Sophos XG105 teardown

OVERKILL

$100 Site Donor 2021
Joined
Apr 28, 2008
Messages
58,094
Location
Ontario, Canada
Was cleaning out around my reload workstation and found this stuffed down the side of the UPS.

This was a pull from an SMB client of mine a few years back now. The unit never really performed all that well and it requires a subscription. The (Sophos) access point that was purchased with it was hot garbage and ended up being replaced with an Aruba unit (which is still doing the job, firewall is now Cisco). The WebUI was dreadfully slow and it was ultimately just very disappointing.

What caught my eye was the HDMI port:
BE7AA4F6-7435-4B97-B1BC-FF410BEAB7CC_1_105_c.jpeg

A830FA49-FD77-4375-AF1F-82A5E05BEC87_1_105_c.jpeg


Pulled the cover, nothing exotic in there, has 2GB of RAM and an SSD:
3CA41DF5-4EE5-4587-8B39-E84EC09A8403_1_105_c.jpeg


Hooked up the HDMI. OK, so we've got an Intel Atom CPU and a 64GB SSD:
5D8324B0-F3A1-4400-8727-9B2A5AAC4258_1_105_c.jpeg


Checked out the BIOS, pretty much what you'd expect if you were looking at a PC and not a firewall, lol:
FDF99F4E-9D36-4DA0-8BC7-59256E7E5BE8_1_105_c.jpeg


Figured I'd see if it would take OPNsense:
80E5BB84-AA9F-4EA0-A0D7-51427FB718B4_1_105_c.jpeg


And, no problem:
BA8F84FB-80B3-4C78-BF43-D083F6BA03ED_1_105_c.jpeg


Detected all the interfaces, boots WAY faster than the Sophos Linux distro, WebUI is nice and responsive.

One little hang-up I did have was the fact it was NOT happy with double-NAT, likely due to my LAN setup with the PiHole proxying all DNS. It absolutely refused to work with DHCP, but assigned static, with a static route and the PiHole assigned as DNS, pinging the DNS server from the CLI brought it to life. Died on a reboot after doing updates, pinged the DNS server, away it went again. Some odd behaviour for sure.

If anybody wants this thing, let me know, you pay shipping and it's yours, lol.
 
I will put it to use, it can replace the Dell I'm currently using. I will private message you my address if it is still available.
I like OPNsense.
 
Did you have to do anything special to get it to boot?

I occasionally see these listed on eBay with Pfsense installed.
Nope, just hook up a monitor and keyboard, hit F7 to get the boot menu, selected the USB of OPNsense I made and away we went. Super easy.
 
Back
Top