Comment on Sophos XG Firewall Home Use
starkzarn@infosec.pub 3 weeks ago
They place arbitrary limits on home users as well, which is a secondary reason to not use it compared to open source offerings. For instance:
- you are limited to 1Gbps line speed
- you are limited to one week of analytics, with no export option, so you can’t even ship them elsewhere
- there are also resource limits that prevent ram and CPU utilization
redfox@infosec.pub 3 weeks ago
This is true, the 6 GB RAM limit and four cores.
I run a pretty enterprise home lab, and I haven’t ever seen the devices hit the resource limit.
I have around 3k IPS rules and TLS inspection for most categories of sites except the normal stuff like streaming, banking, etc that you’d not want or need to inspect.
For anyone it might help, I use these as inline proxies rather than as the gateway at the moment. So they have more than just internet traffic going through them, they also have segments of my LANs getting evaluated. Performance has been great so far.