Community All Blogs

In our Staff Spotlights, we get up close and personal with our amazing Sophos team members.Up next is Barbara Spampinato, Program Manager for Sophos Home Support.   Let's Talk Career 1. Can you tell us about your role at Sophos?I am the Soph...

Hello Sophos Community,  Sophos Central Firewall Management October's second update is now live.  Resolved Issues Issue ID Description NR-16548 Resolved an issue where SD-WAN transactions were stuck in "pending" status ...

We're excited to announce that the Threat Lineage feature will be generally available for all new and existing Sophos XDR customers from November 1, 2025. Threat lineage graphs show the processes that led up to and triggered a detection, helping to s...

A step-by-step tutorial for setting up the Sophos NDR integration on Nutanix AHV. We show you how to add the NDR integration, download and deploy the VM, configure a SPAN port, configure an ERSPAN port, and use the Sophos Appliance Manager to manage ...

Relevant for: MDR & XDR customers who have configured Microsoft 365 Response Actions Some customers using Microsoft Response Actions have begun to receive notifications that their credentials will be suspended or purged in the coming months ...

Hi everyone, A big thank you to all our community participants for the fantastic start to the v22 Early Access Program — your testing and feedback are already making a real impact! We're excited to announce a new, improved SFOS v22 EAP build&nb...

Application Control Updates Pre-release Notice The following have been identified as applications that would benefit from some level of control and will be added to the existing list.  Note: For customers who have enabled the foll...

Central Switch Stacking Connection Resiliency The product team is pleased to announce the release of Central Switch Stacking Connection Resiliency. The added Switch Stacking feature provides further details for the port connections between switches t...

In this two-part series, learn how to configure the new Sophos DMARC Manager.  Part 1 walks you through how to add/verify your domain and configure your SPF, DKIM, BIMI, and TLS-RPT settings.Watch Part 1 here: https://techvids.sophos.com/wa...

Sophos Live Discover provides capabilities for analysts to query data on endpoints and in the Sophos Data Lake through ad-hoc or scheduled queries. Retired Event Types To minimize resource usage on Sophos endpoints, we are retiring the sysl...

Application Control Updates Release Notice This is a notification for the latest Application Control 6.20 data update, which has been rolled out on the 8th of October 2025 but was scheduled to be rolled out on 23rd of September and was del...

Sophos Firewall v21.5 MR1 brings a number of enhancements; as well as reliability, stability and security fixes to your Sophos Firewall. Sophos Firewall v21.5 MR1 brings the following enhancements: Supports OAuth 2.0 as an additional authentication ...

Hello Sophos Community,  Sophos Central Firewal Management October update is now live.  New features and enhancements In the Advanced Threat Response logs in Sophos Firewall, NDR log entries now include a threat score, which indicates the ...

Hello Everyone, Please note that the Sophos Support Portal (support.sophos.com) will undergo scheduled maintenance on Saturday, October 11, 2025, from 04:00 to 10:00 UTC. During this maintenance, Sophos Chat Support will be unavailable...

Dear Sophos Community,  We’re so happy to announce our Top Community Contributors for Q3 2025!  Here are the users who have contributed significantly to the Sophos Community during the third quarter of 2025: Table of Contents T...

Dear Sophos Community,   September came with several updates across the Sophos Community. In case you missed them, we’re giving a quick list of all the important announcements, releases, and other updates from the past month.&nbs...

We’re introducing a new Data Collection and Investigation policy in Sophos Central. This policy includes settings for enabling Data Lake Uploads and Live Response, crucial tools for threat investigation and response. Data Collection and Investi...

Hi Sophos Community, I'm pleased to announce that Sophos Connect 2.5 is now available for all users. This is a PLATFORM release, and adds support for 64Bit Windows ARM platforms, but does not add any new features. Features Sophos Connect Client...

In this video, we show you an overview of setting up Postman collection environments to simplify API request management with Sophos Firewall.Watch the full video here: https://techvids.sophos.com/watch/FoXQ3Fdu9b31MTfrwpCL5T ...

