I really wanted to like XG. I liked the new interface and finally started to figure out the logic of building policies. My biggest issue was that the performance was terrible using the same rules I had on UTM 9. I'm not sure if it is due to the 4-core limitation. That probably isn't a big deal on an Intel i3/5/7/Xeon but when you're running it on a server grade Atom processor it would be nice to be able to spread the load out over all 8 cores. System load was a constant 2 with no traffic running. If I started a download running then my ping to Google shot up to 1,200ms and I couldn't browse the internet. When I ran the top command my CPU usage was usually 2%-15% and I couldn't figure out where the load value of 2 was coming from. Maybe it's a bug that will be fixed in the future? My second biggest gripe with XG was that I was never able to get SMTPS filtering running for my mail server. It could be that I just don't understand the differences between when you need to use certificates and certificate authorities. I was able to get my certificate into the certificate section so I could use the WAF with my web server, but I was unable to get it working for email. In UTM 9 I just uploaded my cert in the cert section and then I could use it for the WAF and SMTPS. I'm not sure why in XG it wants me to select a cert I've uploaded to the CA section for SMTPS and select a cert I've uploaded to the cert section for WAF?
↧