.ca ⁨9⁩ ⁨months⁩ ago

• redfox@infosec.pub ⁨9⁩ ⁨months⁩ ago

  I like OPN also. I’ve always appreciated the stability of the BSDs.

  My only personal complaint with OPN/PF was the TLS inspection.

  I’ve read about adding the modules to *Sense, but I haven’t figured out the configuration pieces.

  It just works with Sophos UTM and XG firewall, and the configuration was super easy.

  You always use what you like though.

  source

  • MangoPenguin@lemmy.blahaj.zone ⁨9⁩ ⁨months⁩ ago

    What do you use TLS inspection for?

    source

    • redfox@infosec.pub ⁨8⁩ ⁨months⁩ ago

      Knowledge primarily, since I’m not running a business.

      At this point, like they say in Chips, TLS inspection is standard…

      Image

      If your enterprise isn’t doing TLS inspection on everything other than banks, medical, gov, they’re doing it wrong.

      Some times people think the hard part is getting the CA trust setup, but I find it’s far more tedious to deal with certain sites and mobile apps especially that do certificate pinning.

      source