Hello Everyone, Please note that the Sophos Central Admin Dashboard (central.sophos.com), Sophos ZTNA & Sophos Optix will undergo scheduled maintenance starting on Thursday, October 2, 2025, from 14:00 to 20:00 UTC. The date and ti...

This step-by-step tutorial shows you how to integrate Microsoft 365 with Sophos Central.This is a free integration available to Sophos MDR and Sophos XDR customers. Configuring this allows alerts to be sent directly to Sophos for faster identificatio...

The product team is pleased to announce the release of the September update for Central Switch management, which is now available in Sophos Central. The release offers the ability to configure the time settings from Central. The time settings can be ...

In our Staff Spotlights, we get up close and personal with our amazing Sophos team members.Up next is Shankar, Manager for Technical Support Training.  Let's Talk Career   1. Can you tell us about your role at Sophos?As a Technical Support ...

This step-by-step tutorial shows you how to integrate Google Workspace with Sophos Central.This is a free integration available to Sophos MDR and Sophos XDR customers. Configuring this allows alerts to be sent directly to Sophos for faster identifica...

We've just released UTM version 9.7 MR23 (9.723). This release addresses an issue discovered during the phased release of 9.7 MR22. The issue was a side-effect of a vulnerability fix in Apache, used by Webserver Protection (WAF). It can caus...

On September 15th, 2025, Apple will be launching macOS 26 Tahoe. The current version of Sophos Central Endpoint for macOS, 2025.1, fully supports this OS version.  Sophos Central 2025.1 (released February 2025) and Sophos Home 10.10.4 (released...

Overview On August 28th our Customer Success and Product Marketing teams hosted a session focused on sharing Sophos' most impactful updates. Webinar resources Recording Presentation slides attached at the bottom of the post Product resources&n...

With this release we have updated your existing custom alerting rules. MDR and XDR Integration health alerts are generated when the custom alerting rules include this new alert category. For your convenience, we have updated all the current custom a...

Dear Sophos Community,  Another month has come to an end! Before we dive into the –ber months, we’re giving a quick rundown of all the latest news, updates, and releases that happened last August.   Let’s start w...

In the video below I demonstrate using the Sophos AI Assistant for threat hunting. community.sophos.com/.../NDR-AI-Hi_2D00_Res.mp4 Sophos AI Assistant: A Security Analyst's New Best Friend In the world of cybersecurity, the sheer volume of data c...

What is the Sophos AI Assistant? The Sophos AI Assistant is an integrated feature in Sophos Central that uses large language models (LLMs) and natural language understanding to enable all users — from IT generalists to experienced SOC analysts...

Relevant for: MDR & XDR customers who have configured Microsoft 365 Response Actions Some customers using Microsoft Response Actions have begun to receive notification that their credentials will be suspended or purged in the coming months due to...

Q&A overview  In August we held an AMA where a team of Technical Sophos team members answered audience questions about Sophos Firewall.   Below you can find answers to most of the questions asked and resources related to Sophos Firewall...

IMPORTANT : The release has been postponed by two weeks to allow for additional quality checks. Application Control Updates Pre-release Notice The following have been identified as applications that would benefit from some level of con...

We’re excited to announce that the Sophos AI Assistant is now generally available in Sophos Central! Previously in EAP and only available within Cases, the AI Assistant has now moved to its own top-level navigation, making it easier than ever t...

Thank you for your interest in this webinar!   This webinar focused on Penetration Testing and the new offerings of the Advisory Services team. You can find additional resources, answers to questions, and a copy of the slide deck below.&nbs...

For Sophos AP6 Series access point customers, the product team is happy to announce the availability of Usage Insights in Sophos Central. To take advantage of Usage Insights, ensure that all the AP6 access points are running MR7. For more details on ...

Hello Sophos community, The retirement deadline is coming up on Microsoft's announced retirement of  Basic SKU public IP addresses. This post is a friendly reminder to upgrade your Azure SFOS instances to use Standard SKU IPs before the deadline...

We have just released the Sophos Firewall v21.5 full courses for: Engineer Architect Technician Administrator In this release, in addition to integrating the updates from the delta, we have replaced the previous Wireless Protection conten...

