Firewall News

Top Menu

  • Home
  • Our Blog
  • Contact Us

Main Menu

  • Software Updates
  • Alerts & Bugs
  • Out of the Box
  • Home
  • Our Blog
  • Contact Us

Firewall News

Firewall News

  • Software Updates
    • WatchGuard logo

      TDR 6.0.0 is now integrated into WatchGuard Cloud

      04/01/2021
      0
    • Sophos Logo

      XG Firewall 17.5 MR14 Released

      30/07/2020
      0
    • Sophos Logo

      Sophos Firewall Manager SFM 17.1 MR4 Released

      27/07/2020
      0
    • Sophos Logo

      Sophos Enterprise console - Endpoint Security and Control v10.8.9 for Windows has ...

      16/07/2020
      0
    • Sophos Logo

      Sophos iView v3 MR-2 Released

      07/07/2020
      0
    • Sophos Logo

      SD-RED Firmware 3.0.002 Pattern Update

      06/07/2020
      0
    • Sophos Logo

      XG Firewall 17.5 MR13 Released

      06/07/2020
      0
    • Sophos Logo

      End-of-Life (EoL) announcement for old firmware v17 and v17.1 for XG Firewall

      03/07/2020
      0
    • WatchGuard logo

      Fireware 12.5.4 Now Available

      01/07/2020
      0
  • Alerts & Bugs
    • Sophos Logo

      Advisory: Sophos Central Maintenance scheduled for Saturday, April 2nd, 2022

      29/03/2022
      0
    • Sophos Logo

      Sophos: Important Product Lifecycle Updates

      03/03/2022
      0
    • WatchGuard logo

      WatchGuard Support Alert

      23/02/2022
      0
    • Sophos Logo

      Sophos: Important Product Lifecycle Reminder

      03/02/2022
      0
    • Sophos Logo

      Sophos: Product Lifecycle Information: Extended Support for Windows 7 and Windows Server ...

      31/01/2022
      0
    • Sophos Logo

      End-of-Life (EoL) announcement for Sophos SSL VPN Client

      29/11/2021
      0
    • WatchGuard logo

      WatchGuard: macOS Monterey 12.0.1 Does Not Support the AuthPoint Logon App

      09/11/2021
      0
    • Sophos Logo

      Sophos UTM Manager (SUM) End of Distribution

      04/11/2021
      0
    • WatchGuard logo

      WatchGuard: End of Sale Notice: AP420

      01/11/2021
      0
  • Out of the Box
    • WatchGuard’s Firebox T80 Earns 5-Star Rating in SC Labs Review

      17/11/2020
      0
    • WatchGuard Wins Big in CRN 2020 Tech Innovator Awards

      16/11/2020
      0
    • Coronavirus scams: what to look for and how to stop them

      02/04/2020
      0
    • Dell SonicWALL TZ 300

      Out the Box - Dell SonicWALL TZ 300

      05/07/2016
      0
    • Dell SonicWALL TZ SOHO

      Out the Box - Dell SonicWALL TZ SOHO

      05/07/2016
      0
    • WatchGuard Firebox T50

      WatchGuard Firebox T50

      31/03/2016
      0
    • WatchGuard Firebox M200

      WatchGuard Firebox M200

      31/03/2016
      0
FirmwareSoftware Updates
Home›Software Updates›Firmware›Sophos XG Firewall v18 EAP 2 Firmware Has Been Released!

Sophos XG Firewall v18 EAP 2 Firmware Has Been Released!

By admin
20/11/2019
2568
0
Share:
Sophos Logo

The XG Firewall v18 Early Access Program (EAP) 2 firmware release is now available for download. To get the latest release, go to the XG Firewall v18 EAP page.

Note: if you’ve already registered for the v18 EAP and upgraded your XG Firewall firmware, there’s no need to re-register to gain access to the v18 EAP 2 release. You will see a notice in the firewall UI to upgrade through the Up2Date service.

