Support-Portal
· Maintenance Release

SFOS 17.5 MR3

Achtung!

Zu dieser Version gibt es Warnhinweise, welche dringend zu beachten sind!

Zu den Hinweisen

Beschreibung

Sophos hat gestern die neue Version für die Sophos – XG released, die 17.5 MR3. Vorerst wird die neue Firmware nur über das MySophos – Portal zum Download zur Verfügung stehen.

 

Neue Features:

Airgap Support

Jene Sophos – XG’s, welche nicht mit dem Internet verbunden sind, können ab sofort lizensiert werden und man kann händig die Pattern / Firmware – Updates via USB – Stick bereitstellen.

Manuelle Pattern – Updates

Pattern – Updates, Updates für Software Clients und Firmwareupdates für Sophos AP’s und RED’s können über den Webadmin eingespielt werden.

APX Series Wireless Protection Support

Mit dem neuen Update können nun auch endlich die neuen Sophos APX mittels Sophos XG verwaltet werden.

  • APX 320
  • APX 530
  • APX 740

Erweiterter Backup / Restore Support

Dies betrifft explizit die Sophos – XG Serie. Backups, welche von einer XG Firewall laufend auf einer SG Hardware erstellt wurden, können ab sofort problemlos auf einen XG – Hardware Unterbau eingespielt werden. Zusätzlich können Cyberroam CROS Backups ohne Konvertierung in die Sophos – XG eingespielt werden.

Verbesserte Kompatibilität bei Migration von Firewall – Regeln von Cyberroam

Firewall – Regeln werden basierend auf Zone und Ziel während der Migration automatisch Gruppen zugewiesen.

DHCP Server auf Bridge Interfaces

Empfänger Verifikation (AD)

Der Administrator kann nun E-Mail – Adressen (Empfänger) gegen das Active Directory verifizieren und E-Mails an nichtexistierende User ablehnen.

Bemerkungen

Download

Das Update können Sie unter MySophos herunterladen und über den Webadmin installieren.

Betroffene Produktgruppen

Bugfixes

  • NC-29354: [API] Response for xmlapi get for SyslogServer is missing some value
  • NC-29808: [API] API Authentication should be case insensitive
  • NC-35920: [API] Wrong XML is generated for client-less users when username added with capital letter
  • NC-30616: [Authentication] Guest username/id and passwords are changed after migration
  • NC-33449: [Authentication] Group name showing under “undefined” during AD group import
  • NC-35923: [Authentication] XML export of guest users contains wrong information of user validity
  • NC-38607: [Authentication] Provide a JSON config download for GSuite in the XG UI
  • NC-39026: [Authentication] Chromebook Support port is missing in port validation opcode
  • NC-39106: [Authentication] Access_server is restarted due to missing service heartbeat
  • NC-30365: [Base System] Fix error message for new firmware check on auxiliary device
  • NC-37824: [Base System] SFM/CFM - at device dashboard AV version shows as 0
  • NC-38546: [Base System] Fix log message for scheduled backup and update message
  • NC-39177: [Base System] Garner - sigsegv_dump: Segmentation Fault
  • NC-39179: [Base System] Customization of captive portal not working
  • NC-39688: [Base System] Virtual firewall reboots after applying license
  • NC-40157: [Base System] Garner service stopped with sigsegv_dump: Segmentation Fault
  • NC-40268: [Base System] Not able to access HA device via Central Management
  • NC-38469: [Email] Increase csc monitor time for avd service
  • NC-38521: [Email] Add support for recipient verification via AD using STARTTLS
  • NC-39827: [Email] Improve documentation for mail spool and SMTP policies
  • NC-35434: [Firewall] csc worker gets killed causing errors in port forwarding
  • NC-35521: [Firewall] Import of exported config does not recreate the device access permissions correctly
  • NC-38318: [Firewall] XML change and revert details are not generated for "firewall group" entity when create firewall rule from SFM device Level
  • NC-39316: [Firewall] Group edit fail when user edit existing group and new name have double space
  • NC-39605: [Firewall] Modifying one time schedules fails, if timer has already triggered
  • NC-40080: [Firewall] Improve UI and help for group creation based on EAP feedback
  • NC-29296: [IPsec] Charon doesn't reconnect in all cases
  • NC-29365: [IPsec] IPSec tunnel fails when there are whitespaces at the begin or end of the PSK
  • NC-30599: [IPsec] Checkboxes on IPSec UI pages do not work using Safari
  • NC-38824: [IPsec] Spelling error in message when IPSec cannot be established
  • NC-38946: [IPsec] Child SA going down randomly with Checkpoint IPSec connection
  • NC-38603: [nSXLd] Custom URL web category list stopped working after updating to v17.1MR2
  • NC-38958: [Reporting] Smart search filter is not working properly for "is not" filter in log viewer
  • NC-39530: [Reporting] Logo is too close to the name of the report page
  • NC-39770: [Reporting] 'Context' column getting removed after click on Reset to default for web content policy logs
  • NC-39479: [Sandstorm] Dashboard message not correct for Single Scan Avira with Sandstorm
  • NC-35750: [SecurityHeartbeat] Heartbeat widget not displayed on slave node when registered
  • NC-38778: [SNMP] Unable to fetch the value for particular OID in SNMP server
  • NC-35490: [Synchronized App Control] Application are not classified in Synchronized Application Control list
  • NC-32342: [UI Framework] Restrict number of connection from particular IP at a particular time
  • NC-39078: [UI Framework] Update Apache Commons Collections (CVE-2015-7501, CVE-2015-6420, CVE-2017-15708)
  • NC-39081: [UI Framework] Update Apache Commons FileUpload (CVE-2016-3092, CVE-2016-1000031)
  • NC-39910: [UI Framework] Policy Tester is not working via Central Management
  • NC-38295: [WAF] WAF Rules not working after HA takeover
  • NC-31388: [Web] URL Category Lookup doesn't allow punycode-encoded domain names
  • NC-31485: [Web] Skipping sandbox check is not being exported in the XML for WebFilterException
  • NC-35585: [Web] Only 10 cloud applications are listed if the screen resolution is 2560*1440 or higher
  • NC-36320: [Web] AppPolicy becomes DenyAll if all "characteristics" and any classification selected