Conversion Guide
Sophos XG Firewall Appliance to Sophos UTM
Document Date: March 2016
Conversion Guide: Sophos XG Firewall Appliance to Sophos UTM
Contents
Preface ....................................................................................................................................... 3
Installing Sophos UTM 9.3x on a Sophos XG Firewall Appliance ............................................... 3
Preparing a UTM Installer USB stick ...................................................................................... 3
Installing the UTM software on an XG Appliance .................................................................. 4
XG Appliance License Conversion to a UTM Appliance License ............................................ 5
March 2016
Page 2 of 5
Conversion Guide: Sophos XG Firewall Appliance to Sophos UTM
Preface
Welcome to the Conversion Guide for installing Sophos UTM 9.3x on a Sophos XG Firewall
Appliance.
Installing Sophos UTM 9.3x on a Sophos XG Firewall Appliance
Follow the below given steps:
1. Obtain a UTM ISO image.
2. Burn the image to a CD-ROM/DVD or prepare a USB storage device with a UTM
Installer.
3. If you are using an external USB CD-ROM/DVD drive, connect it to the XG Appliance
and boot the XG Appliance from the CD. If you are using a USB stick for installation,
please follow the steps given in section - Preparing a UTM Installer USB stick.
Preparing a UTM Installer USB stick
1. Obtain the UTM hardware appliance ISO image from https://www.sophos.com/enus/support/utm-downloads.aspx. After agreeing to the Sophos EULA and filling the
US Export control form, you can now download the UTM ISO image you selected.
Save the file locally.
2. Obtain a USB stick preparation utility. We recommend using the latest version of
Rufus, a user friendly open-source Windows utility available here. Make sure your
USB stick has at least 1GB of storage and that it does not contain any important data
before using it.
3. Start Rufus and select the local location of the UTM ISO file you downloaded.
March 2016
Page 3 of 5
Conversion Guide: Sophos XG Firewall Appliance to Sophos UTM
4. Run the tool and when complete continue to boot and install.
Installing the UTM software on an XG Appliance
1. The XG Appliance should boot automatically from USB. If you have a special USB
stick that emulates a CD-ROM drive, the Installation will continue without problems.
If not, after you boot from the USB stick and press Enter to start the installation, the
UTM software installer will generate an error message:
“install.tar wasn’t found on the installation media.”
This means that the XG Appliance was not able to mount the USB device as a CDROM or could not recognize it as an installation media. In this case, you will have to
manually mount the USB stick as an install media.
Mount USB stick manually:
a. Restart the XG Appliance and press Alt+F2 during the installation process.
b. You will be able to access Bash.
March 2016
Page 4 of 5
Conversion Guide: Sophos XG Firewall Appliance to Sophos UTM
c. Execute the command given below at the Bash prompt to mount the USB
device as a source for the installation files:
mount /dev/sdb1 /install
d. Leave Bash by pressing Alt+F1. The installation should now continue
normally.
NOTE: while in Bash, the installation is going on in the background and the
hard drive will be formatted first; you have a minute or two to type the
command before the installation process prompts for the missing
installation files.
XG Appliance License Conversion to a UTM Appliance License
After the installation has finished and the device has restarted, your account will be in
evaluation mode and the Appliance is fully functional and ready for immediate configuration
and deployment.
You must contact Sophos Customer Care for the equivalent UTM license, which you will be
able to apply to the UTM. This process is described in this link (under Sophos UTM) and in
the Sophos MyUTM User Guide.
Receiving the converted license can take up to 48 hours, but that should not be a problem
as you are in evaluation mode and the device will be fully functional until then.
March 2016
Page 5 of 5