We’ve updated the “Known Issues, Advice for Users, and Incomplete Features” document with new information.

Please remember, this is still an early build of the v18 release so there are some things we’d like to bring to your attention before you download the firmware and begin testing it.

  • Upgrade to EAP 2 may take more than usual time depending on the number of TLS session cache files on the disk
    • The cleanup of TLS session cache files could take between 3 and 20 minutes on top of the normal upgrade process, but this could take longer if there are more of these cached files on the disk. It is therefore recommended (example – time critical deployment) to cleanup the cache files manually during off hours. The instruction for manual clean up can be found in “Advice for users” under known issues list.
  • If you are upgrading HA cluster, both devices in the cluster will reboot simultaneously once, as we are moving to SSH tunnel based secure communication between devices in the cluster. Admin will also get appropriate alert on UI before he can proceed.
  • We’ve attempted to make the build as bug-free as possible, however as is the nature of early access firmware we cannot guarantee it will be.
  • The firmware is continually being tuned for performance. Expect to see faster speeds in future builds.
  • As part of the EAP we’ll continue to add additional features into future builds. You can find the features in those later builds in the “What’s New in v18” document.

Important Issues Resolved in SF v18 EAP 2

  • NC-50214 [DHCP] DHCP server dead with specific configuration
  • NC-48712 [Email] Antivirus service in stopped state, cannot recover it
  • NC-51717 [DDNS, Email] DDNS uses wrong IP when interface is configured with PPPoE + Alias
  • NC-37775 [Firewall] Configuring over 20 time schedulers on the various firewall rules is causing CSC freeze
  • NC-50712 [Firewall] NAT Rules UI error
  • NC-47482 [Firmware Management] Firmware mismatch issue – both firmware slots showing same firmware
  • NC-52441 [Firmware Management] Some time firmware ‘install’ opcode getting timeout and installation failed
  • NC-51568 [IPS-DAQ] Coredump in snort
  • NC-52085 [IPS-DAQ] Wget not working for IPv6 sites in bridge mode – SSL decrypt not working
  • NC-49919 [IPsec] Dgd service stopped and unable to start
  • NC-48106 [Logging Framework] XG85 – /tmp partition fills up
  • NC-51956 [Web] Slow browsing with DPI Mode – System with 4gb RAM
  • NC-52710 Gateway status was showing down after upgrading to EAP1 Refresh
  • NC-52642 “Last 24 hours Memory” Usage Report Bubble show wrong figure
  • NC-52684 /tmp full : Appliance storing backup frequently at /tmp/backup
  • Plus 200+ issues and stability fixes are part of EAP 2

New Features and Highlights in SF v18 EAP 2

  • User based uplink selection in the SDWAN policy routes
  • Sandstorm threat intelligence detailed report is now available
  • VLAN members in bridge
  • Improved Firewall and NAT rule management
    • Advanced filter now has exclusion, proxy, HTTP scanning options
    • Firewall exclusion config is now seen on the manage page
    • Move firewall rule to <nth> position (across the pages)
    • Retain filter on firewall page (session wise)
    • Add / Detach multiple rule to a Group
    • Policy test tool error correction
    • Linked NAT
      • Added Hide linked rule option on NAT manage page
      • Linked NAT rules can be filtered from NAT type filter
      • Auto-populated linked NAT details
      • Added Override SNAT config icon with the tool tip on NAT rule manage page
      • Added Health Check interval (on UI) on NAT Policy page
  • A part of HA enhancement (other improvements have been planned in EAP 3)
    • Added cluster ID to eliminate VMAC conflict limitation
    • Now supports option to use host/ hypervisor MAC to eliminate vSwitch Promiscuous mode limitation
    • Now supports pre-emption/ Failback
    • Eliminated downtime in case of upgrade using “Firmware Upgrade now and boot later” option
    • HA synchronization now happens over SSH tunnel based secure communication
  • CLI option to enable-disable policy route trigger on reply traffic and system generated traffic
  • Port agnostic protocol identification for HTTP and SMTP in Snort