In this step-by-step tutorial, we show you how to deploy Sophos Firewall in your Microsoft Azure environment. You’ll learn how to set up the Sophos Firewall virtual machine, register the device and join it to Sophos Central for easy management,...

We just launched Sophos Firewall v21.5 in May 2025 with many top requested features and an industry first innovation that integrates Sophos NDR into the Sophos firewall. Most organizations have already upgraded, but for those that haven’t,...

Application Control Updates Release Notice This is a notification for the latest Application Control 6.19 data update, which has been rolled out on the 12th of August 2025. If you want to control an application that is not in the list...

Thank you for your interest in this webinar!   This webinar focused on Penetration Testing and the new offerings of the Advisory Services team. You can find additional resources, answers to questions, and a copy of the slide deck below.   ...

We've just released UTM version 9.7 MR22 (9.722). As this is a regular maintenance update it will be released in three phases: In phase 1 you can download the update package from our download server. Click the link and navigate to the fold...

We have just released a few improvements to increase visibility of the PSA Integration health status. The PSA Integrations Health widget in custom dashboards have been enhanced to support read-only users  ConnectWise PSA and Autotask ...

In our Staff Spotlights, we get up close and personal with our amazing Sophos team members. Up next is Altmash Rangrez, Technical Support Engineer-L2.  Let's Talk Career 1. Can you tell us about your role at Sophos?I am an L2 Endpoint S...

Dear Sophos Community Members,  We hope the second half of the year is going well so far! Before we dive into a brand-new month, here’s a quick roundup of everything that happened in July.   Check out the key updates, releas...

With the July Update to Sophos NDR a new set of Data Detection Engine (DDE) detections have been added to improve the volume and quality of detection signals seen in central to facilitate security operations and POC evaluations. Prior to the July upd...

Hello Everyone, Please note that the Sophos Community will undergo scheduled upgrade on Saturday, August 2, starting at 00:00 UTC. During this time, the Sophos Community may be inaccessible. The upgrade is expected to ta...

Hi Sophos community, Our second feature update this month brings performance improvements to the SD-WAN orchestration UI for large environments and resolves a number of field-reported issues.  New features and enhancements F...

In this video, we show you how to set up the new Sophos Email Monitoring System (EMS). We show the configuration process for Microsoft 365 and Google Workspace, along with different third-party solutions.Watch the full video here: https://techvids.so...

What’s new – Jul 22, 2025 Over last couple of years, Sophos Email has been sharpening its protection against interception of emails in transit by cybercriminals. The Transport Layer Security (TLS) is the best protection against ...

Overview The product team is pleased to announce the launch of Maintenance Release MR-7 (Version 1.7.2563) for the AP6 Series access points. This update features RADIUS VLAN Assignment and additional bug fixes to enhance your experience. We look forw...

Overview The product team is pleased to announce the following updates for Sophos switches The first is Spanning Tree Protocol (STP) management from Sophos Central. The next is Maintenance Release (MR) 02.1.1837 for all Sophos switch hardware. STP Se...

Application Control Updates Pre-release Notice The following have been identified as applications that would benefit from some level of control and will be added to the existing list.  Note: These applications will be automaticall...

We are excited to announce that we have now fully GA'd all remaining 3rd party integration health email alerting functionality for our MDR & XDR customers!  Sophos Central will now generate a Medium Severity alert when an integration ha...

Today's release of the latest ConnectWise Automate Plugin version 1.6.0.0 includes the below enhancements: Landing page - the Dashboard page has improved performance and has been reinstated as the landing page for better usability. Alerts page h...

Webinar resources Recording  Presentation slides attached at the bottom of the post Product resources  Firewall   Firewall v21.5 overview  Sophos Firewall v21.5 NDR Essentials  Managed Services   Soph...

Enhancing your XDR search experience with AI We are excited to announce a significant enhancement to the Threat Analysis Center that improves your search experience. The AI Search feature — introduced recently as part of our Early Access Progra...

We’re so happy to announce our Top Community Contributors for Q2 2025!  Here are the users who have contributed significantly to the Sophos Community during the second quarter of 2025: Table of Contents Top Sophos Partners Top Sophos Use...

