• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
sophos xgs 3300 review: xstream firewall performance

Sophos XGS 3300 review: Xstream firewall performance

You are here: Home / General Cyber Security News / Sophos XGS 3300 review: Xstream firewall performance
January 7, 2022

The XGS loved ones of security appliances stand for a radical change in course for Sophos as they consider in excess of from the more mature XG styles and deliver a new dual processor architecture. Designed around Xstream stream processors, they offer a components acceleration layer which Sophos reckons can realise a bare minimum two-fold performance raise in excess of equal XG designs by eliminating substantially of the workload from the major CPU.

This is no idle declare: the XGS 3300 we have on review offers a significant firewall IMIX (internet mix) throughput of 24.5Gbits/sec, dropping to 13.4Gbits/sec with IPS enabled. By distinction, the XG 330 it replaces could only muster equivalent throughputs of 12.5Gbits/sec and 8.5Gbits/sec respectively.

Intel will get the elbow far too, as the Xeon E3 v5 CPUs in the XG array have been replaced by AMD’s Ryzen Embedded V1000 series, sporting a 3.35GHz quad-core V1780B SoC (Process on Chip). This is partnered by 16GB of DDR4 memory whilst firmware, log and report storage is managed by an inside 240GB SATA SSD.

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


Sophos XGS 3300 overview: Licensing and deployment

Aimed at dispersed edge deployments in significant SMBs and mid-sized organisations, this 1U rack appliance offers eight copper and two SFP fibre Gigabit, plus twin SFP+ fibre 10GbE ports. It delivers one particular Flexi growth slot which accepts two-, 4- and 8-port Gigabit and 10GbE modules, but be mindful that it doesn’t aid those people from the older XG array.

Licensing has modified fairly a little bit as well and you can customize attributes by deciding on which defense modules you want. The Xstream bundle allows foundation firewall attributes together with Xstream Network Move FastPath together with TLS 1.3 and deep packet inspection, and provides the network, web and zero-day safety modules, central orchestration and enhanced 24/7 assistance. This does not consist of the email and web server safety modules nevertheless, which are offered as optional extras.

A committed administration port is furnished and we discovered original deployment via the browser-primarily based quick-start wizard swift. Following insisting we secured administrative accessibility, it assisted established up LAN and WAN port deal with assignments additionally DHCP services and supply an email handle for alerting.

We selected routed manner, as we desired the appliance to deliver all security features which includes firewalling. Safety commences right away, with a base established of firewall security procedures developed for you which permit web filtering and anti-malware.

Sophos XGS 3300 evaluate: Management companies

The nearby web console opens with a very informative Manage Middle dashboard presenting a detailed overview of network exercise, security issues, web targeted traffic, detected network attacks additionally blocked and allowed apps and web types. The User and gadget Insights section is notably practical as it gives active icons for functions these as zero-day protection. Clicking on these exhibits downloaded information that have been despatched to the Sophos cloud sandbox for detonation and evaluation to see no matter whether they are protected to launch.

If you have a Sophos Central account, you can take care of the firewall remotely as properly. It is dead easy, as well following registering the XGS 3300 with our cloud account, we ended up in a position to watch stay reviews from the portal and configure it using particularly the exact console as the neighborhood 1.

Sophos Central has another trick up its sleeve, and its endpoint brokers can be brought under the firewall’s regulate with the Synchronized Security attribute. This takes advantage of a heartbeat services to watch endpoints operating the Intercept X agent and if any are compromised, a firewall plan with a bare minimum heartbeat location isolates all units in the exact same zone. 

The SAC (synchronized software management) element also functions with this provider, as it detects not known applications and pushes out firewall procedures to manage them. Cloud apps get the same hard really like: the dashboard insights part lists all those people detected and you can classify each and every a single as sanctioned or unsanctioned and use a website traffic shaping coverage to control their use.

A screenshot of the Sophos XGS 3300 Control Centre

Sophos XGS 3300 critique: Security and reporting

The XGS 3300 is remarkably flexible, and you can place its ports in various zones and utilize customized security policies to every one particular. Policies include firewall rules for sources and locations, support filters, blocking steps and time schedules and you can apply customized policies for web filtering, IPS and software controls.

The new filtering alternative would make it quick to find a distinct rule in the checklist and firewall rule traffic counters for selected policies can now be reset again to zero from the web console with no acquiring to reboot the appliance. You never want to alter rule priorities in policies with drag and fall possibly, as they can be reordered instantly from the coverage fall down menu.

There are lots a lot more security functions to engage in with web filtering features 86 URL classes to block or make it possible for though software controls at the moment present 3,532 predefined applications. If you want Fb gone from the place of work, you’ll be happy to know Sophos gives 73 application categories covering each individual achievable social exercise. 

Reporting is a normal function on all XGS types with the web console offering a wealth of facts on all points security linked. The experiences alternative in the web console’s side menu loads a range of dashboards and graphs exhibiting detected threats, malware and web material filtering functions, provides studies for vital compliance benchmarks, and all their written content can be exported in PDF, HTML and CSV formats.

Sophos XGS 3300 assessment: Verdict

The XGS 3300 is effortless to deploy, though the sheer variety of security attributes might existing new end users with a steep finding out curve for ongoing configuration. Sophos does offer copious on-line documentation and films but it is a ton to wade via and it however refers to the XG firewalls.

General however, the XGS 3300 is obviously a really impressive and properly-endowed firewall appliance. The network ports and zones make it very versatile, the hottest SFOS 18.5 software program adds a lot of features made to ease administration, and integration with Sophos Central will allow it to prolong its defense umbrella to remote staff.

Sophos XGS 3300 specs

Chassis

1U rack

CPU

3.35GHz quad-core AMD Ryzen Embedded V1780B

Memory

16GB DDR4

Storage

240GB SATA SSD

Network

8 x Gigabit copper, 2 x Gigabit SFP, 2 x 10GbE SFP+

Expansion

1 x Flexi module slot

Other ports

2 x USB 3, 1 x USB 2, RJ45 MGMT, COM, micro-USB

Electrical power

Interior PSU, optional exterior redundant PSU

Management

Web browser, Sophos Central

Warranty

Provided in subscription


Some components of this posting are sourced from:
www.itpro.co.uk

Previous Post: «it pro news in review: microsoft y2k22 bug, rip blackberry IT Pro News In Review: Microsoft Y2K22 bug, RIP BlackBerry smartphones, Apple hits $3 trillion
Next Post: Thousands of Schools Impacted After IT Provider Hit by Ransomware Cyber Security News»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • Enzo Biochem Hit by Ransomware, 2.5 Million Patients’ Data Compromised
  • US and Korean Agencies Issue Warning on North Korean Cyber-Attacks
  • Malicious PyPI Packages Use Compiled Python Code to Bypass Detection
  • New Botnet Malware ‘Horabot’ Targets Spanish-Speaking Users in Latin America
  • The Importance of Managing Your Data Security Posture
  • Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering
  • Insurers Predict $33bn Bill for Catastrophic “Cyber Event”
  • Chinese Phishing Gang “PostalFurious” Expands Campaign
  • Kaspersky Says it is Being Targeted By Zero-Click Exploits
  • North Korea’s Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

Copyright © TheCyberSecurity.News, All Rights Reserved.