Getting Started

Once you’re ready to go, we’ve got some great resources to help you get started:

  • Recommended Reads – Check out these important forum posts
  • “What’s New in v18” – See the complete feature list with descriptions
  • v18 Interactive training course – Enroll in this interactive training course to learn more about v18
    • Home page for Sophos Customer Training
  • v18 Admin Guide – Read the latest admin guide for v18
  • v18 Evaluation Guide Slides – Learn about the features we’d like you to test
  • v18 Public Release Notes – Read the latest notes about the v18 build
  • v18 Known Issues and Limitations – Get updated information on any known issues, advice for users and incomplete features in v18

Things to Know Before Upgrading

Before upgrading to v18 EAP 2 from an earlier version, there are a few things to note:

  • Upgrade to EAP 2 may take more than usual time depending on the number of TLS session cache files on the disk
    • The cleanup of TLS session cache files could take between 3 and 20 minutes on top of the normal upgrade process, but this could take longer if there are more of these cached files on the disk. It is therefore recommended (example – time critical deployment) to cleanup the cache files manually during off hours. The instruction for manual clean up can be found in “Advice for users” under known issues list.
  • If you are upgrading HA cluster, both devices in the cluster will reboot simultaneously once, as we are moving to SSH tunnel based secure communication between devices in the cluster. Admin will also get appropriate alert on UI before he can proceed.
  • You can upgrade to v18 EAP 2 from v17.5 MR6 or later MR versions of v17.5 including latest MR9; as well as from any earlier v18 EAP.
  • Rollback (firmware switch) is supported as usual. You can roll back to v17.5 MRx if you experience any issues during the v18 EAP. As an example, the active firmware on the firewall is v18, and the second firmware version is v17.5. Administrators can switch between these two and the configuration on each will stay as it is.
  • Backup and restore are supported as usual. SG Firewalls running SFOS, Cyberoam firewalls and XG Firewall backups can be restored on v18.
  • Due to a minimum memory requirement of 4GB of RAM, XG 85 and XG 105 models cannot upgrade to v18 and must remain on a 17.x version.
  • v18 firmware is not supported on Cyberoam models. However, Cyberoam firewall backups can be restored on an XG Firewall running v18.
  • Downgrading from v18 to older firmware – using v17.5 or earlier firmware file – is NOT supported. The Web console will the give appropriate message. v18 uses Grub boot loader. The changed bootloader cannot recognize v17 firmware. Administrators can still use the hardware ISO of v17.5 or an earlier version to get the firewall on an older firmware version and restore the downgraded firmware’s backup.

Recommended upgrade process when you test multiple v18 early access releases:

  • This is applicable if you have upgraded to v18 from v17.5. When you further upgrade from v18-EAP(x) to v18-EAP(x+1), you can first switch to v17.5 and upgrade from v17.5 directly to v18-EAP(x+1). From there, you can then restore the backup of v18-EAP(x). This way you will always have v17.5 firmware in your second firmware slot, and leave an option open to roll back to v17.5 if needed.

Support

  • Please do not call the general Sophos Support Hotline for EAP issues.
  • Troubleshooting support for EAP versions is handled solely through the online Sophos Community EAP Forums.

Share Your Feedback

Communicating your experiences with the v18 EAP firmware is crucial to its success, so we want to hear from you! Please share your feedback via the Sophos Community or through your XG Firewall’s feedback mechanism in the user interface.

  • How to report a bug? Check out this post that outlines the info needed.

Thank you for taking the time to test the v18 EAP release. We’re excited about all the new features this release will bring to Sophos XG users and we appreciate your help making it happen!

Sincerely,

Your Sophos XG Firewall Product Team

Previous Article

SonicWall – WiFi Cloud Manager 2.0 beta

Next Article

Sophos XG Firewall: Access server is coredumping ...

