Sophos Firewall OS v21 MR1 brings a number of scalability, resiliency, and stability enhancements to your Sophos Firewall.
What’s new
- SSL VPN – Now helps key sizes of 3072 or 4096 bits for the Diffie-Hellman key trade to reinforce safe communication and compliance necessities. Enhanced UDP-based SSLVPN tunnel resiliency has additionally been added utilizing a granular useless peer detection timeout configuration.
- IPsec VPN – Improved stability for offloaded policy-based VPN IPsec visitors that eliminates sluggish searching points.
- NAT64 – The firewall allows IPv6-only shoppers to entry IPv4 web sites by way of an express proxy. Also added assist for an IPv4 upstream proxy for IPv6-only shoppers.
- DHCP – Implemented added resiliency to the DHCP service which now auto-restores if it will get into an error state.
- Cellular WAN – The firewall now presents enhanced mobile WAN monitoring by robotically setting “8.8.8.8” because the second probe goal. This addresses the problem of ISPs blocking gateway pings, decreasing the necessity for guide configuration.
- SD-RED assist – SD-RED units now assist distant troubleshooting and diagnostics by Sophos Support.
How to get the firmware and documentation
Sophos Firewall OS v21 MR1 is a free improve for all licensed Sophos Firewall clients – together with XGS Series, cloud, digital, and software program firewalls.
Note: XG Series units are quickly to be end-of-life and should be upgraded to XGS Series units instantly and should not supported by v21 or v21 MR1.
This firmware launch will comply with our normal replace course of. You can manually obtain SFOS v21 MR1 from Sophos Central and replace any time. Otherwise, it will likely be rolled out to all related units over the approaching weeks. A notification will seem in your native machine or Sophos Central administration console when the replace is accessible, permitting you to schedule the replace at your comfort.
You ought to replace your Sophos Firewall firmware at your earliest alternative.
Sophos Firewall OS v21 MR1 is a completely supported improve from all earlier variations of v21, v20, v19.5 and v19.0. Please check with the Upgrade Information tab within the launch notes for extra particulars.
Full product documentation is accessible on-line and throughout the product.