Dear Sophos Community Members,    June has wrapped up, and we’re officially halfway through 2025.  But before we move on to the next half of the year, here’s a complete list of all the important updates, release notes,...

Hello Sophos community, This feature update brings a performance improvements to partner dashboard Firewall Templates, and adds a new Central Account Health Check for firewall backups in Central customer dashboard, along with a number of maintenance...

What’s new – Jul 2, 2025 We are excited to announce the launch of the all-in-one Sophos DMARC Manager, our newest add-on offering developed in strategic partnership with the leading provider Sendmarc. This new feature bring...

Application Control Updates Release Notice This is a notification for the latest Application Control 6.18 data update, which has been rolled out on the 1st of July 2025. If you want to control an application that is not in the list we...

In our Staff Spotlights, we get up close and personal with our amazing Sophos team members.Up next is Nida Rashid, Voice of the Customer Program Manager. Let's Talk Career 1. Can you tell us about your role at Sophos?I am the Voice of Customer Pr...

On June 25, we hosted our Sophos Endpoint Windows Installation: Troubleshooting Common Issues webinar. In this session, we covered how to tackle some common installation issues for Windows devices.  For those unable to attend or are looking to r...

Overview Due to an issue with Salesforce, email replies to support cases are not being received. Support can be contacted through the Sophos Support Portal via case updates or phone.  Product and Environment Sophos Support Portal - Onl...

Central Switch Stacking The product team is pleased to announce the release of Central Switch Stacking. With the introduction of switch stacking in Sophos Central, we’re giving network administrators a way to streamline management, reduce comp...

In this video, we share a step-by-step tutorial for setting up the Sophos NDR integration in AWS. We show you how to add the NDR integration, create a CloudFormation template, download/deploy the template, and access the Sophos Appliance Manager...

On June 24, we hosted our Sophos Wireless 101: Essentials for Modern Wireless Network webinar. In this session, we covered the foundational principles of wireless communications and how it all comes together in Sophos Central. For those unable to att...

Hi Community, Thank you for your contributions to the Sophos v21.5 EAP.  We want to give special thanks to the following community member for being the top contributor to the EAP v21.5 forum:  C3-PO  With Sophos Firewall v21.5 o...

Hello Everyone, Please note that the Sophos Community will undergo scheduled maintenance on Saturday, June 21, starting at 00:00 UTC. During this time, there will be brief outages and service disruptions. Users may be disconnected from the Sopho...

In this video, we show you a step-by-step tutorial on how to set up SD-WAN routes in Sophos Firewall. We demonstrate how to configure an example company network with MPLS gateways connecting branch locations to the head office. Then, we create an SD-...

[Update] Please be advised that the License Compliance Process in the Support Portal has been postponed until the fall of 2025. Our objective is to provide a comprehensive and seamless experience that ensures our customers remain protected. Also see ...

Summary Starting June 18, 2025, Sophos UTM (SG) customers can receive a free 3-month license overlap when migrating to Sophos Firewall (SFOS) with a 3-year Xstream Protection subscription. This offer helps partners manage migration timelines while pr...

It's here!!! We’re excited to announce the availability of the Sophos Email Monitoring System (EMS). EMS is a powerful, monitor-only solution that provides deep visibility into your organization’s email traffic without disrupting delivery...

We're excited to announce that from today, our Internal Attack Surface Management capabilities are now generally available to all existing and any new Managed Risk customers. Customers can download and deploy a virtual appliance (for VMWare or MS...

Sophos Central Wireless Enhancement to Support Multiple Mesh SSIDs For Sophos AP6 Series access point customers the product team is happy to announce the availability of Multiple Mesh SSID support in Sophos Central. Wireless Mesh: AP6 Series access p...

Sophos ZTNA has received a couple of important updates to ease deployment and enhance performance. There is also an important End-of-Life announcement for earlier versions of the Sophos ZTNA gateway that may require some of you to plan an upgrad...

What’s new – Jun 10, 2025 Catching spam is not an exact science. Every antispam engine occasionally detects an email falsely as spam (false positive), or a spam message as not spam (false negative). We encourage customer admins and users ...