0
Shares
  • 0
  • +
  • 0
  • 0
  • 0
  • 0

Related articles More from author

  • Fortinet logo
    FortinetSoftware Updates

    Fortinet announces FortiOS 5.6

    03/04/2017
    By admin
  • WatchGuard

    WatchGuard Firebox M500 – The Cure for HTTPS Performance Headaches

    05/03/2015
    By admin
  • WatchGuard logo
    Software UpdatesWatchGuard

    WatchGuard Support Alert

    14/05/2019
    By admin
  • Meraki MS225-48
    MerakiSoftware Updates

    Cisco Meraki – MS225 48LP/FP – Proactive Switch Replacement and Required Software Upgrade

    09/10/2017
    By admin
  • Sophos Logo
    Software UpdatesSophos

    Sophos: UTM Up2Date 9.702 Released

    02/03/2020
    By admin
  • Sophos Logo
    FirmwareSoftware UpdatesSophos

    SafeGuard Enterprise 8.30: Release Notes

    28/11/2019
    By admin

  • Sophos #1 Endpoint
    NewsSophos

    Everyone Else Has Claims. We Have Proof.

  • SonicWall Logo
    Alerts & BugsSonicWALL

    SonicWALL Product News

  • WatchGuard logo
    Software UpdatesWatchGuard

    WatchGuard releases Fireware v11.10

Timeline

  • 29/03/2022

    Advisory: Sophos Central Maintenance scheduled for Saturday, April 2nd, 2022

  • 03/03/2022

    Sophos: Important Product Lifecycle Updates

  • 01/03/2022

    Shoring up your cybersecurity posture in light of ongoing crisis

  • 23/02/2022

    WatchGuard Support Alert

  • 03/02/2022

    Sophos: Important Product Lifecycle Reminder

Sponsored Links

Latest Comments

  • Paul Sillars
    on
    21/06/2016
    I received this in an email this morning, it was the first I heard about it ...

    Dell Software Group sold to help fund looming EMC deal

  • Paul Sillars
    on
    20/06/2016
    This is going to be an interesting one to watch. Especially after today's announcement that ...

    Ingram Micro gets distribution access to Dell’s security range in Australia

Find us on Facebook

Firewall.News Logo

This site serves more as a reference point for some of the major security vendor's updates and product/press releases

It will never be a definitive list, but it helps our customers keep up to date and also allows us to express our comment and observations as well.

About us

  • PO Box 451, North Lakes, Queensland, 4509, Australia
  • [email protected]
  • Recent

  • Popular

  • Comments

  • Sophos Logo

    Advisory: Sophos Central Maintenance scheduled for Saturday, April 2nd, 2022

    By admin
    29/03/2022
  • Sophos Logo

    Sophos: Important Product Lifecycle Updates

    By admin
    03/03/2022
  • Shoring up your cybersecurity posture in light of ongoing crisis

    By admin
    01/03/2022
  • WatchGuard logo

    WatchGuard Support Alert

    By admin
    23/02/2022
  • Dell SonicWALL Supermassive

    Ingram Micro gets distribution access to Dell’s security range in Australia

    By admin
    14/06/2016
  • Francisco Partners and Elliott Management to Acquire the Dell Software Group

    Dell Software Group sold to help fund looming EMC deal

    By admin
    21/06/2016
  • WatchGuard Firebox M500 – The Cure for HTTPS Performance Headaches

    By admin
    05/03/2015
  • Sophos Logo

    Advisory: Sophos Central Maintenance scheduled for Saturday, April 2nd, 2022

    By admin
    29/03/2022
  • Paul Sillars
    on
    21/06/2016

    Dell Software Group sold to help fund looming EMC deal

    I received this in ...
  • Paul Sillars
    on
    20/06/2016

    Ingram Micro gets distribution access to Dell’s security range in Australia

    This is going to ...

Follow Me

  • Contact
  • About Us
  • Home