Sophos XG/UTM Home Edition

Hello again! Some days ago I talked to a Sophos employee and he founds out that I am the Network Guy and he said that I need to update my recommended hardware for the home edition deployment of the Sophos XG and Sophos UTM Home Edition. Also some of my followers wanted it also, so I took some hours of research to find a good hardware for UTM and also XG use. The UTM supports some Realtek network cards and also a USB NIC compatibility. The XG only supports Intel network cards and won’t start until there are two recognized network interfaces. Since there is only a feature request for XG USB NIC support, we need to add an additional network card in our setup. I think a passive cooled system is a good way to deploy a home firewall system. Since our home internet connection speed reaches 100Mbit per second and beyond, we will need a performant hardware device to route traffic.

I compared many vendors and thought that we give a chance to the ASRock mini ITX mainboard series. The ASRock website makes it easy to compare different mainboard modells. I found the J4105-ITX and the J5005-ITX, both have the same hardware, the only difference is the built-in processor. The ASRock J5005-ITX has the Intel Quad-Core Pentium Silver Processor J5005 (up to 2.8 GHz) processor and the ASRock J4105-ITX has the Intel Quad-Core Processor J4105 (up to 2.5 GHz). So what does this mean? The SG and XG hardware are using of course also Intel CPUs. You can see it in the Sophos SG/XG Series Appliances Technical Specifications datasheet:

 

So based on this information I compared it with the SG/XG 230 hardware (using Intel Pentium G4400). I found the website UserBenchmark.com to compare CPU benchmarks. The battle between the Intel Pentium G4400 and the J4105-ITX shows, that the CPU are very similiar (only a difference of 7%):

Benchmark with Intel Pentium G4400 and Intel Celeron J4105

 

The J5005-ITX mainboard with the Intel Pentium Silver J5005 is only 7% faster but it costs about 45€ more than the J4105-ITX mainboard. So I would recommend the ASRock J4105-ITX mainboard. The original Sophos SG/XG 230 hardware (8GB memory) costs about 1800€ and can easily secure a 100 user company with a firewall throughput of 7Gbit/sec. With all activated security features (Intrusion Prevention, Advanced Threat Protection, Web Protection, Application Control, etc.) you can nearly reach 1GBit/sec. So I think this is a pretty good home hardware 😉

 

Hardware recommendation

Self-built system

This recommendations are not tested! Maybe I will order this hardware for proofing or someone of you can proof it.

Article Name Ø Price 
Mainboard ASRock J4105-ITX 99€
Memory Crucial CT2K4G4SFS824A DDR4 8GB (2x 4GB Kit) 38€
Hard drive Crucial BX500 CT120BX500SSD1(Z) 120GB 19€
Case SilverStone SST-ML06B 62€
Power supply SilverStone SST-ST30SF v 1.0 – SFX Serie, 300W 50€
PCI express extension cable glotrends PCI-E Verlängerungskabel 0,6 m UEX101 10€
Total: 278€

complete system

I found a similar complete system: Kettop Mi5250L (Intel I5-5200U, 8GB Memory, 128GB SSD, 4 NICs) for 353€ including shipping from Hongkong. The device has four Intel I211-AT network interfaces. I didn’t tested this device, so I give no guaranty that it works with Sophos UTM and/or XG. There is also a cheaper device with four Intel NICs.

 

Article Link Ø Price includig shipping
System with SG/XG 230 performance Kettop Mi5250L (Intel I5-5200U, 8GB Memory, 128GB SSD, 4 NICs 353€
System with SG/XG 135 performance Mi19W-S2 (Intel Celeron J1900, 4GB Memory, 64GB SSD, 4 NICs 259€

 

Registration, Software Download and Installation

Sophos UTM Sophos XG
Account registration Account registration
ISO file download ISO file download
Install Sophos UTM from USB Stick Install Sophos XG from USB Stick

 

Feel free to comment the recommendation or ask for further installation help. If you want to support me, buy stuff over my Amazon links or click on an advertisement. Thank you very much!

5 thoughts on “Sophos XG/UTM Home Edition”

  1. Hi Michel
    i like the “Kettop”, seams to bee a good hardware (performance/price). Does the XG Home support 4 LAN-Ports (1 WAN + 3 LAN) or do i need a smart switch to segment LAN?

    • Hi Martin,

      yes you can use all four ports to segment LAN.

      I think you will need more ports for your devices 😉 so you can use a vlan-tag-supported switch. I always recommend the Netgear GS108E-300PES https://amzn.to/33tdPwZ with 5, 8, 16 or 24 ports. The device has a web management interface.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.