In this video, we show you a step-by-step tutorial for setting up the Sophos NDR integration in Microsoft Hyper-V. We show you how to add the NDR integration, configure a virtual switch to mirror traffic, download/deploy the VM image file, and access...

In anticipation of making the Managed Risk Internal Attack Surface Management features generally available to customers, we have made some minor changes to the Managed Risk product layout in Sophos Central.  What to expect? The Settings -> Sc...

This blog post covers some recent and upcoming enhancements to the Central device list. Slide-out device details We have introduced a slide-out for device details. Clicking on a device in the device list will no longer take you to the device details...

Hello Sophos community, This update improves scalability and performance in larger environments with pagination improvements to the Task Queue and Firmware upgrades user interface. It also resolves a number of field reported issues.  Enhancement...

We are pleased to announce a new set of crucial enhancements to one of your favourite features, the QR Code Protection! These updates are designed to not only strengthen the overall security posture but also provide more granularity and better...

Dear Sophos Community, June is here and we’re almost halfway through the year! As we start a brand-new month, here’s a complete list of all the important updates, announcements, and content shared in May in the Sophos Community.We ha...

We are excited to announce that email alerting notifications are now available for the Microsoft 365 Management Activity API integration for both our MDR & XDR customers!If you have already configured email alerts without any specific produc...

Hi Sophos Community, I'm pleased to announce that Sophos Connect 2.4 is now available for all users. This release adds support for EntraID (Formerly AzureAD) SSO for VPN portal and client connections when connecting to SFOS v21.5 or newer firew...

We are excited to announce that we GA'd Microsoft 365 Response actions last week for XDR customers!  The response actions available in Central. Please note: if you are an XDR customer, these are self-serve: you will need to c...

In this video, we walk you through a step-by-step tutorial for setting up the Sophos NDR integration on VMware ESXi. We show you how to add the NDR integration, configure a SPAN port to mirror traffic, download/deploy the VM OVA file, and access the ...

This video is a step-by-step tutorial for deploying a Sophos ZTNA gateway in your environment. We demonstrate how to set up a gateway in the Sophos Cloud and on-premises (Hyper-V), configure policies to set user and condition access, add and launch r...

Sophos Firewall v21.5 is Now Available New innovations and top-requested features Following a very busy and successful early access program, the Sophos Firewall team is pleased to announce that v21.5 is now available to all licensed Sophos partners a...

Troubleshooting tools and tips for cleaner deployments Join us on Wednesday, June 25, 2025, at 2:00 PM UTC for this Sophos Endpoint essential webinar, where we’ll show you how to tackle some common installation issues for Windows devices. Disco...

Learn the foundations of secure wireless Sophos Wireless 101 is your go-to guide for understanding the core concepts behind wireless communications. Join us on June 24, 2025, at 2:00 PM UTC to learn more about wireless security. From foundationa...

Today we are making some new features available into the Managed Risk Internal Attack Surface Public Beta Program. Discovery scans: Discovery scans can be very useful in identifying the internal assets that would typically get picked up by an interna...

In our Staff Spotlights, we get up close and personal with our amazing Sophos team members.Up next is Piyush Bhalodiya, Senior Manager for Data, Reporting, and Business Intelligence Let's Talk Career   1. Can you tell us about your role at Sopho...

In this video, we give you an overview of the Impersonation Protection feature in Sophos Email, including some new enhancements. We explain how Impersonation Protection works, the steps for configuration, how to manage VIPs, and where to view detecti...

What’s new – May 20, 2025 We are excited to introduce a set of powerful new enhancements to Sophos Central Email that will elevate your email security posture. Business Email Compromise (BEC) typically starts with a combination of securit...

In this video, we demonstrate how to quickly migrate Sophos UTM objects into Sophos Firewall using the updated Sophos Migration Utility Tool.Watch the full video here: https://techvids.sophos.com/share/watch/1d2opnN8jDmiN9sVzktpqZ?. ...

Application Control Updates Release Notice This is a notification for the latest Application Control 6.17 data update, which has been rolled out on the 20th of May 2025. If you want to control an application that is not in the list we...